Hello Zimbra Friends, Customers & Partners,
Zimbra 9.0.0 “Kepler” Patch 3 and 8.8.15 “James Prescott Joule” Patch 10 are here.
For Zimbra 8.8.8 and above, you don’t need to download any patch builds. The patch packages can be installed using Linux package management commands. Please refer to the respective release notes for patch installation on Red Hat and Ubuntu platforms.
Note: Installing a zimbra-patch package only updates the Zimbra core packages.
RHEL (Red Hat Enterprise Linux) 8 support (Beta)
We are nearing the end of our extensive QA cycle for this major upgrade. Watch for the GA announcement in an upcoming patch release.
Zimbra 9.0.0 “Kepler” Patch 3
Patch 3 is here for the Zimbra 9.0.0 “Kepler” GA release, and it includes Security Fixes, What’s New, Fixed Issues, and Known Issues as listed in the release notes.
Security Fixes
| Summary | CVE-ID | CVSS Score | Zimbra Rating | Fix Patch Version |
|---|---|---|---|---|
| Unrestricted Upload of File with Dangerous Type | CVE-2020-12846 | 4.3 | Minor | 9.0.0 P3 |
Patch Installation
Please refer to the release notes for Zimbra 9.0.0 Patch 3 installation on Red Hat and Ubuntu platforms.
Zimbra 8.8.15 “James Prescott Joule” Patch 10
Patch 10 is here for the Zimbra 8.8.15 “James Prescott Joule” GA release, and it includes Security Fixes, What’s New, Fixed Issues, and Known Issues as listed in the release notes.
Security Fixes
| Summary | CVE-ID | CVSS Score | Zimbra Rating | Fix Patch Version |
|---|---|---|---|---|
| Unrestricted Upload of File with Dangerous Type | CVE-2020-12846 | 4.3 | Minor | 8.8.15 P10 |
Patch Installation
Please refer to the release notes for Zimbra 8.8.15 Patch 10 installation on Red Hat and Ubuntu platforms.
Many thanks,
Your Zimbra Team
Zimbra Connector for Outlook v 9.0.0.1872 is not available on the download page….
Thanks for letting us know, Erik. I’ll check into that for you and get it posted.