Hello Zimbra Partners, Customers & Friends, In the latest Zimbra patch, Zimbra 9.0.0 “Kepler” Patch 13 and 8.8.15 “James Prescott Joule” Patch 20, the following packages are now GA: OpenSSL 1.1.1h support for TLS 1.3. OpenSSL 1.1.1h with FIPS module support. Postfix 3.5.6 support for TLSv1.3 Nginx 1.19.0 support for TLSv1.3 Why is this important […]
Archive | Security & Privacy
Zimbra Admin Reminder … Block “memcrashd” Port 11211
By Gayle Billat on July 9, 2020 in Product News, Community, Education, Open Source, PowerTips – Admins, Product Updates, Security & Privacy, Zimbra Server
Hello Zimbra Friends & Admins, This is a friendly reminder that Zimbra memcached may face the “memcrashd” attack on port 11211. By default, memcached listens on a server IP address that is accessible on the network and via the internet if there is no firewall. If your Zimbra memcache servers are behind a firewall, we […]
Zimbra Wiki to Latest Patches & More!
By Gayle Billat on June 26, 2019 in Product News, PowerTips – Admins, Product Updates, Security & Privacy
Hello Zimbra Friends, Looking for the latest Zimbra Patch? This Zimbra wiki page lists all Zimbra product releases with a link to the current Patch: https://wiki.zimbra.com/wiki/Zimbra_Releases Click a Patch link for additional details + installation instructions. Important Patch install info: Patches are cumulative, so you usually don’t need to install any prior patches. […]
[REPOST] Recent Zimbra XXE / SSRF Vulnerability Disclosure
This is a reposting of Rene’s original blog announcement on March 18, 2019. Please read and be sure that your Zimbra Patches are up-to-date! Hello Zimbra Friends, Background The Zimbra Security team has been working with security researcher An Trinh in advance of his recently-published blog post. In the blog, Trinh details his findings regarding […]
Install Zimbra Patches!
Zimbra releases software patches about every 4 weeks. Please install these patches … they are IMPORTANT to keep your Zimbra environment running smoothly. Patches address security vulnerabilities, software improvements, bug fixes and so much more. If you don’t install every patch, your Zimbra deployment could be at risk. Click here to see the latest Zimbra […]
Want Data Sovereignty + Regional Regulation Peace of Mind?
By Gayle Billat on February 13, 2019 in Company News, Customer Stories, Data Sovereignty, Security & Privacy
Zimbra customers do. They want to… Host their own communications for improved confidentiality Have complete control over all settings Be able to customize the domain name of their messaging Our customers have always valued Zimbra’s security and privacy features. Now we are finding that more and more of our customers are choosing Zimbra for data […]