Zimbra Releases/10.1.21
Zimbra Daffodil (v10.1.21) Patch Release
Release Date: Sept 24, 2026
Security Fixes
| Summary |
|---|
| Addressed a stored cross-site scripting (XSS) vulnerability in the Classic Web Client where crafted sender display names could execute malicious script when replying to or forwarding messages with headers excluded. |
| WebDAV authentication logic has been updated to strictly validate token usage types. Pre-MFA tokens are now rejected with an HTTP status, requiring users to fully complete Multi-Factor Authentication before accessing WebDAV resources. |
| Addressed a stored cross-site scripting (XSS) vulnerability in the Classic Web Client where crafted attachment Content-Location headers could execute malicious script when clicked. |
| Fixed a security vulnerability in the self-service password recovery mechanism that could allow an unauthenticated attacker to predict recovery codes and reset a user's password. |
| OpenJDK has been upgraded to version 17.0.19 to fix multiple vulnerabilities.
|
| Updated the NGINX module to align with security standards and improve compliance. |
| Addressed a stored cross-site scripting (XSS) vulnerability in the Modern Web Client that could be triggered through share invitations. |
| Addressed a stored XSS vulnerability in the Classic Web Client that could be triggered through share invitations. |
| Addressed a stored XSS vulnerability in the Classic Web Client that could be triggered by specially crafted email content |
| Addressed a stored XSS vulnerability in the Classic Web Client related to the handling of From addresses in calendar counter-proposals. |
| Fixed a security issue in the OnlyOffice document editing integration that could allow unauthorized file writes and remote code execution under specific conditions. |
| Fixed a server-side JavaScript injection vulnerability in the OnlyOffice integration that could allow an authenticated user to execute commands on the server under specific conditions. |
What's New
Zimbra Collaboration
- Introducing a new Mail Recall feature in the Modern Web App and Zimbra Desktop, allowing users to recall messages after they have been sent. This feature helps prevent unintended communication by recalling the message from the recipient's inbox and providing a notification that the message was recalled. Key Capabilities include Time-controlled Recall and Recipient Notifications.
Modern Authetication
- Per-Domain IdP - SAML Routing: Key capabilities include - Assign distinct IdPs to individual domains, automatically route users to the appropriate IdP, and isolate Service Provider metadata, Entity IDs, and ACS URLs to prevent assertion-validation conflicts.
- Admin Console SAML Setup Wizard: Configure domain-level SAML, import IdP metadata, and manage certificates through the Admin Console. Refer to Admin guide for Details
Modern Web App
Localization & Translations
- This release brings a major localization refresh: Around 6,000 translation issues found through a comprehensive internal review, along with 50-plus issues reported by customers, have been fixed across multiple languages to make the Modern Web App more accurate and natural for users worldwide.
- Modern UI also now supports Bahasa Indonesia (Indonesian) and Filipino (Tagalog), extending its reach to even more users.
Interface & Navigation
- The top navigation bar has been redesigned for a cleaner, more consistent look across every module. Clicking a module icon now resets that view to its default state, so you can jump straight back to your inbox or calendar.
- Tooltips across Mail, Calendar, Contacts, and Briefcase now use a standardized, styled component instead of native browser tooltips, giving a more consistent experience that matches the Zimbra design system.
- New users now get a guided app tour by default, making it easier to find key features early on. You can restart it anytime from Settings > General.
- Quick Reply has been redesigned with a larger composition area, so you can draft replies right within an email thread without losing sight of the conversation. You can still switch to a full compose tab whenever you need more room.
- Folder management is now easier, with a new "+" icon for quick folder creation and a single dialog for creating, editing, and color-coding folders and subfolders.
- You can now redirect an email to another recipient while keeping the original sender, subject, and content intact, so it arrives exactly as it was first received.
- Email Templates is now enabled by default, so you can create, edit, and insert saved responses while composing, replying, or forwarding. Admins can toggle this at the COS or User level via the zimbra-zimlet-email-templates Zimlet.
- When grouping by conversation, you can now expand a thread right in the list view to scan and open individual messages, without opening the full thread.
- Clearly differentiated user experience for Message list density options (Relaxed, Regular, Slim). They are now now look more visually distinct, so it's easier to pick the view that fits how you triage email. Find these under Settings → Viewing Email.
