Zimbra 9.0.0 Patch 29 and 8.8.15 Patch 36 Released 8 December - Please Post Your Patching Results Here

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
User avatar
ccelis5215
Outstanding Member
Outstanding Member
Posts: 632
Joined: Sat Sep 13, 2014 2:04 am
Location: Caracas - Venezuela
ZCS/ZD Version: 8.8.15.GA.3869.UBUNTU18.64 P12

Re: Zimbra 9.0.0 Patch 29 and 8.8.15 Patch 36 Released 8 December - Please Post Your Patching Results Here

Post by ccelis5215 »

After some minutes doesnt send messages... no port 25 or 587 LISTENING... so we reversed to previous snapshot.....

Code: Select all

zimbra@mailserver:~$ netstat -tulpn
(Not all processes could be identified, non-owned process info
 will not be shown, you would have to be root to see it all.)
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
tcp        0      0 127.0.0.1:10026         0.0.0.0:*               LISTEN      4009/amavisd (maste
tcp        0      0 127.0.0.1:7306          0.0.0.0:*               LISTEN      3403/mysqld
tcp        0      0 0.0.0.0:11211           0.0.0.0:*               LISTEN      3869/memcached
tcp        0      0 127.0.0.1:3310          0.0.0.0:*               LISTEN      4235/clamd
tcp        0      0 0.0.0.0:110             0.0.0.0:*               LISTEN      3926/nginx: worker
tcp        0      0 0.0.0.0:143             0.0.0.0:*               LISTEN      3926/nginx: worker
tcp        0      0 127.0.0.1:10032         0.0.0.0:*               LISTEN      4009/amavisd (maste
tcp        0      0 127.0.0.1:8080          0.0.0.0:*               LISTEN      -
tcp        0      0 127.0.0.1:8465          0.0.0.0:*               LISTEN      4256/opendkim
tcp        0      0 0.0.0.0:7025            0.0.0.0:*               LISTEN      -
tcp        0      0 127.0.0.1:53            0.0.0.0:*               LISTEN      -
tcp        0      0 127.0.0.53:53           0.0.0.0:*               LISTEN      -
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      -
tcp        0      0 0.0.0.0:7993            0.0.0.0:*               LISTEN      -
tcp        0      0 0.0.0.0:443             0.0.0.0:*               LISTEN      3926/nginx: worker
tcp        0      0 0.0.0.0:7995            0.0.0.0:*               LISTEN      -
tcp        0      0 0.0.0.0:8443            0.0.0.0:*               LISTEN      -
tcp        0      0 0.0.0.0:7071            0.0.0.0:*               LISTEN      -
tcp        0      0 127.0.0.1:23232         0.0.0.0:*               LISTEN      3956/perl
tcp        0      0 0.0.0.0:7072            0.0.0.0:*               LISTEN      -
tcp        0      0 127.0.0.1:23233         0.0.0.0:*               LISTEN      3958/perl
tcp        0      0 0.0.0.0:993             0.0.0.0:*               LISTEN      3926/nginx: worker
tcp        0      0 0.0.0.0:7073            0.0.0.0:*               LISTEN      -
tcp        0      0 0.0.0.0:10050           0.0.0.0:*               LISTEN      -
tcp        0      0 0.0.0.0:995             0.0.0.0:*               LISTEN      3926/nginx: worker
tcp        0      0 127.0.0.1:7171          0.0.0.0:*               LISTEN      2067/java
tcp        0      0 0.0.0.0:7780            0.0.0.0:*               LISTEN      4301/httpd
tcp        0      0 192.168.1.5:389         0.0.0.0:*               LISTEN      -
tcp        0      0 0.0.0.0:7110            0.0.0.0:*               LISTEN      -
tcp        0      0 0.0.0.0:7143            0.0.0.0:*               LISTEN      -
tcp        0      0 127.0.0.1:10024         0.0.0.0:*               LISTEN      4009/amavisd (maste
tcp6       0      0 :::11211                :::*                    LISTEN      3869/memcached
tcp6       0      0 :::22                   :::*                    LISTEN      -
tcp6       0      0 :::10050                :::*                    LISTEN      -
udp        0      0 0.0.0.0:56053           0.0.0.0:*                           2067/java
udp        0      0 127.0.0.1:53            0.0.0.0:*                           -
udp        0      0 127.0.0.53:53           0.0.0.0:*                           -
udp        0      0 0.0.0.0:514             0.0.0.0:*                           -
udp        0      0 0.0.0.0:52048           0.0.0.0:*                           -
udp6       0      0 :::514                  :::*                                -
User avatar
ccelis5215
Outstanding Member
Outstanding Member
Posts: 632
Joined: Sat Sep 13, 2014 2:04 am
Location: Caracas - Venezuela
ZCS/ZD Version: 8.8.15.GA.3869.UBUNTU18.64 P12

