8.8.12 Patch 3 breaks inline signatures and creates multiple attachments

Ask questions about your setup or get help installing ZCS server (ZD section below).
User avatar
jered
Advanced member
Advanced member
Posts: 53
Joined: Sat Sep 13, 2014 12:35 am
Location: Somerville, MA

Re: 8.8.12 Patch 3 breaks inline signatures and creates multiple attachments

Post by jered »

andrey.ivanov wrote:An easier workaround from Zimbra support :

Code: Select all

As a workaround please do the following on all mailbox servers
zmlocalconfig -e zimbra_use_owasp_html_sanitizer=FALSE
zmmailboxdctl restart
It did help me. Unfortunately it means that their new owasp sanitizing framework is disabled (https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.12/P3). But it fixes both attachments and printing problems,
THANK YOU!!!!

This is the simplest and best solution -- the above rebuilding zgz files works for the attachment hell, but doesn't fix the unreadable HTML mail. I wish Zimbra were more responsive as an organization, and told us this two weeks ago.
rotorboy
Advanced member
Advanced member
Posts: 169
Joined: Fri Sep 12, 2014 11:24 pm

Re: 8.8.12 Patch 3 breaks inline signatures and creates multiple attachments

Post by rotorboy »

Thanks for the post with the working solution!
ggoidin
Posts: 1
Joined: Mon May 27, 2019 1:14 pm

Re: 8.8.12 Patch 3 breaks inline signatures and creates multiple attachments

Post by ggoidin »

Hello, is there any date from Zimbra for a fix update ?
r13e
Posts: 2
Joined: Fri Apr 12, 2019 10:29 am

Re: 8.8.12 Patch 3 breaks inline signatures and creates multiple attachments

Post by r13e »

Got an anwer about my concerns disabling the owasp sanitizer:
No, there aren't any security implications after disabling the owasp sanitizer. When you disable it, the defanger is active and protects the system. Owasp sanitizer introduces performance enhancement over defanger but there are no such known security issues which are introduced after disabling the owasp sanitizer.
G2M2
Posts: 1
Joined: Tue Apr 19, 2016 9:47 pm

Re: 8.8.12 Patch 3 breaks inline signatures and creates multiple attachments

Post by G2M2 »

Hello,

I've installed Patch 6 on Zimbra FOSS 8.8.12 and I still have the issue.
I know there is a workaround :

Code: Select all

zmlocalconfig -e zimbra_use_owasp_html_sanitizer=false
But is there another solution yet?

Regards,
Geoffroy
Pierre C.
Posts: 6
Joined: Fri Jun 23, 2017 6:05 am

Re: 8.8.12 Patch 3 breaks inline signatures and creates multiple attachments

Post by Pierre C. »

G2M2 wrote:Hello,

I've installed Patch 6 on Zimbra FOSS 8.8.12 and I still have the issue.
I know there is a workaround :

Code: Select all

zmlocalconfig -e zimbra_use_owasp_html_sanitizer=false
But is there another solution yet?

Regards,
Geoffroy
Hello Geoffroy, Hello all,

I'm not sure for the 8.8.12 Patch 6 version, but for my part (8.8. 15 Patch 3) I recently had an exchange with Zimbra support.

They explained to me that this only works for new emails.

For historical emails, there is no patch.
User avatar
jered
Advanced member
Advanced member
Posts: 53
Joined: Sat Sep 13, 2014 12:35 am
Location: Somerville, MA

Re: 8.8.12 Patch 3 breaks inline signatures and creates multiple attachments

Post by jered »

I just upgraded to 8.8.15p3 [Zimbra 8.8.15_GA_3869 (build 20190917004220)] and seem to have a regression where images and HTML layouts no longer render correctly again. Is this a known problem?
User avatar
jered
Advanced member
Advanced member
Posts: 53
Joined: Sat Sep 13, 2014 12:35 am
Location: Somerville, MA

Re: 8.8.12 Patch 3 breaks inline signatures and creates multiple attachments

Post by jered »

jered wrote:I just upgraded to 8.8.15p3 [Zimbra 8.8.15_GA_3869 (build 20190917004220)] and seem to have a regression where images and HTML layouts no longer render correctly again. Is this a known problem?
Nevermind -- this is Firefox's new "Enhanced Tracking Protection" blocking all social media site images (Facebook, LinkedIn, etc.)
User avatar
L. Mark Stone
Ambassador
Ambassador
Posts: 2796
Joined: Wed Oct 09, 2013 11:35 am
Location: Portland, Maine, US
ZCS/ZD Version: 10.0.6 Network Edition
Contact:

Re: 8.8.12 Patch 3 breaks inline signatures and creates multiple attachments

Post by L. Mark Stone »

jered wrote:I just upgraded to 8.8.15p3 [Zimbra 8.8.15_GA_3869 (build 20190917004220)] and seem to have a regression where images and HTML layouts no longer render correctly again. Is this a known problem?
Try running apt-get update && apt-get dist-upgrade.

You may be offered some Zimbra updates.

Hope that helps,
Mark
___________________________________
L. Mark Stone
Mission Critical Email - Zimbra VAR/BSP/Training Partner https://www.missioncriticalemail.com/
AWS Certified Solutions Architect-Associate
Post Reply