- You can now use the Up and Down arrow keys to move between messages, even with the preview pane off or positioned at the bottom.
Calendar
- Day view now supports viewing multiple calendars side-by-side, each with its own color coding and aligned time slots, making it easier to spot conflicts.
- Overlapping calendar events now have better spacing and visual separation in Day and Week views, so it's easier to tell events apart and click into the right one.
- Event tags are now shown as color-coded indicators directly on event pills instead of a generic icon, making categories easier to spot at a glance.
Storage & Mailbox Management
- The new "Clean Up Account" feature helps you find and manage large emails eating up space — sort by size, review storage insights, and bulk move or delete items to stay within your limits.
- Disk quota information now only shows up when a limit is actually configured, and clicking the quota indicator opens a detailed breakdown of your storage usage.
Security
- S/MIME signature handling now fully validates intermediate certificates, so the full certificate chain is checked and signed emails are trusted across more email clients. Certificate errors are also easier to spot when something goes wrong. Note: After this update, users need to re-upload their S/MIME certificates for the fix to take effect.
Licensing
- LDS now supports routing outbound licensing communications through an HTTP/HTTPS proxy. This applies to license activation, validation, usage reporting, and Zentitle API calls. Refer to Admin guide for details
- Feature Usage & COS Accounting Fixes: Improved feature usage tracking and COS accounting to prevent incorrect license counts and usage overages.
Fixed Issues
Zimbra Collaboration
- An issue where Nextcloud Talk URLs were not generated in calendar appointments has been resolved. Previously, server-side validation incorrectly required a DAV path for Talk API requests, which the Talk Zimlet does not provide. With this fix, Nextcloud Talk integration works as expected, and meeting URLs are correctly generated and added to appointments.
- An issue where deleting large mailboxes via SOAP could lead to data loss and orphaned accounts has been resolved. Previously, if a mailbox deletion exceeded the 300-second proxy timeout, the LDAP entry was removed prematurely while the mailbox cleanup was still in progress. This allowed new accounts to be created with the same name, which then became inaccessible when the original deletion process finally completed and removed the new LDAP entry. With this fix, LDAP entry deletion is now performed only by the actual mailbox server after the mailbox cleanup is fully complete, ensuring account names are not reused until the deletion is finished.
- An issue where an unclosed InputStream could lead to a resource leak during certain IMAP FETCH operations has been resolved. Previously, when an IMAP client (notably Apple Mail on iOS 18) requested byte offsets exceeding the actual size of a message part, a StartOutOfBoundsException occurred without explicitly closing the associated stream. This could lead to a pile-up of orphan file descriptors and extended mailbox lock hold times. With this fix, the stream is properly closed when this exception occurs, ensuring better resource management and server stability. Additionally, the warning message for this condition has been updated.
- An issue where temporary Apache Tika files accumulated in the
/opt/zimbra/jetty_base/workdirectory without being automatically cleared has been resolved. Previously, theseapache-tika-*.tmpfiles could consume significant disk space over time, particularly on larger mailstores. With this fix, the root cause of the file leak has been addressed, and a new cleanup utility,zmcleantika, has been introduced to manage any residual temporary files. The cleanup script at/opt/zimbra/libexec/zmcleantikais scheduled in cron job to run everyday @1am server time.
Modern Web App
- The Forward button stayed disabled when the preview pane was off and only one email was selected. It now enables correctly in all cases.
- Signatures created in the Classic Web App couldn't always be edited or deleted in the Modern Webclient, sometimes creating duplicate "default" signatures. Signature management now works consistently across both apps.
- Deleting emails from mounted shared folders (like Sent or Spam) failed in conversation view. This now works correctly for all mounted shared folders.
- An issue where users were unable to move emails between shared folders in the Modern Web App when folders were mounted individually has been resolved. Previously, move operations would fail when attempting to relocate messages between such folders. With this fix, users can now move emails between mounted shared folders as expected.
- Sorting in saved searches now works correctly in the Modern Web App. Previously, sort controls were unresponsive when viewing saved search results, preventing users from changing the sort field or order. This has now been fixed, ensuring messages can be sorted by any available attribute.
- The Modern Web App interface now remains responsive when using the Print option. Previously, the main webmail window would become unresponsive while the print preview was open in a new tab. This has now been fixed.
