Yesterday, Zimbra released updates to Zimbra Collaboration, both the 8.0.x and 8.5.x trees. Security These updates address the OpenSSL security advisory dated October 15 and provide a partial fix for POODLE (due to the need for both client and server changes). Zimbra Collaboration 8.0.9 and 8.5.1 update the OpenSSL libraries for nginx, OpenLDAP and Postfix […]
Author Archive | Matthew Lewis
POODLE and SSLv3
This week has brought about the latest security vulnerability. Google’s Thai Duong, Krzysztof Kotowicz, and Bodo Möller made the vulnerability — POODLE (Padding Oracle On Downgraded Legacy Encryption) — public on Tuesday, October 14, 2014. POODLE is a padding oracle attack affecting Secure Sockets Layer (SSL) version 3 and in particular, CBC-mode ciphers. This vulnerability […]
The Shellshock Flaw
***Security Alert*** [Update 2 | September 30, 2014, 9:10am CST] Apple has released at update. [Update 1 | September 26, 2014, 11:40am CST] Red Hat has released a full patch. [Original Post | September 25, 2014, 1:45pm CST] Zimbra is aware and has been closely monitoring the developments of the Shellshock vulnerability. At this time, […]
Zimbra Customers Named Finalists for Next Generation Customer Experience Award
So often, corporate blogs post about themselves, market trends, products and other assorted topics. What is often forgotten, unfortunately, is the one topic that matters the most, customers. A company’s journey to serve customers can easily be derailed by other areas of interest, but customers come first, period. And, as Zimbra’s CEO Patrick Brandt said […]
Forums.zimbra.com Incident and Resolution
On Sunday, August 31, Zimbra’s information security and technology team noticed unusual activity on the Zimbra vBulletin forum on Zimbra.com. We immediately took steps to limit the impact of the malicious activity. This did not affect customer, partner or employee data. This was not a breach of Zimbra products. Immediate action was taken to ensure […]
August Partner News
It has been a busy month for partner related press. We announced three, geographically diverse partner relationships. While all these partners serve customers who have different needs or demands, there is a common thread: the delivery of secure, flexible unified collaboration software. We are excited about these announcements, and the growing Zimbra partner ecosystem. Scality […]