Zimbra

Zimbra Collaboration
Developer(s)Synacor
Initial releaseJuly 26, 2005; 19 years ago (2005-07-26)
Stable release
10.1.1[1] Edit this on Wikidata / 16 August 2024
Repository
PlatformLinux
TypeCollaborative software
LicenseZimbra licensing
Websitewww.zimbra.com

Zimbra Collaboration, formerly known as the Zimbra Collaboration Suite (ZCS) before 2019, is a collaborative software suite that includes an email server and a web client.

Zimbra was initially developed by LiquidSys, which changed their name to Zimbra, Inc. on 26 July 2005.[2] The Zimbra Collaboration Suite was first released in 2005. The company was subsequently purchased by Yahoo! on September 17, 2007,[3] and later sold to VMware on January 12, 2010.[4] In July 2013, it was sold by VMware to Telligent Systems[5] which changed its name to Zimbra, Inc. in September 2013.[6] It was then acquired by Synacor on 18 August 2015.[7]

According to former Zimbra President and CTO Scott Dietzen, the name for Zimbra is derived from the song "I Zimbra" by Talking Heads.[8]

Edition

The software consists of both client and server components, and at one time also offered a desktop email client, called Zimbra Desktop. Two versions of Zimbra are available: an open-source version, and a commercially supported version ("Network Edition") with closed-source components such as a proprietary Messaging Application Programming Interface connector to Outlook for calendar and contact synchronization.[9]

The now discontinued Zimbra Desktop was a full-featured free desktop email client.[10] Development was discontinued under VMware's stewardship in 2013 but was restarted in February 2014, but was ended again by 2019. The web client featured an HTML5 offline mode starting with version 8.5.[11]

The Zimbra Web Client is a full-featured collaboration suite that supports email and group calendars. At one time it featured document-sharing using an Ajax web interface that enabled tool tips, drag-and-drop items, and right-click menus in the UI. Today it has document sharing, chat, and videoconferencing. Also included are advanced searching capabilities and date relations, online document authoring, "Zimlet" mashups, and a full administration UI. It is written using the Zimbra Ajax Toolkit.[12]

The Zimbra Server uses several open source projects (see the section, Included open source projects). It exposes a SOAP application programming interface to all its functionality and is also an IMAP and POP3 server. The server runs on many Linux distributions.[13] On other, non-Linux operating systems it can be run using a virtual machine and using container technology. It supports CalDAV, CardDAV and SMTP for messaging, LDAP for directory services, and Microsoft Active Directory (AD). Zimbra uses Postfix for its MTA functionality. It includes technology from ClamAV, SpamAssassin and DSPAM for anti-malware features and S/MIME for email signing and encryption. OS X Server support was dropped with version ZCS 7.0.

Zimbra can synchronize mail, contacts, and calendar items with open-source mail clients such as Mozilla Thunderbird and Evolution and also with proprietary clients such as Microsoft Outlook and Apple Mail, either through proprietary connectors or using the ActiveSync protocol,[14] both available exclusively in the commercially supported version. Zimbra also provides native two-way sync to many mobile devices.[9]

2024 Cyber Attack

In 2024, Zimbra was hit by a significant cyber attack[15] due to a Remote Code Execution (RCE) vulnerability, labeled CVE-2024-45519. The flaw in Zimbra’s postjournal service allowed attackers to send specially crafted emails, enabling remote command execution on affected systems. While the postjournal service isn’t active by default, its use in many setups made Zimbra an attractive target, especially since some instances lacked up-to-date security patches. To mitigate these risks, Zimbra released patches for affected versions, including updates to 9.0.0, 10.0.9, and others.

Software license

The closed source variant Network edition is distributed under the Zimbra Network Edition EULA.

Starting with version 8.5 the Zimbra source code is available under the terms of the GNU General Public License version 2 (backend) and the Common Public Attribution License version 1 (frontend).[16]

Previous versions were released under the Zimbra Public License (ZPL). The Free Software Foundation accepts the license as being a free software license and refers to it as being identical to the Yahoo! Public License with the exception that Zimbra, Inc. provides the license, rather than Yahoo!.[17]

Included open source projects

The Zimbra Server uses open source projects such as:[18]

It previously used:

  • MySQL (last used in version 8.0)
  • Apache Tomcat (last used in version 4.5)
  • Perdition mail retrieval proxy (until 4.5)

See also

References

  1. ^ "Release 10.1.1". 16 August 2024. Retrieved 27 August 2024.
  2. ^ "Patent US20090100073 - System and method for enabling an external-system view of email attachments". google.je. Retrieved 22 February 2016.
  3. ^ "Yahoo! Inc. - Company Timeline". Wayback Machine. 13 July 2008. Archived from the original on 13 July 2008. Retrieved 13 February 2017.{{cite web}}: CS1 maint: bot: original URL status unknown (link)
  4. ^ Vance, Ashlee (13 January 2010). "VMware Gently Nudges Microsoft with a Zimbra". New York Times Bits Blog. Retrieved 30 May 2010.
  5. ^ Henry, Tiffany (15 July 2013). "Telligent Acquires Zimbra from VMware". Telligent. Retrieved 15 July 2013.
  6. ^ Henry, Tiffany (25 September 2013). "Zimbra Unveils Integrated Team, Culture and Vision for People-Centered Collaboration at User Group Conference". Telligent. Retrieved 15 December 2013.
  7. ^ "Synacor Agrees to Acquire Zimbra, a Leading Provider of Open Source Based Email and Messaging Software" (Press release). Global News Wire. 18 August 2015. Retrieved 18 August 2015.
  8. ^ Dietzen, Scott (12 September 2005). "So what's a Zimbra?". Zimbra Blog. Retrieved 17 January 2013.
  9. ^ a b "Zimbra Compatibility with Other Desktop Clients". VMware Zimbra Official Web Site. VMware Zimbra. Archived from the original on 28 December 2013. Retrieved 8 January 2013.
  10. ^ "Zimbra Desktop". VMware Zimbra Official Web Site. VMware Zimbra. Archived from the original on 20 October 2010. Retrieved 8 January 2013.
  11. ^ "Zimbra Collaboration 8.5: Anytime, Anywhere, Any Device". Zimbra Blog. Zimbra. 26 August 2014. Retrieved 5 March 2015.
  12. ^ "Zimbra Documentation for the Zimbra Web Client". VMware Zimbra Official Web Site. VMware Zimbra. Archived from the original on 8 September 2015. Retrieved 8 January 2013.
  13. ^ "Zimbra Open Source". Zimbra Official Web Site. Zimbra. Archived from the original on 12 November 2020. Retrieved 8 January 2013.
  14. ^ "Exchange ActiveSync(EAS) Outlook 2013". Zimbra Official Wiki. Zimbra. Retrieved 5 March 2015.
  15. ^ tailored (7 October 2024). "Zimbra: A Case in Cybersecurity". Empreus IT. Retrieved 30 October 2024.
  16. ^ "OSI Licenses for Zimbra Collaboration Open Source Edition". Jon Dybik. 4 June 2014. Retrieved 5 June 2014.
  17. ^ "Various Licenses and Comments about Them". Free Software Foundation. Retrieved 8 July 2011.
  18. ^ "Zimbra Components". Retrieved 16 July 2014.
Wikimedia Commons has media related to Zimbra.