Re: Zimbra 9.0.0 Patch 29 and 8.8.15 Patch 36 Released 8 December - Please Post Your Patching Results Here

Post by ccelis5215 »

Sending from webmail.:

Code: Select all

A network service error has occurred.
method:	[unknown]
msg:	system failure: MessagingException
code:	service.FAILURE
detail:	soap:Receiver
trace:	qtp192881625-289:1671590286668:a1ca84a7219d8bcb
request:	

Body: {
  SendMsgRequest: {
    _jsns: "urn:zimbraMail",
    m: {
      e: [
        // [0]:
        {
          a: "someaddress@gmail.com",
          p: "someaddress",
          t: "t"
         },
        // [1]:
        {
          a: "accoung@mydomain",
          p: "My Name",
          t: "f"
         }
       ],
      idnt: "993c601d-d33d-4231-a41c-19199779653d",
      mp: [
        // [0]:
        {
          ct: "multipart/alternative",
          mp: [
            // [0]:
            {
              content: {
                _content: "Test 


"
               },
              ct: "text/plain"
             },
            // [1]:
            {
              content: {
                _content: "<html><body><div style="font-family: trebuchet ms,sans-serif; font-size: 12pt; color: #000000"><div>Test<br></div><div><br></div><div data-marker="__SIG_PRE__"><div><span style="font-size: 9.0pt; font-family: 'Arial','sans-serif';"><br></span></div></div></div></body></html>"
               },
              ct: "text/html"
             }
           ]
         }
       ],
      su: {
        _content: "Test"
       }
     },
    suid: 1671590286614
   }
 },
Header: {
  context: {
    _jsns: "urn:zimbra",
    account: {
      _content: "account@mydomain",
      by: "name"
     },
    authToken: "(removed)",
    csrfToken: "0_468b2ad0340c7ea7132106ff20eb0fd045bccd1b",
    notify: {
      seq: 1
     },
    session: {
      _content: 1561,
      id: 1561
     },
    userAgent: {
      name: "ZimbraWebClient - FF108 (Win)",
      version: "8.8.15_GA_4481"
     }
   }
 }
User avatar
ccelis5215
Outstanding Member
Outstanding Member
Posts: 632
Joined: Sat Sep 13, 2014 2:04 am
Location: Caracas - Venezuela
ZCS/ZD Version: 8.8.15.GA.3869.UBUNTU18.64 P12

Re: Zimbra 9.0.0 Patch 29 and 8.8.15 Patch 36 Released 8 December - Please Post Your Patching Results Here

Post by ccelis5215 »

ccelis5215 wrote:Hello,

Just upgrade from P34 to Release 8.8.15.GA.3869.UBUNTU18.64 UBUNTU18_64 FOSS edition, Patch 8.8.15_P36.

