Zimbra Releases/10.1.8
Zimbra Daffodil (v10.1.8) Patch Release
Release Date: May 15, 2025
Check out the Things to know before you upgrade sections for this version of Zimbra Collaboration.
End of Life (EOL) Notice - ZCS 9.0 & 10.0
ZCS 9.0 is set to reach its End of Life on June 30, 2025, and ZCS 10.0 is set to reach End of General Support on June 30, 2025. No further updates will be provided after this date. Customers using these versions are advised to plan their migration to the 10.1 version to ensure continued security updates and access to the latest features.
For assistance during this transition, our support team is available to address any inquiries.
10.1 is the active and supported version.
Deprecation of Zimbra Server on RHEL/CentOS/Oracle 7 OS
RHEL/CentOS 7 reached end-of-life (EOL) in June 2024 and Oracle 7 in December 2024. Zimbra will deprecate support for these operating systems following the release of Zimbra 10.1.9 on 1 July 2025. After this release, no further updates, patches, or official support will be provided for RHEL/CentOS/Oracle 7 operating systems. We encourage all our customers to use RHEL/Rocky/Oracle Linux 9 for all their future installations.
Things to know before you upgrade
Changes to SOAP API
We have made updates to the SOAP API affecting the endpoints: SendMsg, SaveDraft, and SecureSendMsg. If you have any custom implementations using these APIs, please review and incorporate the necessary changes to ensure compatibility with the updated behavior.
For details, refer to API reference documentation.
Changes to Licensing System
To upgrade to version 10.1.8 from 10.1.3 or before, it is important to ensure that you are using the latest version of the zimbra-lds-patch package. After upgrading to 10.1.8, you must reactivate the license to maintain synchronization. Please refer to patch installation for LDS patch update steps.
To reactivate the license, execute the following command as zimbra user:
zmlicense -a <license_key>
Security Fixes
| Summary | CVE-ID | CVSS Score |
|---|---|---|
| Addressed a denial of service (DoS) vulnerability that could lead to service disruptions. A new local config attribute, ajax_uri_max_assets_requests_allowed has been added. | ||
| The ClamAV package has been upgraded to version 1.0.8 to fix multiple vulnerabilities. | CVE-2025-20128 CVE-2024-20505 | 5.3 7.5 |
What's New
Zimbra Collaboration
- Introducing a new feature, Delivery Status Notification (DSN). This feature allows users to receive success or failure notifications for sent emails. Admins can enable or disable DSN at the COS or Account level using a new LDAP attribute "zimbraFeatureDeliveryStatusNotificationEnabled", which is disabled by default.
Modern Web App
General
- The Undo (Ctrl+Z) functionality is now available when composing emails in plain text mode in the Modern UI, allowing users to easily revert recent changes while writing.
Chat
- Zimbra Chat is Now Available in Classic UI
Zimbra Chat is a secure, real-time messaging solution integrated into the Zimbra Collaboration, designed to enhance team communication while adhering to Zimbra’s core principles of privacy, data sovereignty, and user control. This chat service is offered in two distinct variants: Basic Chat: A lightweight 1:1 messaging solution, ideal for users who need quick, person-to-person communication embedded within the Classic UI. Advanced Chat: A full-featured messaging platform, enabling threaded group conversations, channels, and additional collaboration tools. Both variants are integrated directly into Zimbra’s Classic Web Client (Classic UI) and support secure on-premises deployment. For detailed instructions on installation, licensing, admin settings, FAQs, and troubleshooting refer to the Administrator’s Guide for Zimbra Chat. For help using chat features such as direct messages, channels, and notifications refer to the User’s Guide for Zimbra Chat. Both these guides are under the Chat Resources section at: https://www.zimbra.com/product/documentation/
Fixed Issues
Zimbra Collaboration
- Fixed an issue where users were unable to download attachments from the web client if the "zimbraFeatureExportFolderEnabled" setting was set to FALSE at the user or COS level. Attachment downloads now work correctly regardless of this setting.
- Fixed an issue where the "zmerror_upstream_502.html" and "zmerror_upstream_504.html" files were missing. These have now been added to the "zimbra-nginx" package. The updated packages "zimbra-nginx" and "zimbra-proxy-components" will be installed automatically post the upgrade.
ActiveSync
- After upgrading from Zimbra 9.0.0 P42 to 10.0.10, calendar events created in the Classic Web UI and edited on iOS devices failed to sync properly, causing errors in ActiveSync. Updated synchronization logic ensures calendar events are edited on iOS to sync correctly.
- An issue was identified where syncing multiple shared mail folders (typically more than 9–10) via ActiveSync on mobile clients (e.g., Android Gmail, iOS Mail) could cause the sync process to hang. This issue has been resolved to ensure smooth and complete synchronization of all shared folders across supported devices.
Licensing
- Fixed an issue where disabling "zimbraIsDelegatedAdminAccount" on an account caused a system failure with an error. The update ensures delegated admin account changes are handled without any errors.
Packages
The package lineup for this release is:
zimbra-patch -> 10.1.8.1746434837-2 zimbra-lds-patch -> 10.1.8.1746434837-1 zimbra-mta-patch -> 10.1.8.1746434837-1 zimbra-onlyoffice-patch -> 10.1.8.1746434837-1 zimbra-proxy-patch -> 10.1.8.1746434837-1 zimbra-ldap-patch -> 10.1.8.1746434837-1 zimbra-license-tools -> 10.1.8.1745944436-1 zimbra-common-core-jar -> 10.1.8.1746025108-1 zimbra-mbox-webclient-war -> 10.1.8.1745848554-1 zimbra-mbox-admin-console-war -> 10.1.8.1745843325-1 zimbra-common-mbox-conf-attrs -> 10.1.8.1746025108-1 zimbra-modern-ui -> 4.45.0.1745923101-1 zimbra-modern-zimlets -> 4.45.0.1745923101-1 zimbra-zimlet-admin-chat -> 1.1.0.1745923041-1 zimbra-zimlet-chat -> 11.0.0.1745923041-1 zimbra-zimlet-classic-chat -> 1.0.0.1745923041-1 zimbra-clamav -> 1.0.8-1zimbra8.8b4 zimbra-mta-components -> 10.1.1-1zimbra8.8b1 zimbra-proxy-components -> 1.0.13-1zimbra8.8b1 zimbra-nginx -> 1.24.0-1zimbra8.8b5
Patch Installation
Please refer to below link to install 10.1.8 (May 15 2025):
Quick note: Open Source repo
The steps to download, build, and see our code via Github can be found here: https://github.com/Zimbra/zm-build
