Any news on 8.8.15 Patch 34?

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
hisfran
Posts: 31
Joined: Tue Apr 29, 2014 2:10 pm

Any news on 8.8.15 Patch 34?

Post by hisfran »

Does anyone knows the status of the next patch?
Just wondering why Zimbra 8.8.15 Patch 34 was scheduled to be released Sept. 26, but is not available yet.

Fran
User avatar
L. Mark Stone
Ambassador
Ambassador
Posts: 2796
Joined: Wed Oct 09, 2013 11:35 am
Location: Portland, Maine, US
ZCS/ZD Version: 10.0.6 Network Edition
Contact:

Re: Any news on 8.8.15 Patch 34?

Post by L. Mark Stone »

October 3 allegedly!
___________________________________
L. Mark Stone
Mission Critical Email - Zimbra VAR/BSP/Training Partner https://www.missioncriticalemail.com/
AWS Certified Solutions Architect-Associate
liverpoolfcfan
Elite member
Elite member
Posts: 1096
Joined: Sat Sep 13, 2014 12:47 am

Re: Any news on 8.8.15 Patch 34?

Post by liverpoolfcfan »

Perhaps testing is taking longer than usual
User avatar
L. Mark Stone
Ambassador
Ambassador
Posts: 2796
Joined: Wed Oct 09, 2013 11:35 am
Location: Portland, Maine, US
ZCS/ZD Version: 10.0.6 Network Edition
Contact:

Re: Any news on 8.8.15 Patch 34?

Post by L. Mark Stone »

liverpoolfcfan wrote:Perhaps testing is taking longer than usual
As I understand it, the date published in the Partner Portal, when first published, is a target date but not a firm commitment date. I don't see that date gets updated, even when Zimbra later knows that the date has changed.

Years ago I headed a $5 million agile software development project, and we had 4-6 week sprints similar to what Zimbra does. The last week of our sprints was occupied mostly by final fixes based on QA testing (things that didn't get caught in unit testing), and then rerunning unit and QA testing. Software is complex; sometimes we just ran out of time. And since our software managed online procurement, we would periodically just push the release date out a week or so to be sure we actually (a) fixed the unanticipated issues that popped up during the last week of the sprint, and (b) delivered the fixes promised for each release in good working order.

Personally, I'd rather Zimbra "delay" a Patch by a week or so to avoid shipping product with known defects. I also feel that the oft-rumored slipstreaming of important security patches separate and apart from the scheduled Patches, if/when adopted, will likely help keep traditional Patches better on schedule.

Please be sure you subscribe to the new Security Mailing List! Go to https://www.zimbra.com/downloads/ and scroll to the bottom.

Hope that helps,
Mark
___________________________________
L. Mark Stone
Mission Critical Email - Zimbra VAR/BSP/Training Partner https://www.missioncriticalemail.com/
AWS Certified Solutions Architect-Associate
rainer_d
Advanced member
Advanced member
Posts: 86
Joined: Fri Sep 12, 2014 11:40 pm

Re: Any news on 8.8.15 Patch 34?

Post by rainer_d »

Thanks.

Usually, it happens very late in the day, from a CE(S)T point of view ;-)
User avatar
gabrieles
Outstanding Member
Outstanding Member
Posts: 233
Joined: Tue Feb 14, 2017 9:40 am

Re: Any news on 8.8.15 Patch 34?

Post by gabrieles »

L. Mark Stone wrote:
liverpoolfcfan wrote:Perhaps testing is taking longer than usual
Personally, I'd rather Zimbra "delay" a Patch by a week or so to avoid shipping product with known defects.
Me too. We had several case opened for p32 / p33 bugs and didn't missed to remind every time how the customer was angry and ready to switch to O365/GApps.
I hope that moved something, but...
liverpoolfcfan
Elite member
Elite member
Posts: 1096
Joined: Sat Sep 13, 2014 12:47 am

Re: Any news on 8.8.15 Patch 34?

Post by liverpoolfcfan »

I see there are now Release Notes posted - https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P34 - however, yum check-update does not find anything new in the repository. 8.8.15p33 FOSS.

Interestingly it states "Note: Additional configuration for further hardening your Zimbra setup can be found on the Zimbra Support Portal (link). It is recommended that all customers consider these additional steps."

Why would additional hardening information only be provided through support? Surely every zimbra server hack (NETWORK or FOSS) causes reputational damage to zimbra. Why only tell some of your users how to reduce the likelihood?
BradC
Outstanding Member
Outstanding Member
Posts: 265
Joined: Tue May 03, 2016 1:39 am

Re: Any news on 8.8.15 Patch 34?

Post by BradC »

liverpoolfcfan wrote:I see there are now Release Notes posted - https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P34 - however, yum check-update does not find anything new in the repository. 8.8.15p33 FOSS.
As is 9.0.0p27.
liverpoolfcfan wrote:Interestingly it states "Note: Additional configuration for further hardening your Zimbra setup can be found on the Zimbra Support Portal (link). It is recommended that all customers consider these additional steps."
Remember, FOSS users are not "customers". I get the feeling Synacor is just waiting for the remaining FOSS "user" to "give up and go away". If they can set it up so that only "customers" get the advice, eventually FOSS users will get sick of being infected and move to O365. Win!
User avatar
jered
Advanced member
Advanced member
Posts: 53
Joined: Sat Sep 13, 2014 12:35 am
Location: Somerville, MA

Re: Any news on 8.8.15 Patch 34?

Post by jered »

It looks like an announcement was posted this morning and then removed... hopefully soon.

Worth reviewing this thread, though: viewtopic.php?t=71153&p=306532

It looks like if you are on RHEL and run Zimbra, you are almost certainly already pwned. :-( I wish there had been an announcement about installing 'pax' when this was revealed a few weeks ago. Any directions on how to tell if an exploit has already been loaded?
User avatar
L. Mark Stone
Ambassador
Ambassador
Posts: 2796
Joined: Wed Oct 09, 2013 11:35 am
Location: Portland, Maine, US
ZCS/ZD Version: 10.0.6 Network Edition
Contact:

Re: Any news on 8.8.15 Patch 34?

Post by L. Mark Stone »

As of 10:56am Eastern, Patch 34 is released and available in the Ubuntu 16, 18 and 20 repos. I can't confirm availability in the RH-based repos.

Release Notes:
https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P34
https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P27

Hope that helps,
Mark
___________________________________
L. Mark Stone
Mission Critical Email - Zimbra VAR/BSP/Training Partner https://www.missioncriticalemail.com/
AWS Certified Solutions Architect-Associate
Post Reply