Zimbra 9.0.0 “Kepler” Patch 2

Hello Zimbra Friends, Customers & Partners,

Patch 2 is here for the Zimbra 9.0.0 “Kepler” GA release, and it includes Security Fixes, What’s New, Fixed Issues and Known Issues as listed in the release notes.

Security Fixes

Summary CVE-ID CVSS Score Zimbra Rating Fix Patch Version
XSS through malicious JS embedded in Mail Message or Calendar Event CVE-2020-11737 3.1 Minor 9.0.0 P2

Patch Installation

For Zimbra 9.0.0 patches, you don’t need to download any patch builds. The patch packages can be installed using Linux package management commands. Please refer to the release notes for Zimbra 9.0.0 Patch 2 installation on Red Hat and Ubuntu platforms.

Note: Installing a zimbra-patch package only updates the Zimbra core packages.

Many thanks,
Your Zimbra Team

Comments are closed.

Copyright © 2022 Zimbra, Inc. All rights reserved.

All information contained in this blog is intended for informational purposes only. Synacor, Inc. is not responsible or liable in any manner for the use or misuse of any technical content provided herein. No specific or implied warranty is provided in association with the information or application of the information provided herein, including, but not limited to, use, misuse or distribution of such information by any user. The user assumes any and all risk pertaining to the use or distribution in any form of any subject matter contained in this blog.

Legal Information | Privacy Policy | Do Not Sell My Personal Information | CCPA Disclosures