[LMStone]

Originally Posted by Hubert

I would highly recommend patching ASAP rather than waiting for the next release (I discovered the vulnerabiliy).

You just have to replace 2 JAR files and do zmmailboxdctl stop/start (not necessary to restart all services if your version has zmmailboxdctl).

Hubert,

As a Premiere Zimbra Hosting provider and erstwhile Forum Moderator I just want to say a very sincere and hearty "thank you!" publicly to you for discovering this, and for the very professional manner in which you and everyone else pursued a speedy and easy-to-implement solution.

It is very, very much appreciated!

Thanks again,
Mark

P.S. Has Zimbra offered you a job yet? (Only half joking here...)