- Folder search in the "Move" dialog only showed the subfolder name instead of the full path, making it hard to find the right destination. It now shows the complete folder path.
- Closing an email from a subfolder always redirected users to the Inbox. It now returns them to the subfolder they were viewing.
- Deleting from shared folders now matches Classic Web App behavior: a copy of the deleted message goes to the user's own Trash as well as the owner's, so users can restore it without needing access to the owner's account.
Calendar
- Fixed an issue where Ctrl+C didn't work to copy text from the location field on calendar events. Copying now works as expected.
Localization
- Improved Hungarian translations for field labels and descriptions throughout the Modern Webclient.
Classic Web App
- Emptying the Trash could trigger a false warning that items were still open, blocking the empty action even when nothing was open. This has been fixed.
Zimbra Connector for Outlook
- An issue where Outlook crashed when using the Zimbra Connector for Outlook (ZCO) with two-factor authentication (2FA) enabled has been resolved. Previously, if a user's trusted devices were revoked or if certain 2FA attributes were empty, Outlook could crash instead of prompting for a passcode. This has now been fixed, ensuring the 2FA passcode prompt appears as expected and the application remains stable.
- An issue where the last attachment in an email was missing in Zimbra Connector for Outlook (ZCO) has been resolved. Previously, if a MIME boundary delimiter was not preceded by a new line, the final attachment was not recognized and failed to display in Outlook. This has now been fixed, ensuring all attachments(whose Mime boundary was corrupted) are correctly parsed and visible.
- An issue where Outlook configured with Zimbra Connector for Outlook (ZCO) failed to prompt for a new password after a user's password expired has been resolved. Previously, when a password expired, Outlook would fail to send or receive emails silently without displaying a credential prompt. This has now been fixed, ensuring that ZCO correctly triggers a password change prompt, allowing users to change their credentials and resume email operations as expected.
- An issue in the Zimbra Connector for Outlook (ZCO) where attachments exceeding the server size limit caused a "ghost" state in the compose window has been resolved. Previously, when adding multiple files that collectively exceeded the server's limit, ZCO would display an error, but the compose window would incorrectly appear as if no attachments were added. With this fix, ZCO now uses a dedicated Zimbra dialog to handle oversized attachments. When the limit is exceeded, the oversized files are automatically removed, and a clear notification is displayed.
Exchange Active Sync (EAS)
- An issue where responding to a modified instance of a recurring meeting from an Android device resulted in duplicate calendar entries has been resolved. Previously, accepting a modified instance via Android Gmail or the native calendar could cause both the original and modified instances to appear on the attendee's calendar. With this fix, only the correctly updated instance is displayed after RSVP.
- An issue where an attendee's RSVP to a single instance of a recurring meeting did not reflect on their mobile calendar has been resolved. Previously, when accepting a single occurrence via a mobile device, the status would incorrectly remain as "not responded." With this fix, acceptance status is correctly synchronized and displayed on the attendee's mobile calendar.
- An issue where a deleted recurring meeting instance remained on the calendar of a forwarded recipient has been resolved. Previously, when an organizer deleted a specific instance of a series, it was removed from the original invitee's calendar but persisted for users who had received the invitation via a forward. With this fix, deletions are correctly synchronized and the instance is removed for all participants, including forwarded recipients.
- An issue where forwarding a modified instance of a recurring meeting from an Android device failed with a server error has been resolved. Previously, attempting to forward a single instance that had been modified (e.g., time or subject change) caused a "NumberFormatException" on the server, preventing the action. With this fix, users can successfully forward modified recurring instances from Android devices.
Exchange Web Services (EWS)
- An issue where recurring meetings created in Outlook via EWS displayed incorrect end times in the Zimbra Web Client has been resolved. Previously, the recurrence metadata was incorrectly saved with a one-second duration, causing the start and end times to appear identical. With this fix, the meeting duration is correctly calculated and preserved, ensuring accurate display across all clients.
- An issue where the first instance of a recurring meeting with an attachment would disappear from the Outlook for Mac calendar when scheduled at or after 6:00 PM Mountain Time has been resolved. This was caused by an incorrect UTC normalization during the EWS response generation. The fix ensures that recurrence start dates are correctly derived using the meeting's local timezone, preserving all instances in the calendar.
