Zimbra Collaboration 8.5.1 and 8.0.9 are now GA, with important Security Updates

[jorgedlcruz]

Hi Zimbra Community, today is an important day as the 8.5.1 and 8.0.9 security releases are now public.
These two updates contain the patches for multiple security issues, (CVE-2014-3513), (CVE-2014-3567) and (CVE-2014-3568) are now fixed, and Zimbra Collaboration now uses the OpenSSL version 1.0.1j in all components.
Additionally, in both versions Zimbra fixed Bug 96145, which is related to the recent Moscow and Saint Petersburg time zone change. Russia was in the same time zone during the past years by order of the Government, but this year our customers and users in Russia again change the time zone, from +4 hours to +3 hours. Zimbra Collaboration now supports this new Russia time zone.
The ZCS 8.5.1 and 8.0.9 downloads (tgz and md5) and Release Notes are available here:

Zimbra Collaboration Network Edition: http://www.zimbra.com/downloads/zimbra-collaboration
Zimbra Collaboration Open-Source Edition: http://www.zimbra.com/downloads/zimbra- ... pen-source

Don’t miss the rest of the fixed bugs, every of them are important:
8.5.1 – Bug List resolved

96008 – Upgrade to OpenSSL 1.0.1j in all Zimbra Collaboration components, fixing a critical security issue with Dos vulnerability
95237 – Zimbra Disclaimer/Signature Option per Domain does not work.
95461 – RHEL rpm packaging sets /opt/zimbra/conf files as executable
96145 – Moscow timezone change
94725 – Update timezones.ics to tzdata2014i.tar.gz
96084 – Logrotate Cron error after update to 8.0.8
96120 – ZCS open source license update for 8.5.1 GA
96195 – Upgrade step for migrating global disclaimers to domain level is broken

8.0.9 – Bug List resolved

96008 – Upgrade to OpenSSL 1.0.1j in all Zimbra Collaboration components, fixing a critical security issue with Dos vulnerability
96145 – Moscow timezone change
94725 – Update timezones.ics to tzdata2014i.tar.gz
96084 – Logrotate Cron error after update to 8.0.8
96113 – ZCS open source license update for 8.0.9 GA

Please let us know if you have any questions or issues.
Security Blog - http://community.zimbra.com/support/sec ... -amp-8-5-1
Blog article - http://community.zimbra.com/zblogs/b/te ... -amp-8-5-1

[fnoopdogg]

The release graphic above says 'inlcuded'

[jorgedlcruz]

Fixed, thank you

[davidkillingsworth]

Awesome news on the per domain site wide disclaimer. We've been waiting 2+ years for that.



Thank You!