[Users] Last security patch

[Victor d'Agostino]

Hello,

One of the Zimbra security recommendations is to block incoming memcache
connection from anywhere else than Zimbra servers.

Is Zimbra vulnerable if memcache service is filtered by iptables ?

Regards
Victor d'Agostino


Le mar. 19 mars 2019 à 11:59, David Touitou <david at network-studio.com> a
écrit :

> Hi all.
>
> This was sent to me yesterday.
> https://blog.tint0.com/2019/03/a-saga-of-code-executions-on-zimbra.html
>
> It's the public explanation of the last XXE/memcached patches (not
> available for versions below 8.7.11).
>
> Someone just post a problem with memcached in 8.8.11P3 on the US forum.
> https://forums.zimbra.org/viewtopic.php?f=15&t=65833
> Anyone also seeying such issues with last patch?
>
> David
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.zetalliance.org/pipermail/users_lists.zetalliance.org/attachments/20190319/9b053d0f/attachment.html>