[SOLVED] Update Critical Security Issue 722009

[cedbl]

Hi
I have 4.5.10 on ubuntu
I executed step for 4.5
but when i did zmcontrol start
the first service (ldap) didn't start
it asked me for password
zmcontrol status gave me this message
Exception in thread "main" java.lang.NoClassDefFoundError org/dom4j/DocumentException
Unable to determine enabled service read from cache

so now i have revert my server to original state and closed https access to zimbra to be protected from this security issue

could you help me please?

[phoenix]

You really should not be on a version of Zimbra that is this old, an early upgrade to the current release is strongly advised.

You should also post some details of any erros you find in the log files.

[cedbl]

You really should not be on a version of Zimbra that is this old, an early upgrade to the current release is strongly advised.

Yes but i found step for 4.5 and so i hoped to fix the issue

However we are going to upgrade to 5 edition in next weeks
As i use apop for almost all users in the middle time i stopped https web access from internet
Is it sufficient ?

Th

[phoenix]

Closing https & ssh access from outside your lan should be sufficient. If you wish to pursue the problem then post details of any errors you see in the logs. I also have to ask the obvious question, did you followd the steps exactly as described and can you post the exact commands you ran?

[cedbl]

If you wish to pursue the problem then post details of any errors you see in the logs.

Thanks now i haven't logs because i tried in snap mode and then i reverted to original state

I also have to ask the obvious question, did you followd the steps exactly as described and can you post the exact commands you ran?

[/QUOTE]

Oh i hope it. I controlled every step but all is possible
i did steps 2. [Perform commands as root, sudo] as root


step by step (without semicolon

and so on

should i retry?

[phoenix]

step by step (without semicolon

and so on

should i retry?

If you wish to try again and have the time, it's up to you. If you do I'd like to to 'su -' to get to root and run the commands there and post each command and it's output and also any errors in the log files. If you'd rather wait for your upgrade I'd understand.

[cedbl]

If you wish to try again and have the time, it's up to you.

Was my mistake
now i have pasted commands and all is ok

Thanks