Everything seems ok but some errors in zimbra.log

Code: Select all

Dec 20 21:33:45 mailserver zmconfigd[85464]: Rewrite failed: [Errno 2] No such file or directory: '/opt/zimbra/common/conf/master.cf.in' ([Errno 2] No such file or directory: '/opt/zimbra/common/conf/master.cf.in')
Dec 20 21:34:53 mailserver zmconfigd[85464]: Rewrite failed: [Errno 2] No such file or directory: '/opt/zimbra/common/conf/tag_as_originating.re.in' ([Errno 2] No such file or directory: '/opt/zimbra/common/conf/tag_as_originating.re.in')
Dec 20 21:34:53 mailserver zmconfigd[85464]: Rewrite failed: [Errno 2] No such file or directory: '/opt/zimbra/common/conf/tag_as_foreign.re.in' ([Errno 2] No such file or directory: '/opt/zimbra/common/conf/tag_as_foreign.re.in')
After some tests sending and receiving and https://wiki.zimbra.com/wiki/Missing_ma ... rror_-_MTA changing files of course those errors doesn't appear in log.

but /opt/zimbra/common/conf/ looks strange to says the least

Code: Select all

zimbra@engine:~/common/conf$ ls -slt
total 312
36 -rw-r--r-- 1 root   root   32954 Dec 20 21:57 main.cf
 0 -r--r----- 1 zimbra zimbra     0 Dec 20 21:56 master.cf
 0 -r--r----- 1 zimbra zimbra     0 Dec 20 21:56 tag_as_foreign.re
 0 -r--r----- 1 zimbra zimbra     0 Dec 20 21:56 tag_as_originating.re
 0 -rw-r----- 1 zimbra zimbra     0 Dec 20 21:42 tag_as_foreign.re.in
 0 -rw-r----- 1 zimbra zimbra     0 Dec 20 21:42 tag_as_originating.re.in
 0 -rw-r----- 1 zimbra zimbra     0 Dec 20 21:41 master.cf.in
28 -rw-r--r-- 1 root   zimbra 26493 Jun 30  2021 LICENSE
 4 -rw-r--r-- 1 root   zimbra  1629 Jun 30  2021 TLS_LICENSE
24 -rw-r--r-- 1 root   zimbra 21111 Jun 30  2021 access
12 -rw-r--r-- 1 root   zimbra 10519 Jun 30  2021 aliases
 4 -rw-r--r-- 1 root   zimbra  3547 Jun 30  2021 bounce.cf.default
16 -rw-r--r-- 1 root   zimbra 13194 Jun 30  2021 canonical
12 -rw-r--r-- 1 root   zimbra 10221 Jun 30  2021 generic
24 -rw-r--r-- 1 root   zimbra 23802 Jun 30  2021 header_checks
40 -rw-r--r-- 1 root   zimbra 38573 Jun 30  2021 main.cf.default
28 -rw-r--r-- 1 root   zimbra 28078 Jun 30  2021 main.cf.proto
 8 -rw-r--r-- 1 root   zimbra  4217 Jun 30  2021 makedefs.out
 8 -rw-r--r-- 1 root   zimbra  6629 Jun 30  2021 master.cf.proto
20 -rw-r--r-- 1 root   zimbra 20463 Jun 30  2021 postfix-files
 8 -rw-r--r-- 1 root   zimbra  6929 Jun 30  2021 relocated
16 -rw-r--r-- 1 root   zimbra 13442 Jun 30  2021 transport
16 -rw-r--r-- 1 root   zimbra 13963 Jun 30  2021 virtual
 4 -rw-rw-r-- 1 root   root    2241 Sep 17  2019 snmp.conf
 4 drwxr-xr-x 2 root   zimbra  4096 May  1  2015 postfix-files.d
What do you think? Your comments will be welcomed.

ccelis

uhm.... after reversing snapshot.... obviously there's some issue with the aforementioned files....

