Zimbra Releases/9.0.0/P45

Zimbra Collaboration Kepler 9.0.0 Patch 45 GA Release

Release Date: May 15, 2025

Check out the Security Fixes for this version of Zimbra Collaboration. Please refer to the Patch Installation page for Patch Installation instructions. As always, you are encouraged to tell us what you think in the Forums or open a support ticket to report issues

End of Life (EOL) Notice - ZCS 9.0

ZCS 9.0 is set to reach its End of Life on June 30, 2025. No further updates will be provided after this date. Customers using these versions are advised to plan their migration to the 10.1 version to ensure continued security updates and access to the latest features.

For assistance during this transition, our support team is available to address any inquiries.

10.1 is the active and supported version.

Things to know before you upgrade

Changes to SOAP API

There are changes in ChangePassword SOAP API. Please refer to API reference documentation. If you have custom auth implementation with ChangePassword, please incorporate changes to support new API changes.

Security Fixes

Summary	CVE-ID	CVSS Score
Addressed a denial of service (DoS) vulnerability that could lead to service disruptions. A new local config attribute, ajax_uri_max_assets_requests_allowed has been added.

Packages

Jira ticket:

The package lineup for this release is:

zimbra-patch                                      ->  9.0.0.1745584203.p45-2
zimbra-common-core-jar                            ->  9.0.0.1745484276-1
zimbra-mbox-webclient-war                         ->  9.0.0.1745518276-1

Patch Installation

Please refer to below link to install Kepler 9.0.0 Patch 45 (May 15 2025):

Patch Installation

Quick note: Open Source repo

The steps to download, build, and see our code via Github can be found here: https://github.com/Zimbra/zm-build