What is Pimbra?
Just a short way of saying patched Zimbra.
It's also a Github organisation that helps Zimbra builders to apply community based patches which are not found in the upstream repos in a timely manner.
For now it's only one repo: zm-web-client.
Maldua builds will be using those patches.
Usage example
Just in case you're curious here's how the 10.1.5 config.build file contents look like:Updates
Yes, each time a new Zimbra version is released new tags will need to be pushed to the patched repos and to the maldua-pimbra-config repo.
Is it overkill?
If you think this is overkill and you are only worried about the most recent CVE from January 2025 you can check: FOSS - How to patch/build source to include missing commits for 10.1.5/6 thread for a more simple method.
Feedback
The project is quite new so expect some bug or another. And, please report them either here or in the maldua-pimbra issues page.
Thank you!
Resources
Just a short way of saying patched Zimbra.
It's also a Github organisation that helps Zimbra builders to apply community based patches which are not found in the upstream repos in a timely manner.
For now it's only one repo: zm-web-client.
Maldua builds will be using those patches.
Usage example
Code:
mkdir installer-buildcd installer-buildgit clone --depth 1 --branch 10.1.5 git@github.com:Zimbra/zm-build.gitcd zm-build# Use the version you want to build (Example: 10.1.5) in the new linewget 'https://github.com/maldua-pimbra/maldua-pimbra-config/raw/refs/tags/10.1.5/config.build' -O config.build_pimbra# If download fails check Issues to either complain or check if the new tag is actually not needed.cat config.build_pimbra >> config.build# Other of your changes (Optional)# Your ./build.pl commandCode:
# Pimbra patches - BEGIN## Pimbra org%GIT_OVERRIDES = maldua-pimbra.url-prefix=https://github.com/maldua-pimbra## zm-web-client### CVE-2025-27915 fix%GIT_OVERRIDES = zm-web-client.remote=maldua-pimbra%GIT_OVERRIDES = zm-web-client.tag=10.1.5-maldua# Pimbra patches - ENDYes, each time a new Zimbra version is released new tags will need to be pushed to the patched repos and to the maldua-pimbra-config repo.
Is it overkill?
If you think this is overkill and you are only worried about the most recent CVE from January 2025 you can check: FOSS - How to patch/build source to include missing commits for 10.1.5/6 thread for a more simple method.
Feedback
The project is quite new so expect some bug or another. And, please report them either here or in the maldua-pimbra issues page.
Thank you!
Resources
- maldua-pimbra organisation
- Main maldua-pimbra repo
- maldua-pimbra-config repo with ready to use config.build files.
Statistics: Posted by adrian.gibanel.btactic — Fri Mar 21, 2025 4:44 pm