Results 1 to 1 of 1

Thread: 4.5.4: Security Update Available

Hybrid View

  1. #1
    Join Date
    Oct 2005
    Location
    Thatcher, AZ
    Posts
    5,606
    Rep Power
    21

    Exclamation 4.5.4: Security Update Available

    As we posted last week, there is a vulnerability in ZCS 4.5.4 and lower that can allow remote code execution on a unpatched system.

    Please see this thread on how to close the vulnerability yourself:
    http://www.zimbra.com/forums/showthread.php?t=8365

    Some users would rather wait for an official update. We originally said that we would introduce it with 4.5.5, however, we felt the need to release a patched update so that new users would download the patched version.

    The 4.5.4-20070418 release fixes a security vulnerability within the ZCS. This is the same security vulnerability mentioned in previous e-mails and forum discussions.

    The elimination of this vulnerability is the only difference between this release and the 4.5.4 release. Customers may upgrade from 4.5.4 or prior releases to this release, or they can patch their systems as explained previously to eliminate the vulnerability.

    We strongly urge all users who have not yet upgraded to 4.5.4 to do so, as this vulnerability is present in all previous version of ZCS.

    If you have patched your system there is no additional security benefit to installing 4.5.4-20070418.

    Thanks,
    Zimbra Forums & Support Teams

    Release Notes: http://www.zimbra.com/pdf/Zimbra%20O...es%204.5.4.pdf
    Last edited by jholder; 04-27-2007 at 10:33 AM.

Similar Threads

  1. DelegateAuth in audit.log
    By Krishopper in forum Administrators
    Replies: 2
    Last Post: 05-17-2007, 05:08 AM
  2. i am so tired for zimbra update too quickly!!
    By nxzwt in forum Administrators
    Replies: 7
    Last Post: 05-08-2007, 09:47 AM
  3. Replies: 0
    Last Post: 03-31-2007, 12:20 AM
  4. High Performance, Security, Redundancy
    By gjhorne in forum Installation
    Replies: 1
    Last Post: 03-30-2007, 11:29 PM
  5. Install on FC3 (or 4)
    By scottpledger in forum Installation
    Replies: 2
    Last Post: 10-07-2005, 11:49 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •