New Patches Available

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
Post Reply
gbillat
Zimbra Alumni
Zimbra Alumni
Posts: 44
Joined: Fri Oct 18, 2013 9:08 am

New Patches Available

Post by gbillat »

Two new Patches were released today:
- 8.8.8 "Turing" Patch 1 (available as part of the patch package, not a download)
- 8.7.11 Patch 2 (available as a download)

For more info about both patches and how to get them, visit the blog https://blog.zimbra.com/2018/04/new-pat ... 1-patch-2/.

Thanks!
Klug
Ambassador
Ambassador
Posts: 2746
Joined: Mon Dec 16, 2013 11:35 am
Location: France - Drôme
ZCS/ZD Version: All of them
Contact:

Re: New Patches Available

Post by Klug »

What about 8.6?
matteo.fracassetti
Posts: 16
Joined: Thu Feb 08, 2018 3:56 pm

Re: New Patches Available

Post by matteo.fracassetti »

Hi all.
I just upgraded to 8.8.8 and installed patch1 on a multi-server staging environment on Oracle Linux 7.

Installation instruction says to install the patch on all nodes so I started from LDAP/Mailstore server and everythings went fine then I tried to install on my MTA/Proxy server and yum gave issues with dependencies:

Code: Select all

  
# yum install zimbra-patch
[...]
Resolving Dependencies
--> Running transaction check
---> Package zimbra-patch.x86_64 0:8.8.8.1.1522961836-1.r7 will be installed
[...]
--> Finished Dependency Resolution
Error: Package: zimbra-patch-8.8.8.1.1522961836-1.r7.x86_64 (zimbra-888-patch)
           Requires: zimbra-store >= 8.8.8
 You could try using --skip-broken to work around the problem
 You could try running: rpm -Va --nofiles --nodigest
What about?
Klug
Ambassador
Ambassador
Posts: 2746
Joined: Mon Dec 16, 2013 11:35 am
Location: France - Drôme
ZCS/ZD Version: All of them
Contact:

Re: New Patches Available

Post by Klug »

It was reported elsewhere (Zeta mailing list) this patch looks like it might be deployed on store nodes only.

But there's no current acknowledge from Zimbra/Synacor about this (nor anything in the release notes, as you said).
User avatar
L. Mark Stone
Ambassador
Ambassador
Posts: 2796
Joined: Wed Oct 09, 2013 11:35 am
Location: Portland, Maine, US
ZCS/ZD Version: 10.0.6 Network Edition
Contact:

Re: New Patches Available

Post by L. Mark Stone »

And also don't forget on 8.8 that the Zimbra installer creates its own repos.

In conjunction with the new 8.8.8 Patch release, I also noted that "apt-get update; apt-get upgrade" lists a number of new Zimbra packages:
Setting up zimbra-mbox-war (1.0.0.1522952748-1.u16) ...
Setting up zimbra-mbox-conf (1.0.0.1522952748-1.u16) ...
Setting up zimbra-common-core-jar (1.0.0.1522952748-1.u16) ...
Setting up zimbra-mbox-service (1.0.0.1522952748-1.u16) ...
FWIW I did the package update before the Patch install.

Hope that helps,
Mark
___________________________________
L. Mark Stone
Mission Critical Email - Zimbra VAR/BSP/Training Partner https://www.missioncriticalemail.com/
AWS Certified Solutions Architect-Associate
milauria
Advanced member
Advanced member
Posts: 96
Joined: Mon Aug 15, 2016 12:32 pm

Re: New Patches Available

Post by milauria »

Hats off to the community and to Zimbra for releasing these patches, notifying clearly on the forum and making them installable with repos ... it makes it a strong opensource product ;)
Thanks !
Klug
Ambassador
Ambassador
Posts: 2746
Joined: Mon Dec 16, 2013 11:35 am
Location: France - Drôme
ZCS/ZD Version: All of them
Contact:

Re: New Patches Available

Post by Klug »

For those who did not notice (I did not see any announcement on the forum), there's a "patch 2" for 8.8.8 (published April 27).
https://blog.zimbra.com/2018/04/zimbra- ... available/

For those who might be interested in customer service and support, we're now waiting for more than 5 (five) months for some patches for ZCS 8.6 (that is officially supported till end of September).

CVE-2018-6882 was discovered in January and not fixed in the patch released in February.
It's actually fixed (since early April) but the fix is not released and not ETA.
New vulnerabilities were discovered since, no information about 8.6 being at risk. Or not.
Klug
Ambassador
Ambassador
Posts: 2746
Joined: Mon Dec 16, 2013 11:35 am
Location: France - Drôme
ZCS/ZD Version: All of them
Contact:

Re: New Patches Available

Post by Klug »

New patches were released: viewtopic.php?f=8&t=64177
Post Reply