Code: Select all

root@engine:/opt/zimbra/common/conf# ls -slt
total 332
36 -rw-r--r-- 1 root   root   32954 Dec 20 22:52 main.cf
12 -r--r----- 1 zimbra zimbra  8560 Dec 19 06:25 master.cf
 4 -r--r----- 1 zimbra zimbra    42 Dec 19 06:25 tag_as_foreign.re
 4 -r--r----- 1 zimbra zimbra    42 Dec 19 06:25 tag_as_originating.re
24 -rw-r--r-- 1 root   zimbra 21111 Jun 30  2021 access
12 -rw-r--r-- 1 root   zimbra 10519 Jun 30  2021 aliases
 4 -rw-r--r-- 1 root   zimbra  3547 Jun 30  2021 bounce.cf.default
16 -rw-r--r-- 1 root   zimbra 13194 Jun 30  2021 canonical
12 -rw-r--r-- 1 root   zimbra 10221 Jun 30  2021 generic
24 -rw-r--r-- 1 root   zimbra 23802 Jun 30  2021 header_checks
28 -rw-r--r-- 1 root   zimbra 26493 Jun 30  2021 LICENSE
40 -rw-r--r-- 1 root   zimbra 38573 Jun 30  2021 main.cf.default
28 -rw-r--r-- 1 root   zimbra 28078 Jun 30  2021 main.cf.proto
 8 -rw-r--r-- 1 root   zimbra  4217 Jun 30  2021 makedefs.out
 8 -rw-r--r-- 1 root   zimbra  6629 Jun 30  2021 master.cf.proto
20 -rw-r--r-- 1 root   zimbra 20463 Jun 30  2021 postfix-files
 8 -rw-r--r-- 1 root   zimbra  6929 Jun 30  2021 relocated
 4 -rw-r--r-- 1 root   zimbra  1629 Jun 30  2021 TLS_LICENSE
16 -rw-r--r-- 1 root   zimbra 13442 Jun 30  2021 transport
16 -rw-r--r-- 1 root   zimbra 13963 Jun 30  2021 virtual
 4 -rw-rw-r-- 1 root   root    2241 Sep 17  2019 snmp.conf
 4 drwxr-xr-x 2 root   zimbra  4096 May  1  2015 postfix-files.d
User avatar
gabrieles
Outstanding Member
Outstanding Member
Posts: 233
Joined: Tue Feb 14, 2017 9:40 am

Re: Zimbra 9.0.0 Patch 29 and 8.8.15 Patch 36 Released 8 December - Please Post Your Patching Results Here

Post by gabrieles »

So after two weeks basically we have a 25%:

gabrieles - single Centos7 9.0.0 P26->P29 - KO
gabrieles - dual Centos7 NETWORK 8.8.15 P33->P36 - OK
dbayer - single Ubuntu18 8.8.15 P35->P36 - KO
ccelis5215 - Ubuntu18 FOSS 8.8.15 P34->P36 - KO

Seems like no one here wants to be a guinea pig. It would be nice to know if Synacor is aware of this level of trust.
Guys, post more success stories or with this sad percentage this is gonna be labeled as another toxic patch....
haroon.rasheed43
Posts: 3
Joined: Wed Oct 05, 2022 6:23 am

Re: Zimbra 9.0.0 Patch 29 and 8.8.15 Patch 36 Released 8 December - Please Post Your Patching Results Here

Post by haroon.rasheed43 »

I found an issue when I do yum update on CentOS7.

The zmcontrol restarted but the admin console and client were not accessible to all users.

below find the screenshot.

kernel update affected the complete server.
Attachments
Zimbra-P36-err.jpg
Zimbra-P36-err.jpg (121.38 KiB) Viewed 2992 times
User avatar
gabrieles
Outstanding Member
Outstanding Member
Posts: 233
Joined: Tue Feb 14, 2017 9:40 am

Re: Zimbra 9.0.0 Patch 29 and 8.8.15 Patch 36 Released 8 December - Please Post Your Patching Results Here

