system toolbox » zimbra

ovo treba kod svih korisnika obletiti i patchirati

radi se dom4j jar-u koji je krivac za security hole

kod svih naših korisnika je ZCS 5.0.x, zanači procedura je

ZCS Version 5.0.x

1. [Perform command as zimbra]Stop the ZCS server. As the zimbra user, run zmcontrol stop:

zmcontrol stop

2. [Perform commands as root, sudo] Use the script below to download the updated jar file and move the existing jar files to another directory, then replace them with the patched jar file:

cd /tmp;
curl -O http://files.zimbra.com/downloads/security/dom4j-1.5.jar;
mkdir /opt/zimbra/save-07012009/; 
mv /opt/zimbra/lib/jars/dom4j-1.5.jar /opt/zimbra/save-07012009/dom4j-1.5-lib.jar;
mv /opt/zimbra/jetty-6.1.5/common/lib/dom4j-1.5.jar /opt/zimbra/save-07012009/dom4j-1.5-common.jar;
cp /tmp/dom4j-1.5.jar /opt/zimbra/lib/jars/dom4j-1.5.jar;
cp /tmp/dom4j-1.5.jar /opt/zimbra/jetty-6.1.5/common/lib/dom4j-1.5.jar;

3. [Perform commands as root, or sudo] Ensure that the jar files are owned by the zimbra user as root:

chown zimbra:zimbra /opt/zimbra/lib/jars/dom4j-1.5.jar
chown zimbra:zimbra /opt/zimbra/jetty-6.1.5/common/lib/dom4j-1.5.jar

4. [Perform command as zimbra]Start the ZCS server. As the Zimbra user, run zmcontrol start:

zmcontrol start

ovo ću večeras kada svi završe zavrnuti