Zimbra 8.8.15 Patch-34 - share experience
-
- Posts: 7
- Joined: Thu Jul 21, 2022 6:54 am
Re: Zimbra 8.8.15 Patch-34 - share experience
Hi all,
After upgrade from p33 to p34 , we experienced webclient html message content is not showing anymore. Text content displays ok. Setting zimbra_strict_unclosed_comment_tag to false have no effect.
With P33 we had <!--[if !mso]> like comment tags shown in html display but with P34 html mail display gone forever.
Anyone having the same issue?
zmcontrol -v
Release 8.8.15.GA.4179.UBUNTU20.64 UBUNTU20_64 FOSS edition, Patch 8.8.15_P34.
After upgrade from p33 to p34 , we experienced webclient html message content is not showing anymore. Text content displays ok. Setting zimbra_strict_unclosed_comment_tag to false have no effect.
With P33 we had <!--[if !mso]> like comment tags shown in html display but with P34 html mail display gone forever.
Anyone having the same issue?
zmcontrol -v
Release 8.8.15.GA.4179.UBUNTU20.64 UBUNTU20_64 FOSS edition, Patch 8.8.15_P34.
-
- Posts: 7
- Joined: Thu Jul 21, 2022 6:54 am
Re: Zimbra 8.8.15 Patch-34 - share experience
zmGodctl_start wrote:Hi all,
After upgrade from p33 to p34 , we experienced webclient html message content is not showing anymore. Text content displays ok. Setting zimbra_strict_unclosed_comment_tag to false have no effect.
With P33 we had <!--[if !mso]> like comment tags shown in html display but with P34 html mail display gone forever.
Anyone having the same issue?
zmcontrol -v
Release 8.8.15.GA.4179.UBUNTU20.64 UBUNTU20_64 FOSS edition, Patch 8.8.15_P34.
This turned out to be an old bug after seeing owasp exception lines in mailbox log. But why this bug is triggered after P34 ?
viewtopic.php?f=13&t=70544
I disabled owasp html sanitizer temporarily
$ zmlocalconfig -e zimbra_use_owasp_html_sanitizer=false
$ zmmailboxdctl restart
hope for another patch
-
- Advanced member
- Posts: 173
- Joined: Sat Sep 13, 2014 12:54 am
- Location: Netherlands
- ZCS/ZD Version: Ubuntu 18.04, 8.8.15_P43
- Contact:
Re: Zimbra 8.8.15 Patch-34 - share experience
So far so good.
$ zmcontrol status
Release 8.8.15.GA.3869.UBUNTU16.64 UBUNTU16_64 FOSS edition, Patch 8.8.15_P34.
No issues so far.
Code: Select all
apt update
apt-get install zimbra-common-core-jar zimbra-common-core-libs zimbra-mbox-store-libs
apt upgrade
reboot
Code: Select all
Host bla.example.net
amavis Running
antispam Running
antivirus Running
ldap Running
logger Running
mailbox Running
memcached Running
mta Running
opendkim Running
proxy Running
service webapp Running
snmp Running
spell Running
stats Running
zimbra webapp Running
zimbraAdmin webapp Running
zimlet webapp Running
zmconfigd Running
No issues so far.
Re: Zimbra 8.8.15 Patch-34 - share experience
I just updated prod and no issues so far. I'm not seeing the html content display issue.
I explicitly tested that prod had setcap available just in case, after the issue oetiker ran into. I wouldn't have thought to test that from just the patch notes.
I explicitly tested that prod had setcap available just in case, after the issue oetiker ran into. I wouldn't have thought to test that from just the patch notes.
Re: Zimbra 8.8.15 Patch-34 - share experience
To clarify that, the system needs setcap *and* the ability to use it. Mine had setcap, but it still couldn't set the capability due to the lack of FS extended attributes.khawkins wrote:I explicitly tested that prod had setcap available just in case, after the issue oetiker ran into. I wouldn't have thought to test that from just the patch notes.
