Any news on 8.8.15 Patch 34?
Any news on 8.8.15 Patch 34?
Does anyone knows the status of the next patch?
Just wondering why Zimbra 8.8.15 Patch 34 was scheduled to be released Sept. 26, but is not available yet.
Fran
Just wondering why Zimbra 8.8.15 Patch 34 was scheduled to be released Sept. 26, but is not available yet.
Fran
- L. Mark Stone
- Ambassador
- Posts: 2802
- Joined: Wed Oct 09, 2013 11:35 am
- Location: Portland, Maine, US
- ZCS/ZD Version: 10.0.7 Network Edition
- Contact:
Re: Any news on 8.8.15 Patch 34?
October 3 allegedly!
___________________________________
L. Mark Stone
Mission Critical Email - Zimbra VAR/BSP/Training Partner https://www.missioncriticalemail.com/
AWS Certified Solutions Architect-Associate
L. Mark Stone
Mission Critical Email - Zimbra VAR/BSP/Training Partner https://www.missioncriticalemail.com/
AWS Certified Solutions Architect-Associate
-
- Elite member
- Posts: 1112
- Joined: Sat Sep 13, 2014 12:47 am
Re: Any news on 8.8.15 Patch 34?
Perhaps testing is taking longer than usual
- L. Mark Stone
- Ambassador
- Posts: 2802
- Joined: Wed Oct 09, 2013 11:35 am
- Location: Portland, Maine, US
- ZCS/ZD Version: 10.0.7 Network Edition
- Contact:
Re: Any news on 8.8.15 Patch 34?
As I understand it, the date published in the Partner Portal, when first published, is a target date but not a firm commitment date. I don't see that date gets updated, even when Zimbra later knows that the date has changed.liverpoolfcfan wrote:Perhaps testing is taking longer than usual
Years ago I headed a $5 million agile software development project, and we had 4-6 week sprints similar to what Zimbra does. The last week of our sprints was occupied mostly by final fixes based on QA testing (things that didn't get caught in unit testing), and then rerunning unit and QA testing. Software is complex; sometimes we just ran out of time. And since our software managed online procurement, we would periodically just push the release date out a week or so to be sure we actually (a) fixed the unanticipated issues that popped up during the last week of the sprint, and (b) delivered the fixes promised for each release in good working order.
Personally, I'd rather Zimbra "delay" a Patch by a week or so to avoid shipping product with known defects. I also feel that the oft-rumored slipstreaming of important security patches separate and apart from the scheduled Patches, if/when adopted, will likely help keep traditional Patches better on schedule.
Please be sure you subscribe to the new Security Mailing List! Go to https://www.zimbra.com/downloads/ and scroll to the bottom.
Hope that helps,
Mark
___________________________________
L. Mark Stone
Mission Critical Email - Zimbra VAR/BSP/Training Partner https://www.missioncriticalemail.com/
AWS Certified Solutions Architect-Associate
L. Mark Stone
Mission Critical Email - Zimbra VAR/BSP/Training Partner https://www.missioncriticalemail.com/
AWS Certified Solutions Architect-Associate
Re: Any news on 8.8.15 Patch 34?
Thanks.
Usually, it happens very late in the day, from a CE(S)T point of view
Usually, it happens very late in the day, from a CE(S)T point of view
Re: Any news on 8.8.15 Patch 34?
Me too. We had several case opened for p32 / p33 bugs and didn't missed to remind every time how the customer was angry and ready to switch to O365/GApps.L. Mark Stone wrote:Personally, I'd rather Zimbra "delay" a Patch by a week or so to avoid shipping product with known defects.liverpoolfcfan wrote:Perhaps testing is taking longer than usual
I hope that moved something, but...
-
- Elite member
- Posts: 1112
- Joined: Sat Sep 13, 2014 12:47 am
Re: Any news on 8.8.15 Patch 34?
I see there are now Release Notes posted - https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P34 - however, yum check-update does not find anything new in the repository. 8.8.15p33 FOSS.
Interestingly it states "Note: Additional configuration for further hardening your Zimbra setup can be found on the Zimbra Support Portal (link). It is recommended that all customers consider these additional steps."
Why would additional hardening information only be provided through support? Surely every zimbra server hack (NETWORK or FOSS) causes reputational damage to zimbra. Why only tell some of your users how to reduce the likelihood?
Interestingly it states "Note: Additional configuration for further hardening your Zimbra setup can be found on the Zimbra Support Portal (link). It is recommended that all customers consider these additional steps."
Why would additional hardening information only be provided through support? Surely every zimbra server hack (NETWORK or FOSS) causes reputational damage to zimbra. Why only tell some of your users how to reduce the likelihood?
Re: Any news on 8.8.15 Patch 34?
As is 9.0.0p27.liverpoolfcfan wrote:I see there are now Release Notes posted - https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P34 - however, yum check-update does not find anything new in the repository. 8.8.15p33 FOSS.
Remember, FOSS users are not "customers". I get the feeling Synacor is just waiting for the remaining FOSS "user" to "give up and go away". If they can set it up so that only "customers" get the advice, eventually FOSS users will get sick of being infected and move to O365. Win!liverpoolfcfan wrote:Interestingly it states "Note: Additional configuration for further hardening your Zimbra setup can be found on the Zimbra Support Portal (link). It is recommended that all customers consider these additional steps."
Re: Any news on 8.8.15 Patch 34?
It looks like an announcement was posted this morning and then removed... hopefully soon.
Worth reviewing this thread, though: viewtopic.php?t=71153&p=306532
It looks like if you are on RHEL and run Zimbra, you are almost certainly already pwned. I wish there had been an announcement about installing 'pax' when this was revealed a few weeks ago. Any directions on how to tell if an exploit has already been loaded?
Worth reviewing this thread, though: viewtopic.php?t=71153&p=306532
It looks like if you are on RHEL and run Zimbra, you are almost certainly already pwned. I wish there had been an announcement about installing 'pax' when this was revealed a few weeks ago. Any directions on how to tell if an exploit has already been loaded?
- L. Mark Stone
- Ambassador
- Posts: 2802
- Joined: Wed Oct 09, 2013 11:35 am
- Location: Portland, Maine, US
- ZCS/ZD Version: 10.0.7 Network Edition
- Contact:
Re: Any news on 8.8.15 Patch 34?
As of 10:56am Eastern, Patch 34 is released and available in the Ubuntu 16, 18 and 20 repos. I can't confirm availability in the RH-based repos.
Release Notes:
https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P34
https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P27
Hope that helps,
Mark
Release Notes:
https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P34
https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P27
Hope that helps,
Mark
___________________________________
L. Mark Stone
Mission Critical Email - Zimbra VAR/BSP/Training Partner https://www.missioncriticalemail.com/
AWS Certified Solutions Architect-Associate
L. Mark Stone
Mission Critical Email - Zimbra VAR/BSP/Training Partner https://www.missioncriticalemail.com/
AWS Certified Solutions Architect-Associate