ZCS 8.7.11 Patch 10 - Not available!

Ask questions about your setup or get help installing ZCS server (ZD section below).
Post Reply
tecnico@engim.it
Posts: 2
Joined: Wed May 24, 2017 1:34 pm

ZCS 8.7.11 Patch 10 - Not available!

Post by tecnico@engim.it »

Hello.
Few days ago https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories page stated that a new Patch 10 was available for ZCS 8.7.11
The patch should fix bug [bug]109129[/bug] 109129 witch is rated "Major" Severity and scores 6.4 at CVSS-Score.
Due to the severity of the bug i would like to fix my ZCS server as soon as possible.
It's now more than 24 hours the bug and patch were declared but despite this no patch is available in the usual download page https://www.zimbra.com/downloads/zimbra ... en-source/
Am I wrong in reading the security advice or am I looking in the wrong place?

Pease forgive me for my possible bad english writing.

Best regards
Luca Chiampo
phoenix
Ambassador
Ambassador
Posts: 27278
Joined: Fri Sep 12, 2014 9:56 pm
Location: Liverpool, England

Re: ZCS 8.7.11 Patch 10 - Not available!

Post by phoenix »

Patches are not released via the product downloads page, they are released an update via the Zimbra Repository in your linux distribution. You need to look at the patch release notes in the wiki for further information.
Regards

Bill

Rspamd: A high performance spamassassin replacement

Per ardua ad astra
tecnico@engim.it
Posts: 2
Joined: Wed May 24, 2017 1:34 pm

Re: ZCS 8.7.11 Patch 10 - Not available!

Post by tecnico@engim.it »

Could you be so kind to post the link to ZCS 8.7.11 Patch10
patch release notes in the wiki
.....
I'm only able to find https://wiki.zimbra.com/wiki/Zimbra_Releases/8.7.11/P9 witch I have just in place and workingi...

Code: Select all

zmcontrol -v
give

Code: Select all

Release 8.7.11.GA.1854.UBUNTU14.64 UBUNTU14_64 FOSS edition, Patch 8.7.11_P9.
and

Code: Select all

apt list 'zimbra-nginx*'
give

Code: Select all

zimbra-nginx/unknown,now 1.7.1-1zimbra8.7b11.14.04 amd64 [installed,automatic]
zimbra-nginx-dbg/unknown 1.7.1-1zimbra8.7b11.14.04 amd64
as stated in release notes for Patch9..... but Patch10 addresses [bug]109129[/bug] .... witch I'm concerned about!
System is Up to Date...

Code: Select all

apt-get update

Code: Select all

apt-get upgrade
have beeen executed and services restarted!

For sure you'll understand that security concerns are a must when choosing to host a mail-server in-home!
phoenix wrote:Patches are not released via the product downloads page, they are released an update via the Zimbra Repository in your linux distribution. You need to look at the patch release notes in the wiki for further information.
Post Reply