Post by gabrieles »

gabrieles wrote:So after two weeks basically we have a 25%:

gabrieles - single Centos7 9.0.0 P26->P29 - KO
gabrieles - dual Centos7 NETWORK 8.8.15 P33->P36 - OK
dbayer - single Ubuntu18 8.8.15 P35->P36 - KO
ccelis5215 - Ubuntu18 FOSS 8.8.15 P34->P36 - KO
Hi all,
we re-patched the single Centos7 in two steps (first OS then zimbra) and all went well
We patched even a single server Ubuntu 18 8.8.15 NETWORK from 33 to 36 and was all OK
So far we have a little improvement:

gabrieles - single Centos7 9.0.0 P26->P29 - OK
gabrieles - dual Centos7 NETWORK 8.8.15 P33->P36 - OK
dbayer - single Ubuntu18 8.8.15 P35->P36 - KO
ccelis5215 - Ubuntu18 FOSS 8.8.15 P34->P36 - KO
haroon.rasheed43 - no data... have you reverted back?
gabrieles - single Ubuntu 18 NETWORK 8.8.15 P33->P36 - OK
7224jobe
Outstanding Member
Outstanding Member
Posts: 283
Joined: Sat Sep 13, 2014 1:55 am
ZCS/ZD Version: 8.8.15_FOSS Patch38

Re: Zimbra 9.0.0 Patch 29 and 8.8.15 Patch 36 Released 8 December - Please Post Your Patching Results Here

Post by 7224jobe »

Hi Gabrieles, to update OS first and then Zimbra which command did you use on CentOS?

Code: Select all

yum update --exclude=zimbra*
yum update
?
ghen
Outstanding Member
Outstanding Member
Posts: 258
Joined: Thu May 12, 2016 1:56 pm
Location: Belgium
ZCS/ZD Version: 9.0.0

Re: Zimbra 9.0.0 Patch 29 and 8.8.15 Patch 36 Released 8 December - Please Post Your Patching Results Here

Post by ghen »

haroon.rasheed43 wrote:I found an issue when I do yum update on CentOS7.

The zmcontrol restarted but the admin console and client were not accessible to all users.

below find the screenshot.

kernel update affected the complete server.
initramfs failure indicates that cpio was removed by a hacker when you were compromised via CVE-2022-41352 (amavisd cpio exploit), see similar reports here, here and here.
User avatar
gabrieles
Outstanding Member
Outstanding Member
Posts: 233
Joined: Tue Feb 14, 2017 9:40 am

Re: Zimbra 9.0.0 Patch 29 and 8.8.15 Patch 36 Released 8 December - Please Post Your Patching Results Here

Post by gabrieles »

7224jobe wrote:Hi Gabrieles, to update OS first and then Zimbra which command did you use on CentOS?

Code: Select all

yum update --exclude=zimbra*
yum update
?
sed -i 's/enabled=1/enabled=0/g' /etc/yum.repos.d/zimbra.repo
yum update
switch 1/0 to reenable
szabolcs
Posts: 1
Joined: Mon Feb 06, 2023 9:35 am

Re: Zimbra 9.0.0 Patch 29 and 8.8.15 Patch 36 Released 8 December - Please Post Your Patching Results Here

Post by szabolcs »

Hi,

We have applied 8.8.15p36 to our Centos 7 server and after the update the mailbox service doesn't start.
We reinstalled all of the updated packages again, to check if it is there any errors or warnings, but everything seems OK.

A lot of errors appeared in "/opt/zimbra/log/zmmailboxd.out"
The errors like this and similar:
"Caused by: MultiException[java.lang.NumberFormatException: For input string: "%%zimbraHttpDosFilterMaxRequestsPerSec%%""

You should check the zmmailboxd.out and is you have similar exceptions then you should check this:
viewtopic.php?f=13&t=71214

"stasov" user sent in a post, using that post, the missing variables can be changed to static values, after that the zimbra mailbox service is working.

It is not a beautiful workaround, but in the last case, you can use it.
dbayer wrote:Update on

Ubuntu 18.04
Zimbra 8.8.15p35

When we applied Patch 35, everything seemed to go smoothly.
Now with Patch 36, after a reboot most of the Zimbra Services would not start. For new we just rolled back to the snapshot we took just before updating.
Post Reply