Results 1 to 2 of 2

Thread: Applyinf new security patch

  1. #1
    Join Date
    Mar 2007
    Posts
    84
    Rep Power
    8

    Default Applying new security patch

    A quick heads-up for people about to apply the recently announced patch (http://www.zimbra.com/forums/announc...ity-issue.html) using the commands listed in that run-down: the commands as currently presented try to move the old versions of the files to a new location without first creating it. If following the method in that forum post, the following:
    Code:
    cd /tmp;
    curl -O http://files.zimbra.com/downloads/security/dom4j-1.5.jar;
    mv /opt/zimbra/lib/jars/dom4j-1.5.jar /opt/zimbra/save-07012009/dom4j-1.5-lib.jar;
    mv /opt/zimbra/jetty-6.1.5/common/lib/dom4j-1.5.jar /opt/zimbra/save-07012009/dom4j-1.5-common.jar;
    cp /tmp/dom4j-1.5.jar /opt/zimbra/lib/jars/dom4j-1.5.jar;
    cp /tmp/dom4j-1.5.jar /opt/zimbra/jetty-6.1.5/common/lib/dom4j-1.5.jar;
    should become:
    Code:
    cd /tmp;
    curl -O http://files.zimbra.com/downloads/security/dom4j-1.5.jar;
    mkdir /opt/zimbra/save-07012009;
    mv /opt/zimbra/lib/jars/dom4j-1.5.jar /opt/zimbra/save-07012009/dom4j-1.5-lib.jar;
    mv /opt/zimbra/jetty-6.1.5/common/lib/dom4j-1.5.jar /opt/zimbra/save-07012009/dom4j-1.5-common.jar;
    cp /tmp/dom4j-1.5.jar /opt/zimbra/lib/jars/dom4j-1.5.jar;
    cp /tmp/dom4j-1.5.jar /opt/zimbra/jetty-6.1.5/common/lib/dom4j-1.5.jar;
    (note: the above is for 5.x, the relevant change is needed for the other versions too)
    Last edited by dspillett; 07-03-2009 at 04:39 AM. Reason: Typos

  2. #2
    Join Date
    Jun 2009
    Posts
    13
    Rep Power
    6

    Default

    Also, if your Zimbra is new enough to have this command (5+ I believe) you can do

    su - zimbra
    zmmailboxdctl stop
    zmmailboxdctl start

    To restart just the mailbox service without restarting all services.

    This is not official Zimbra advice but worked for me.

Similar Threads

  1. Critical Security Issue
    By jholder in forum Announcements
    Replies: 0
    Last Post: 07-02-2009, 12:45 PM
  2. [SOLVED] Zimbra logwatch.
    By nishith in forum Administrators
    Replies: 5
    Last Post: 06-10-2009, 05:42 PM
  3. DelegateAuth in audit.log
    By Krishopper in forum Administrators
    Replies: 2
    Last Post: 05-17-2007, 06:08 AM
  4. High Performance, Security, Redundancy
    By gjhorne in forum Installation
    Replies: 1
    Last Post: 03-31-2007, 12:29 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •