Page 1 of 1
New Patches Available
Posted: Thu Apr 12, 2018 11:53 pm
by gbillat
Two new Patches were released today:
- 8.8.8 "Turing" Patch 1 (available as part of the patch package, not a download)
- 8.7.11 Patch 2 (available as a download)
For more info about both patches and how to get them, visit the blog
https://blog.zimbra.com/2018/04/new-pat ... 1-patch-2/.
Thanks!
Re: New Patches Available
Posted: Fri Apr 13, 2018 7:58 am
by Klug
What about 8.6?
Re: New Patches Available
Posted: Fri Apr 13, 2018 3:54 pm
by matteo.fracassetti
Hi all.
I just upgraded to 8.8.8 and installed patch1 on a multi-server staging environment on Oracle Linux 7.
Installation instruction says to install the patch on all nodes so I started from LDAP/Mailstore server and everythings went fine then I tried to install on my MTA/Proxy server and yum gave issues with dependencies:
Code: Select all
# yum install zimbra-patch
[...]
Resolving Dependencies
--> Running transaction check
---> Package zimbra-patch.x86_64 0:8.8.8.1.1522961836-1.r7 will be installed
[...]
--> Finished Dependency Resolution
Error: Package: zimbra-patch-8.8.8.1.1522961836-1.r7.x86_64 (zimbra-888-patch)
Requires: zimbra-store >= 8.8.8
You could try using --skip-broken to work around the problem
You could try running: rpm -Va --nofiles --nodigest
What about?
Re: New Patches Available
Posted: Fri Apr 13, 2018 4:11 pm
by Klug
It was reported elsewhere (Zeta mailing list) this patch looks like it might be deployed on store nodes only.
But there's no current acknowledge from Zimbra/Synacor about this (nor anything in the release notes, as you said).
Re: New Patches Available
Posted: Fri Apr 13, 2018 4:35 pm
by L. Mark Stone
And also don't forget on 8.8 that the Zimbra installer creates its own repos.
In conjunction with the new 8.8.8 Patch release, I also noted that "apt-get update; apt-get upgrade" lists a number of new Zimbra packages:
Setting up zimbra-mbox-war (1.0.0.1522952748-1.u16) ...
Setting up zimbra-mbox-conf (1.0.0.1522952748-1.u16) ...
Setting up zimbra-common-core-jar (1.0.0.1522952748-1.u16) ...
Setting up zimbra-mbox-service (1.0.0.1522952748-1.u16) ...
FWIW I did the package update before the Patch install.
Hope that helps,
Mark
Re: New Patches Available
Posted: Sat Apr 14, 2018 1:03 am
by milauria
Hats off to the community and to Zimbra for releasing these patches, notifying clearly on the forum and making them installable with repos ... it makes it a strong opensource product
Thanks !
Re: New Patches Available
Posted: Sun May 06, 2018 1:57 pm
by Klug
For those who did not notice (I did not see any announcement on the forum), there's a "patch 2" for 8.8.8 (published April 27).
https://blog.zimbra.com/2018/04/zimbra- ... available/
For those who might be interested in customer service and support, we're now waiting for more than 5 (five) months for some patches for ZCS 8.6 (that is officially supported till end of September).
CVE-2018-6882 was discovered in January and not fixed in the
patch released in February.
It's actually fixed (since early April) but the fix is not released and not ETA.
New vulnerabilities were discovered since, no information about 8.6 being at risk. Or not.
Re: New Patches Available
Posted: Mon May 14, 2018 8:24 am
by Klug
New patches were released:
viewtopic.php?f=8&t=64177