Search found 2204 matches

by Klug
Thu Feb 08, 2018 5:22 pm
Forum: Administrators
Topic: Insane cpu usage by zmmailboxd
Replies: 26
Views: 6612

Re: Insane cpu usage by zmmailboxd

Are the users using the web interface or IMAP or a mix?
Is NIO enabled (in case they're using IMAP)?
by Klug
Thu Jan 25, 2018 1:24 pm
Forum: Installation and Upgrade
Topic: CVE-2017-8802 Zimbra Collaboration Suite - Stored Cross-Site Scripting
Replies: 32
Views: 5864

Re: CVE-2017-8802 Zimbra Collaboration Suite - Stored Cross-Site Scripting

The point was raised to Zimbra (France) and this forum (and Zeta ML) more than 10 days ago. The answer should have been given in less than 15 minutes. Anyone working on "support" or "product management" or "dev management" should know if a supported version of their sof...
by Klug
Wed Jan 24, 2018 11:23 am
Forum: Installation and Upgrade
Topic: NG backup - disable old backup?
Replies: 2
Views: 613

Re: NG backup - disable old backup?

If your customers are using IMAP, I would not upgrade yet (see all the 8.8.x imapd/mailboxd/lock issues in the forum).

I think you have to use backup-NG, even if the old CLI tools are still here (for restore purpose).
viewtopic.php?f=59&t=62410
by Klug
Wed Jan 24, 2018 9:30 am
Forum: Installation and Upgrade
Topic: CVE-2017-8802 Zimbra Collaboration Suite - Stored Cross-Site Scripting
Replies: 32
Views: 5864

Re: CVE-2017-8802 Zimbra Collaboration Suite - Stored Cross-Site Scripting

I'm not that surprised.

However, the PM is alive.
He reads/posts in this forum and elsewhere (blog post two days ago) so I thought maybe...
by Klug
Tue Jan 23, 2018 8:04 am
Forum: Installation and Upgrade
Topic: CVE-2017-8802 Zimbra Collaboration Suite - Stored Cross-Site Scripting
Replies: 32
Views: 5864

Re: CVE-2017-8802 Zimbra Collaboration Suite - Stored Cross-Site Scripting

More than a week later, no news from Synacor, Zimbra France nor the PM...
by Klug
Wed Jan 17, 2018 10:58 am
Forum: Installation and Upgrade
Topic: 8.8.6 IMAP failures
Replies: 5
Views: 1437

Re: 8.8.6 IMAP failures

Is NIO enabled?
by Klug
Wed Jan 17, 2018 9:12 am
Forum: Installation and Upgrade
Topic: CVE-2017-8802 Zimbra Collaboration Suite - Stored Cross-Site Scripting
Replies: 32
Views: 5864

Re: CVE-2017-8802 Zimbra Collaboration Suite - Stored Cross-Site Scripting

Barry, as I said on the Zeta-Users mailing-list, I'm not sure about 8.6P8 being vulnerable or not. There are seven (7) different CWE-79 type for vulnerabilities discovered since last 8.6 patch, with different CVE numbers (so they're in different part of the code). The patch (by Wolfy) you're talking...
by Klug
Tue Jan 16, 2018 8:18 am
Forum: CalDAV / CardDAV / iSync
Topic: caldav, carddav does not work any more
Replies: 10
Views: 5651

Re: caldav, carddav does not work any more

Are the publicservice* variables set for the domain (name, port, protocol)?
by Klug
Fri Jan 12, 2018 12:51 pm
Forum: Installation and Upgrade
Topic: CVE-2017-8802 Zimbra Collaboration Suite - Stored Cross-Site Scripting
Replies: 32
Views: 5864

Re: CVE-2017-8802 Zimbra Collaboration Suite - Stored Cross-Site Scripting

Checked a little further (thanks to Malte), 8.6 is actually vulnerable (the bad code is in).

This is insane.

Go to advanced search