New Patches Available

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
gbillat
Zimbra Employee
Zimbra Employee
Posts: 39
Joined: Fri Oct 18, 2013 9:08 am

New Patches Available

Postby gbillat » Thu Apr 12, 2018 11:53 pm

Two new Patches were released today:
- 8.8.8 "Turing" Patch 1 (available as part of the patch package, not a download)
- 8.7.11 Patch 2 (available as a download)

For more info about both patches and how to get them, visit the blog https://blog.zimbra.com/2018/04/new-patches-for-you-zimbra-8-8-8-turing-patch-1-zimbra-8-7-11-patch-2/.

Thanks!


Klug
Elite member
Elite member
Posts: 2281
Joined: Mon Dec 16, 2013 11:35 am
Contact:

Re: New Patches Available

Postby Klug » Fri Apr 13, 2018 7:58 am

What about 8.6?
matteo.fracassetti
Posts: 16
Joined: Thu Feb 08, 2018 3:56 pm

Re: New Patches Available

Postby matteo.fracassetti » Fri Apr 13, 2018 3:54 pm

Hi all.
I just upgraded to 8.8.8 and installed patch1 on a multi-server staging environment on Oracle Linux 7.

Installation instruction says to install the patch on all nodes so I started from LDAP/Mailstore server and everythings went fine then I tried to install on my MTA/Proxy server and yum gave issues with dependencies:

Code: Select all

 
# yum install zimbra-patch
[...]
Resolving Dependencies
--> Running transaction check
---> Package zimbra-patch.x86_64 0:8.8.8.1.1522961836-1.r7 will be installed
[...]
--> Finished Dependency Resolution
Error: Package: zimbra-patch-8.8.8.1.1522961836-1.r7.x86_64 (zimbra-888-patch)
           Requires: zimbra-store >= 8.8.8
 You could try using --skip-broken to work around the problem
 You could try running: rpm -Va --nofiles --nodigest


What about?
Klug
Elite member
Elite member
Posts: 2281
Joined: Mon Dec 16, 2013 11:35 am
Contact:

Re: New Patches Available

Postby Klug » Fri Apr 13, 2018 4:11 pm

It was reported elsewhere (Zeta mailing list) this patch looks like it might be deployed on store nodes only.

But there's no current acknowledge from Zimbra/Synacor about this (nor anything in the release notes, as you said).
User avatar
L. Mark Stone
Elite member
Elite member
Posts: 1794
Joined: Wed Oct 09, 2013 11:35 am
Location: Portland, Maine
ZCS/ZD Version: 8.8.8 Patch 6 Network Edition
Contact:

Re: New Patches Available

Postby L. Mark Stone » Fri Apr 13, 2018 4:35 pm

And also don't forget on 8.8 that the Zimbra installer creates its own repos.

In conjunction with the new 8.8.8 Patch release, I also noted that "apt-get update; apt-get upgrade" lists a number of new Zimbra packages:

Setting up zimbra-mbox-war (1.0.0.1522952748-1.u16) ...
Setting up zimbra-mbox-conf (1.0.0.1522952748-1.u16) ...
Setting up zimbra-common-core-jar (1.0.0.1522952748-1.u16) ...
Setting up zimbra-mbox-service (1.0.0.1522952748-1.u16) ...


FWIW I did the package update before the Patch install.

Hope that helps,
Mark
___________________________________
L. Mark Stone
Mission Critical Email - Zimbra VAR/BSP/Training Partner https://www.missioncriticalemail.com/
Zeta Alliance http://www.zetalliance.org/
milauria
Advanced member
Advanced member
Posts: 55
Joined: Mon Aug 15, 2016 12:32 pm

Re: New Patches Available

Postby milauria » Sat Apr 14, 2018 1:03 am

Hats off to the community and to Zimbra for releasing these patches, notifying clearly on the forum and making them installable with repos ... it makes it a strong opensource product ;)
Thanks !
Klug
Elite member
Elite member
Posts: 2281
Joined: Mon Dec 16, 2013 11:35 am
Contact:

Re: New Patches Available

Postby Klug » Sun May 06, 2018 1:57 pm

For those who did not notice (I did not see any announcement on the forum), there's a "patch 2" for 8.8.8 (published April 27).
https://blog.zimbra.com/2018/04/zimbra- ... available/

For those who might be interested in customer service and support, we're now waiting for more than 5 (five) months for some patches for ZCS 8.6 (that is officially supported till end of September).

CVE-2018-6882 was discovered in January and not fixed in the patch released in February.
It's actually fixed (since early April) but the fix is not released and not ETA.
New vulnerabilities were discovered since, no information about 8.6 being at risk. Or not.
Klug
Elite member
Elite member
Posts: 2281
Joined: Mon Dec 16, 2013 11:35 am
Contact:

Re: New Patches Available

Postby Klug » Mon May 14, 2018 8:24 am

New patches were released: viewtopic.php?f=8&t=64177

Return to “Administrators”

Who is online

Users browsing this forum: No registered users and 29 guests