- An issue where modifying an occurrence of a recurring meeting triggered "Some modified occurrences... may have been changed back" sync errors in Outlook for Mac has been resolved. The fix ensures that the Recurrence-Id is correctly included in the EWS response, eliminating the synchronization warnings.
- An issue where attachments were missing from recurring meeting exceptions in Outlook for Mac has been resolved. Previously, while attachments were visible in the Zimbra Web Client, they failed to sync to the Outlook calendar for attendees. With this fix, attachments are correctly preserved and accessible for all recurring exceptions.
- An issue where the Zimbra Web Client displayed an extra, unexpected all-day instance after an exception was created in Outlook has been resolved. This was caused by incorrect UTC normalization of all-day events in positive-offset timezones (like IST). The fix ensures that logical calendar dates for all-day events are preserved without shifting, maintaining consistency between organizer and attendee calendars.
- An issue where meeting invites sent from a shared calendar displayed the delegate's name instead of the "on behalf of" identity has been resolved. The fix ensures that the From and Sender headers are correctly preserved during MIME normalization, allowing Outlook and the Zimbra Web Client to accurately display the delegation relationship (e.g., "User B on behalf of User A").
Contact
- An issue where setting zimbraHideInGal to TRUE incorrectly suppressed autocomplete suggestions for contacts in external Global Address Lists (GAL) has been resolved. Previously, enabling this attribute hid the account from autocomplete across all GAL sources, including external LDAP or AD sources. With this fix, zimbraHideInGal only affects internal Zimbra LDAP entries, ensuring external GAL contacts remain visible in autocomplete as expected.
Licensing
- An issue where the mailbox incorrectly calculated MAPI license usage for accounts inheriting their Class of Service (COS) through the domain-level zimbraDomainDefaultCOSId has been resolved. Previously, when an account lacked an explicit zimbraCOSId attribute, the usage counting mechanism incorrectly fell back to the built-in "default" COS instead of checking the domain's default COS. This led to inflated license counts and incorrect grace period alerts even when actual usage was within limits. With this fix, LDS correctly respects the full COS inheritance chain, ensuring accurate license accounting for all accounts.
System Engineering
- An issue where mail loops were created when users could set their own email address as a forwarding address has been resolved. Previously, setting a self-forwarding address could lead to mail loops, increased system load, and excessive disk usage. With this fix, Zimbra now prevents users and administrators from configuring a forwarding address that matches the account's own email address or any of its aliases. This validation is case-insensitive and applies across the Modern Web App, Classic Web Client, Admin Console, and CLI. Existing server-side protections continue to handle and block mail loops triggered by filter rules.
Deprecation Notice for Zimbra Server on Ubuntu 18.04 LTS
Ubuntu 18.04 LTS reached end of standard support in May 2023. Zimbra will deprecate support for this operating system starting with the next release. No further updates, patches, or official support will be provided for Ubuntu 18.04 LTS thereafter.
Ubuntu 24.04 LTS support became generally available with Zimbra 10.1.17. We encourage all our customers to move to Ubuntu 24.04 LTS, the latest supported version, for all their future installations and to plan their migration before the next release.
Known Issues
Modern Web app
- In Clean Up view, conversation snippets can show text from a draft instead of the latest sent or received message, because drafts are currently included in the summary. Open the conversation to see the real message history; a proper fix is planned.
