Zimbra 8.8.15 Patch-34 - share experience

Ask questions about your setup or get help installing ZCS server (ZD section below).
zmGodctl_start
Posts: 7
Joined: Thu Jul 21, 2022 6:54 am

Re: Zimbra 8.8.15 Patch-34 - share experience

Post by zmGodctl_start »

Hi all,

After upgrade from p33 to p34 , we experienced webclient html message content is not showing anymore. Text content displays ok. Setting zimbra_strict_unclosed_comment_tag to false have no effect.

With P33 we had <!--[if !mso]> like comment tags shown in html display but with P34 html mail display gone forever.

Anyone having the same issue?

zmcontrol -v
Release 8.8.15.GA.4179.UBUNTU20.64 UBUNTU20_64 FOSS edition, Patch 8.8.15_P34.
zmGodctl_start
Posts: 7
Joined: Thu Jul 21, 2022 6:54 am

Re: Zimbra 8.8.15 Patch-34 - share experience

Post by zmGodctl_start »

zmGodctl_start wrote:Hi all,

After upgrade from p33 to p34 , we experienced webclient html message content is not showing anymore. Text content displays ok. Setting zimbra_strict_unclosed_comment_tag to false have no effect.

With P33 we had <!--[if !mso]> like comment tags shown in html display but with P34 html mail display gone forever.

Anyone having the same issue?

zmcontrol -v
Release 8.8.15.GA.4179.UBUNTU20.64 UBUNTU20_64 FOSS edition, Patch 8.8.15_P34.

This turned out to be an old bug after seeing owasp exception lines in mailbox log. But why this bug is triggered after P34 ?
viewtopic.php?f=13&t=70544

I disabled owasp html sanitizer temporarily
$ zmlocalconfig -e zimbra_use_owasp_html_sanitizer=false
$ zmmailboxdctl restart

hope for another patch :?
halfgaar
Advanced member
Advanced member
Posts: 171
Joined: Sat Sep 13, 2014 12:54 am
Location: Netherlands
ZCS/ZD Version: Ubuntu 18.04, 8.8.15_P43
Contact:

Re: Zimbra 8.8.15 Patch-34 - share experience

Post by halfgaar »

So far so good.

Code: Select all

apt update
apt-get install zimbra-common-core-jar zimbra-common-core-libs zimbra-mbox-store-libs
apt upgrade
reboot
$ zmcontrol status

Code: Select all

Host bla.example.net
        amavis                  Running
        antispam                Running
        antivirus               Running
        ldap                    Running
        logger                  Running
        mailbox                 Running
        memcached               Running
        mta                     Running
        opendkim                Running
        proxy                   Running
        service webapp          Running
        snmp                    Running
        spell                   Running
        stats                   Running
        zimbra webapp           Running
        zimbraAdmin webapp      Running
        zimlet webapp           Running
        zmconfigd               Running
Release 8.8.15.GA.3869.UBUNTU16.64 UBUNTU16_64 FOSS edition, Patch 8.8.15_P34.

No issues so far.
khawkins
Posts: 12
Joined: Sat Dec 11, 2021 12:25 am
ZCS/ZD Version: 8.8.15

Re: Zimbra 8.8.15 Patch-34 - share experience

Post by khawkins »

I just updated prod and no issues so far. I'm not seeing the html content display issue.

I explicitly tested that prod had setcap available just in case, after the issue oetiker ran into. I wouldn't have thought to test that from just the patch notes.
BradC
Outstanding Member
Outstanding Member
Posts: 265
Joined: Tue May 03, 2016 1:39 am

Re: Zimbra 8.8.15 Patch-34 - share experience

Post by BradC »

khawkins wrote:I explicitly tested that prod had setcap available just in case, after the issue oetiker ran into. I wouldn't have thought to test that from just the patch notes.
To clarify that, the system needs setcap *and* the ability to use it. Mine had setcap, but it still couldn't set the capability due to the lack of FS extended attributes.

