The patch add new config to the cpmserver.cfg, to disable the requirement for password.
Steps:
1. Connect via SSH to CPM, user is cpmuser
2. Edit or create this file:
/cpmdata/conf/cpmserver.cfg
3. Add the following and set it to False (setting True is like pre-patch= need password)
[smtp]
authenticate=False
4. Restart apache (best done when no important backups running).
sudo service apache2 restart