Customer reported bugs fixed in 10.1.21
| Ticket ID | Summary |
|---|---|
| ZBUG-5684 | Upgrade OpenJDK to latest version (Current 17.0.20) |
| ZBUG-5674 | German translation Von, An, Betreff |
| ZBUG-5666 | LDS incorrectly counts MAPI license usage for accounts inheriting COS through zimbraDomainDefaultCOSId, causing false MAPI license overconsumption and grace period status despite ZBUG-5591 fix. |
| ZBUG-5665 | Nextcloud Talk / DAV endpoint validation issue on 10.1.20 |
| ZBUG-5654 | Forward Button Disabled in Modern UI When Preview Pane is Off |
| ZBUG-5641 | Thai localization for the Archive function is inconsistent in the webmail interface. |
| ZBUG-5633 | Incorrect Spanish translation in Webclient |
| ZBUG-5632 | Modern UI: Incorrect Italian translation of "Subject". |
| ZBUG-5626 | Unable to remove signature in modern ui which created in classic ui. |
| ZBUG-5607 | ZCO-1951 crashing for the accounts 2FA enabled |
| ZBUG-5595 | Incorrect Hungarian translations in the latest patch (10.1.17) |
| ZBUG-5594 | Search tab does not close on clicking close or click on mail to go back to Inbox |
| ZBUG-5577 | Existing filters not shown in the Web UI in Corp |
| ZBUG-5575 | User cannot delete the emails from Shared account's SPAM and Sent folder using Modern UI when individual folder is mounted. |
| ZBUG-5574 | User cannot move the emails between shared folder using Modern UI when individual folder is mounted. |
| ZBUG-5553 | Czech translations not accurate for Modern UI |
| ZBUG-5552 | Modern UI - Saved search sorting is unresponsive in the modern web client, preventing users from changing sort criteria or order. |
| ZBUG-5535 | Read receipt (MDN) missing In-Reply-To and References headers — does not thread with original message in Outlook/ZCO |
| ZBUG-5516 | ZCO: DoFastShutdown can clear Outlook's shared profile-name from a non-Outlook process (SPH, DllHost, etc.); SetOutlookProfileName("") lacks GetApplicationType()==Outlook guard |
| ZBUG-5515 | ZCO: SPH-denial path logs at SUMMARY level with no rate-limit; produces 86 MB / 65k identical lines in 35 min, making SUMMARY logs unusable for triage |
| ZBUG-5514 | ZCO: SPH ↔ Outlook profile-name coordination fails across sessions; SearchProtocolHost denies itself in an infinite loop |
| ZBUG-5508 | ZCO: Repeated access violation (0xc0000005) in Synchronizer::PerformSyncWithHandler caused by leaked ProgressTask on sync failure |
| ZBUG-5506 | CalDav - Mobile calendar invite declined when it was accepted through iphone |
| ZBUG-5505 | The webmail interface becomes unresponsive when the print window is opened in a new tab. |
| ZBUG-5504 | Modern UI: Unable to copy content from location field using keyboard shortcut Ctrl+c. |
| ZBUG-5497 | Modern UI: While moving the message, the search result window of folder selection do not display full folder path for destination folder |
| ZBUG-5488 | Large Account deletion using SOAP Call getting timeout and leading to data loss and orphan accounts |
| ZBUG-5422 | Incorrect Thai Translation of “Share” as “หุ้น” in Briefcase Menu (Classic and Modern UI) |
| ZBUG-5399 | Modern UI Displays Folder Names in English in Search Results Despite German Language Setting |
| ZBUG-5385 | Incorrect Norwegian Translation in webmail Login Page |
| ZBUG-5382 | Search Tab does not close on Clicking the X (Close button) on ZD 4.48 |
| ZBUG-5372 | Translation issues in slovenian language on Modern UI |
| ZBUG-5364 | Potential InputStream resource leak in ImapPartSpecifier on StartOutOfBoundsException |
| ZBUG-5303 | Error when emptying Trash folder in Classic View |
| ZBUG-5290 | Less attachments displaying in ZCO |
| ZBUG-5208 | Spam Reports contain a null returnpath header |