A simple test as root -

Works :

Code: Select all

root@ztest:~# touch test
root@ztest:~# setcap cap_net_admin+eip test
Doesn't work :

Code: Select all

root@zimbra:~# touch test
root@zimbra:~# setcap cap_net_admin+eip test
Failed to set capabilities on file `test' (Operation not supported)
The value of the capability argument is not permitted for a file. Or the file is not a regular (non-symlink) file
User avatar
L. Mark Stone
Ambassador
Ambassador
Posts: 2796
Joined: Wed Oct 09, 2013 11:35 am
Location: Portland, Maine, US
ZCS/ZD Version: 10.0.6 Network Edition
Contact:

Re: Zimbra 8.8.15 Patch-34 - share experience

Post by L. Mark Stone »

No issues for our multi-server hosting environment. The new OWASP LC attribute seems to be working OK for us.

For my customers who were a few patches behind, the zimbra-ldap-patch package still does not get installed, (neither by the installer on fresh installs), nor via apt-get update && apt-get dist-upgrade after a fresh install. This package still needs to be installed by hand.
___________________________________
L. Mark Stone
Mission Critical Email - Zimbra VAR/BSP/Training Partner https://www.missioncriticalemail.com/
AWS Certified Solutions Architect-Associate
User avatar
JDunphy
Outstanding Member
Outstanding Member
Posts: 889
Joined: Fri Sep 12, 2014 11:18 pm
Location: Victoria, BC
ZCS/ZD Version: 9.0.0_P39 NETWORK Edition

Re: Zimbra 8.8.15 Patch-34 - share experience

Post by JDunphy »

No issues here on a test machine which is an exact snapshot of the production machine. Logged in and went through 50-60 messages including previous one that didn't display correctly and it all worked. Also briefly tested 2FA and the admin interface with no problems.

Code: Select all

% zmcontrol -v
Release 8.8.15_GA_3953.RHEL8_64_20200629025823 RHEL8_64 NETWORK edition, Patch 8.8.15_P34.
Did an OSS version we are experimenting with here and same result for those that don't run the commercial version like we do. So far so good.

Code: Select all

% zmcontrol -v
Release 8.8.15_GA_3953.RHEL8_64_20200629025823 RHEL8_64 FOSS edition, Patch 8.8.15_P34.
I'll give it a day and test some more but seems uneventful thus far.

Jim
ghen
Outstanding Member
Outstanding Member
Posts: 258
Joined: Thu May 12, 2016 1:56 pm
Location: Belgium
ZCS/ZD Version: 9.0.0

Re: Zimbra 8.8.15 Patch-34 - share experience

Post by ghen »

Those reporting success with the e-mail display issue, what value are you using for zimbra_strict_unclosed_comment_tag? True (strict) or false (relaxed) ?
User avatar
JDunphy
Outstanding Member
Outstanding Member
Posts: 889
Joined: Fri Sep 12, 2014 11:18 pm
Location: Victoria, BC
ZCS/ZD Version: 9.0.0_P39 NETWORK Edition

Re: Zimbra 8.8.15 Patch-34 - share experience

Post by JDunphy »

I had a few newsletters that showed the [if !mso] before. I took the default which is:

Code: Select all

$ zmlocalconfig zimbra_strict_unclosed_comment_tag
zimbra_strict_unclosed_comment_tag = true
Those look good now.

I tested on firefox, safari, and chrome on linux and mac. I went through a few 100 messages just now... clicking and every one was good (meaning there were no errors on the top and I saw some sort of text). I moved to Junk because that is where we would normally see some fairly bad stuff but I only had 10 or so messages so not a lot of testing there but even those looked good. I pulled the trigger this morning here for my personal server which is where this testing was done.

Jim
dgeist
Posts: 24
Joined: Fri Sep 12, 2014 10:47 pm

Re: Zimbra 8.8.15 Patch-34 - share experience

Post by dgeist »

Upgrade appeared to go as expected, but now I have breakage for my web client and zmproxy setup (SOAP API access seems to work okay). Started a thread for support if anyone would like to help :(
Post Reply