A simple test as root -
Works :
Code: Select all
root@ztest:~# touch test
root@ztest:~# setcap cap_net_admin+eip test
Code: Select all
root@zimbra:~# touch test
root@zimbra:~# setcap cap_net_admin+eip test
Failed to set capabilities on file `test' (Operation not supported)
The value of the capability argument is not permitted for a file. Or the file is not a regular (non-symlink) file
- L. Mark Stone
- Ambassador
- Posts: 2802
- Joined: Wed Oct 09, 2013 11:35 am
- Location: Portland, Maine, US
- ZCS/ZD Version: 10.0.7 Network Edition
- Contact:
Re: Zimbra 8.8.15 Patch-34 - share experience
No issues for our multi-server hosting environment. The new OWASP LC attribute seems to be working OK for us.
For my customers who were a few patches behind, the zimbra-ldap-patch package still does not get installed, (neither by the installer on fresh installs), nor via apt-get update && apt-get dist-upgrade after a fresh install. This package still needs to be installed by hand.
For my customers who were a few patches behind, the zimbra-ldap-patch package still does not get installed, (neither by the installer on fresh installs), nor via apt-get update && apt-get dist-upgrade after a fresh install. This package still needs to be installed by hand.
___________________________________
L. Mark Stone
Mission Critical Email - Zimbra VAR/BSP/Training Partner https://www.missioncriticalemail.com/
AWS Certified Solutions Architect-Associate
L. Mark Stone
Mission Critical Email - Zimbra VAR/BSP/Training Partner https://www.missioncriticalemail.com/
AWS Certified Solutions Architect-Associate
- JDunphy
- Outstanding Member
- Posts: 901
- Joined: Fri Sep 12, 2014 11:18 pm
- Location: Victoria, BC
- ZCS/ZD Version: 9.0.0_P39 NETWORK Edition
Re: Zimbra 8.8.15 Patch-34 - share experience
No issues here on a test machine which is an exact snapshot of the production machine. Logged in and went through 50-60 messages including previous one that didn't display correctly and it all worked. Also briefly tested 2FA and the admin interface with no problems.
Did an OSS version we are experimenting with here and same result for those that don't run the commercial version like we do. So far so good.
I'll give it a day and test some more but seems uneventful thus far.
Jim
Code: Select all
% zmcontrol -v
Release 8.8.15_GA_3953.RHEL8_64_20200629025823 RHEL8_64 NETWORK edition, Patch 8.8.15_P34.
Code: Select all
% zmcontrol -v
Release 8.8.15_GA_3953.RHEL8_64_20200629025823 RHEL8_64 FOSS edition, Patch 8.8.15_P34.
Jim
-
- Outstanding Member
- Posts: 264
- Joined: Thu May 12, 2016 1:56 pm
- Location: Belgium
- ZCS/ZD Version: 9.0.0
Re: Zimbra 8.8.15 Patch-34 - share experience
Those reporting success with the e-mail display issue, what value are you using for zimbra_strict_unclosed_comment_tag? True (strict) or false (relaxed) ?
- JDunphy
- Outstanding Member
- Posts: 901
- Joined: Fri Sep 12, 2014 11:18 pm
- Location: Victoria, BC
- ZCS/ZD Version: 9.0.0_P39 NETWORK Edition
Re: Zimbra 8.8.15 Patch-34 - share experience
I had a few newsletters that showed the [if !mso] before. I took the default which is:
Those look good now.
I tested on firefox, safari, and chrome on linux and mac. I went through a few 100 messages just now... clicking and every one was good (meaning there were no errors on the top and I saw some sort of text). I moved to Junk because that is where we would normally see some fairly bad stuff but I only had 10 or so messages so not a lot of testing there but even those looked good. I pulled the trigger this morning here for my personal server which is where this testing was done.
Jim
Code: Select all
$ zmlocalconfig zimbra_strict_unclosed_comment_tag
zimbra_strict_unclosed_comment_tag = true
I tested on firefox, safari, and chrome on linux and mac. I went through a few 100 messages just now... clicking and every one was good (meaning there were no errors on the top and I saw some sort of text). I moved to Junk because that is where we would normally see some fairly bad stuff but I only had 10 or so messages so not a lot of testing there but even those looked good. I pulled the trigger this morning here for my personal server which is where this testing was done.
Jim
Re: Zimbra 8.8.15 Patch-34 - share experience
Upgrade appeared to go as expected, but now I have breakage for my web client and zmproxy setup (SOAP API access seems to work okay). Started a thread for support if anyone would like to help