| ZBUG-5184 | Incorrect Spanish translation in Admin Console |
| ZBUG-5182 | Classic UI - French transalation issue |
| ZBUG-5179 | zimbraHideAliasesInGal not hiding alias using alias search |
| ZBUG-5147 | Removing LDAP server and adding again loss of data in MMR setup |
| ZBUG-5073 | ModernUI: Incorrect French Translation on webclient |
| ZBUG-5045 | ZCO - Password Expiration / New Password Prompt Not Appearing After User Password Expires |
| ZBUG-4975 | zimbraHideInGal - Auto complete not working for external gal |
| ZBUG-4960 | L10N: Need to translate the menu items in the pull-down of Table element in the HTML editor |
| ZBUG-4950 | Zimbra - Mail Forward prevention/mitigation |
| ZBUG-4783 | Modern UI - Incorrect Polish Translation, Text Display Issues in Polish Translation, and Malfunction in Typing Custom Date in Search Bar |
| ZBUG-4715 | Missing Tilde in Spanish Accented Words After Updating to Zimbra 10.1.5_GA |
| ZBUG-4593 | apache-tika tmp files under /opt/zimbra/jetty_base/work not clearing automatically |
| ZBUG-4533 | Wrong Catalan translation in calender. |
| ZBUG-4505 | incorrect translation in french language. |
| ZBUG-4502 | Translation errors with Slovak language |
| ZBUG-4309 | Need translation in Japanese: tooltip of "Chat and Video" |
| ZBUG-4269 | Wrong translation to portuguese Brasil (pt_BR) in login page for word "registered" |
| ZBUG-4262 | Polish Language translation issue |
| ZBUG-3948 | French translation issue on Zimbra Desktop "Today" and "yesterday" is not translating. |
| ZBUG-3928 | Wrong Polish translations on admin console |
| ZBUG-3880 | Translations to Slovenian language are very poor for Modern version |
| ZBUG-3848 | Wrong translation of invitee |
| ZBUG-3810 | Wrong Ukrainian translation on Admin Console and login page |
| ZBUG-3727 | Deleting an e-mail from a shared folder leads to different behavior depending on Classic and Modern UI |
| ZBUG-3700 | Modern UI, Incorrect translations in the Polish language |
| ZBUG-3695 | (ZCO) Attachments that could not be added suddenly appear after a completely different small attachment is added |
| ZBUG-3673 | Modern UI: When a subfolder's email is closed, it returns to the Inbox (parent folder) rather than staying on the subfolder. |
| ZBUG-3636 | Wrong translation of recorrency in event in Portuguese - Brazilian |
| ZBUG-3602 | Wrong Polish language translations |
| ZBUG-3500 | Incorrect English AND German labels related to automated message cleanup in Modern UI |
| ZBUG-3496 | Wrong German translation related to displayname when creating new contact in Modern UI |
| ZBUG-3493 | Wrong German translation related to autocomplete in settings of Classic and Modern UI |
| ZBUG-3459 | Wrong Polish translation in the "Share revoked" notification |
| ZBUG-3416 | Potential Security Flaw: Zimbra-Proxy advertises "SASL PLAIN" in POP3 CAPA even with 'zimbraReverseProxyPop3StartTlsMode only' |
| ZBUG-3266 | Missing German translation in the Offline-Mode Zimbra Desktop. |
| ZBUG-3191 | Wrong translations in the share notification. |
| ZBUG-3127 | French translation problem in calendar |
| ZBUG-3099 | Translation error on Calendar of Zimbra Web Client in Portuguese. |
| ZBUG-2890 | French Translation issues |
| ZBUG-2682 | L10N: unnatural translation in Japanese of the date notation in the Repeat calendar event (start date) |
| ZBUG-2439 | The words like Yesterday and Today are no translated to Polish in modern UI |
| ZBUG-1902 | Italian translation is incorrect with "Forgot password" |
Packages
The package lineup for this release is:
