category: recent
Want to download? Please use: Maldua’s Zimbra Foss Builds Downloads Page instead. It's much easier to read and understand.
WARNING: This is an automated build. You can give us some feedback about it either on the issues page or in the Zimbra forums thread.
download_comment: Includes Pimbra patches.
Main instructions that were used in order to make this build possible:
git clone --quiet --depth 1 --branch 10.1.18.p1 git@github.com:maldua-pimbra/zm-build.git
cd zm-build
ENV_CACHE_CLEAR_FLAG=true ./build.pl --ant-options -DskipTests=true --git-default-tag=10.1.18.p1,10.1.18,10.1.17,10.1.15.p2.beta-maldua,10.1.15.p2.beta,10.1.16,10.1.15,10.1.14,10.1.10.p3-maldua,10.1.10.p3,10.1.13,10.1.12,10.1.10,10.1.9,10.1.8,10.1.7,10.1.6,10.1.5,10.1.4,10.1.3,10.1.2,10.1.1,10.1.0,10.1.0.beta --build-release-no=10.1.18 --build-type=FOSS --build-release=LIBERTY --build-release-candidate=GA --build-no 4200001 --build-thirdparty-server=files.zimbra.com --no-interactive
# config.build contents:
# Pimbra patches - BEGIN
## Pimbra org
%GIT_OVERRIDES = maldua-pimbra.url-prefix=https://github.com/maldua-pimbra
## zm-web-client
### Select Advanced Classic by default in login page.
### This avoids having submission errors when a logged-in user refreshes the page.
###
### Fix: Crafted email can run malicious script. (10.1.19)
###
### ZCS 10.1.20 ZWC XSS Fix. (1)
###
### Fix 10.1.20: Allow malicious attachment filenames to execute script under specific conditions.
%GIT_OVERRIDES = zm-web-client.remote=maldua-pimbra
%GIT_OVERRIDES = zm-web-client.tag=10.1.18.p1-maldua
## zm-ajax
### ZCS 10.1.20 ZWC XSS Fix. (3)
%GIT_OVERRIDES = zm-ajax.remote=maldua-pimbra
%GIT_OVERRIDES = zm-ajax.tag=10.1.18.p1-maldua
## zm-build
### SNMP CVE mitigation (2026-06)
### This is applied directly in zm-build itself so not need to override its git repo
# Pimbra patches - END