zimbra-patch -> 10.1.21.1789536217-2 zimbra-lds-patch -> 10.1.21.1789990689-1 zimbra-mta-patch -> 10.1.21.1789536217-1 zimbra-onlyoffice-patch -> 10.1.21.1789536217-1 zimbra-proxy-patch -> 10.1.21.1790049707-1 zimbra-ldap-patch -> 10.1.21.1789536217-1 zimbra-core-components -> 10.1.8-1zimbra10.0b1 zimbra-ldap-components -> 10.1.5-1zimbra10.0b1 zimbra-openjdk -> 17.0.19-1zimbra8.8b1 zimbra-openjdk-cacerts -> 1.0.13-1zimbra8.7b1 zimbra-nginx -> 1.24.0-1zimbra8.8b8 zimbra-proxy-components -> 1.0.16-1zimbra8.8b1 zimbra-zco -> 1952.1788165072-1 zimbra-license-daemon -> 1.0.0.1789971425-1 zimbra-modern-ui -> 4.50.0.1787912755-1 zimbra-modern-zimlets -> 4.50.0.1787912755-1 zimbra-zimlet-additional-signature-setting -> 11.0.0.1787903466-1 zimbra-zimlet-admin-chat -> 2.2.0.1787903466-1 zimbra-zimlet-admin-mail-recall -> 1.0.0.1787903466-1 zimbra-zimlet-ads -> 10.0.0.1787903466-1 zimbra-zimlet-attachment-missing-alert -> 2.0.0.1787903466-1 zimbra-zimlet-calendar-subscription -> 9.0.0.1787903466-1 zimbra-zimlet-chat -> 14.0.0.1787903466-1 zimbra-zimlet-classic-chat -> 3.2.0.1787903466-1 zimbra-zimlet-classic-document-editor -> 2.5.0.1787903466-1 zimbra-zimlet-classic-set-default-client -> 1.6.0.1787903466-1 zimbra-zimlet-classic-unsupportedbrowser -> 4.3.0.1787903466-1 zimbra-zimlet-custom-fonts -> 3.0.0.1787903466-1 zimbra-zimlet-date -> 11.0.0.1787903466-1 zimbra-zimlet-deceptive-link-detector -> 3.0.0.1787903466-1 zimbra-zimlet-desktop-auto-update -> 2.0.0.1787903466-1 zimbra-zimlet-disable-screen-capture -> 2.0.0.1787903466-1 zimbra-zimlet-document-editor -> 15.0.0.1787903466-1 zimbra-zimlet-download-email -> 3.0.0.1787903466-1 zimbra-zimlet-duplicate-contacts -> 8.0.0.1787903466-1 zimbra-zimlet-email-defanger -> 3.0.0.1787903466-1 zimbra-zimlet-email-reminder -> 2.0.0.1787903466-1 zimbra-zimlet-email-templates -> 3.0.0.1787903466-1 zimbra-zimlet-emptysubject -> 4.0.0.1787903466-1 zimbra-zimlet-external-setting-links -> 2.0.0.1787903466-1 zimbra-zimlet-import-export-ics -> 3.0.0.1787903466-1 zimbra-zimlet-install-pwa -> 8.0.0.1787903466-1 zimbra-zimlet-mail-recall -> 1.0.0.1787903466-1 zimbra-zimlet-mail-translate -> 2.0.0.1787903466-1 zimbra-zimlet-modern-welcometour -> 7.0.0.1787903466-1 zimbra-zimlet-org-chart -> 6.0.0.1787903466-1 zimbra-zimlet-personal-notes -> 2.0.0.1787903466-1 zimbra-zimlet-preventive-ooo -> 3.0.0.1787903466-1 zimbra-zimlet-privacy-protector -> 7.0.0.1787903466-1 zimbra-zimlet-restore-contacts -> 8.0.0.1787903466-1 zimbra-zimlet-secure-mail -> 6.0.0.1787903466-1 zimbra-zimlet-set-default-client -> 12.0.0.1787903466-1 zimbra-zimlet-sideloader -> 11.0.0.1787903466-1 zimbra-zimlet-signature-template -> 2.0.0.1787903466-1 zimbra-zimlet-spy-blocker -> 3.0.0.1787903466-1 zimbra-zimlet-tlp -> 3.0.0.1787903466-1 zimbra-zimlet-user-feedback -> 8.0.0.1787903466-1 zimbra-zimlet-user-sessions-management -> 12.0.0.1787903466-1 zimbra-zimlet-voice-composer -> 2.0.0.1787903466-1 zimbra-zimlet-web-search -> 6.0.0.1787903466-1 zimbra-extension-mail-recall -> 1.0.0.1787122522-1 zimbra-timezone-data -> 4.0.0.1787913329-1 zimbra-mbox-admin-console-war -> 10.1.21.1787915255-1 zimbra-mbox-webclient-war -> 10.1.21.1789476131-1 zimbra-mbox-store-libs -> 10.1.21.1787927385-1 zimbra-mbox-ews-service -> 10.1.21.1787855547-1 zimbra-license-daemon -> 1.0.0.1785820552-1 zimbra-license-tools -> 10.1.21.1787993311-1 zimbra-license-extension -> 10.1.21.1788134275-1 zimbra-common-core-jar -> 10.1.21.1789534393-1 zimbra-common-mbox-conf-attrs -> 10.1.21.1787920322-1 zimbra-common-mbox-conf-msgs -> 10.1.21.1787920297-1 zimbra-zimlet-nextcloud-talk -> 1.0.0.1788180435-1 zimbra-zimlet-nextcloud -> 1.0.18.1788180716-1 zimbra-onlyoffice -> 1.0.1789472096-1
Patch Installation
Please refer to below link to install 10.1.21 (Sept 24 2026):
Quick note: Open Source repo
The steps to download, build, and see our code via Github can be found here: https://github.com/Zimbra/zm-build
