Zimbra 10.1.13 Released - Please Post Your Patch/Upgrade Results Here

[adrian.gibanel.btactic]

Does anyone know why LD_LIBRARY_PATH is unset in .bashrc?

cheers

I’ve patched about 10 environments so far, and the same amavisd problem occurred on one of them but in my case, it’s with Ubuntu 22.04.

LD_LIBRARY_PATH is unset in the .bashrc file by default and doesn’t cause any issues in other environments. I’ve modified the /opt/zimbra/bin/zmamavisdctl file instead,

Code: Select all

source `dirname $0`/zmshutil || exit 1
zmsetvars

export LD_LIBRARY_PATH=/opt/zimbra/common/lib:$LD_LIBRARY_PATH

platform=`/opt/zimbra/libexec/get_plat_tag.sh`

and it works for now. I’m also looking forward to Zimbra support’s reply.

I am wondering myself if this "LD_LIBRARY_PATH is unset" issue with amavisd is a consequence of not having installed zimbra-mta-patch in the first place or maybe not forcing the reinstall of the zimbra-mta-patch after performing an upgrade.

It's also recommended to check: 10.1.0 patch installation instructions so that all of the packages are properly updated in order.

The usual suspect in those cases (some package that has not been pushed to the repos yet) seems very unlikely to me because it affects both RHEL and Ubuntu systems.

[adrian.gibanel.btactic]

Given all of the issues that have been reported associated to this Zimbra NE 10.1.13 release and the associated packages to the repo I have updated the original post with a summary of those issues (until right now) with a link to the associated posts where the issues were explained originally.

[adrian.gibanel.btactic]

My personal bet on this imap issue is the AntiSamy update and that legacy @import sanitization logic removal.
Also the nginx module update regarding security standards seems a good candidate.

In any case for those of you that want to experiment in a throw-away VPS there's Maldua's ZCS FOSS 10.1.10.p3 which it's basically 10.1.10 plus the jetty update. That should bork the imap connections according to jered thoughts. It would be nice to know if he's right or not.

It's hard for me to come up with a way AntiSamy could be involved, because this is just for the web client presentation and shouldn't interact with the message store or IMAP interface. Jetty also seems unlikely, but at least it's in the data path. I agree that something involving nginx -- which is actually parsing and proxying IMAP message -- is most probable, but also really unlikely because nginx has such a huge install base.

So... ianw1974 builds those develop-branch based builds. There is a report of those imap issues (blank email seen in Gmail client) from 3 weeks ago. These means two things:

- It should not be related to packages being pushed to the repos.
- It should a commit before 2025-10-02 which was the date for ianw1974's 10.1.11 build.

I'm pretty lost on what might be the problem here but for now, after checking zm-mailbox develop branch my guess is: ZCS-17622:Apache mina version update.

[jered]

I'm pretty lost on what might be the problem here but for now, after checking zm-mailbox develop branch my guess is: ZCS-17622:Apache mina version update.

Oooh, yes -- good catch. This is in the data path, and definitely a candidate for a potential cause.

[yeak]

For SSL related issue, try disable FIPS if this helps. See this guide: https://wiki.zimbra.com/wiki/FIPS

For me I just type follow this:

Code: Select all

As root:
cd /opt/zimbra/common/etc/ssl
cp openssl-source.cnf openssl.cnf

su - zimbra
zmcontrol restart 

Hello,

I had the same problem with ubuntu 22LTS

fyi

Heyho

After patching from 10.1.11 to 10.1.13 and then updating the system, we encountered the problem that amavisd would no longer start because LD_LIBRARY_PATH was missing.

Result:

Code: Select all

Starting amavisd...Can't load '/opt/zimbra/common/lib/perl5/x86_64-linux-thread-multi/auto/Net/SSLeay/SSLeay.so' for module Net::SSLeay: /lib64/libcrso.3) 
at /usr/lib64/perl5/DynaLoader.pm line 193. at /opt/zimbra/common/lib/perl5/IO/Socket/SSL.pm line 19. 
Compilation failed in require at /opt/zimbra/common/lib/perl5/IO/Socket/SSL.pm line 19. 
BEGIN failed--compilation aborted at /opt/zimbra/common/lib/perl5/IO/Socket/SSL.pm line 19. 
Compilation failed in require at /opt/zimbra/common/lib/perl5/Amavis/IO/RW.pm line 18. 
BEGIN failed--compilation aborted at /opt/zimbra/common/lib/perl5/Amavis/IO/RW.pm line 18. 
Compilation failed in require at /opt/zimbra/common/lib/perl5/Amavis/DKIM.pm line 34. 
BEGIN failed--compilation aborted at /opt/zimbra/common/lib/perl5/Amavis/DKIM.pm line 34. 
Compilation failed in require at /opt/zimbra/common/lib/perl5/Amavis.pm line 7190. failed.

[tobiasperschon]

We also have several users experiencing IMAP issues with Outlook since upgrading to 10.1.13. Users are seeing empty emails (no headers and no body) and corrupted emails.
We're seeing these errors in the mailbox.log:
;ua=Microsoft Outlook/16.0.19127.20314;cid=2929;] imap - IMAP ID with name/version provided duplicate values, command ignored
;ua=Microsoft Outlook/16.0.19231.20216;cid=2851;] imap - NIO:zimbraImapMaxConsecutiveError exceeded 10
;ua=Microsoft Outlook/16.0.19127.20314;cid=29818;] imap - RENAME failed
;ua=Microsoft Outlook/16.0.19328.20178;cid=1329;] imap - IOException fetching IMAP message

zimbra support had me do this and it fixed the issue:

Code: Select all

1. Take a backup of the following current jar before proceeding:
/opt/zimbra/lib/jars/mina-core-2.1.10.jar
/opt/zimbra/jetty_base/webapps/service/WEB-INF/lib/mina-core-2.1.10.jar
/opt/zimbra/jetty_base/webapps/zimbra/WEB-INF/lib/mina-core-2.1.10.jar

2. Then run the commands below:

cd /tmp
wget https://repo1.maven.org/maven2/org/apache/mina/mina-core/2.1.6/mina-core-2.1.6.jar
wget https://repo1.maven.org/maven2/org/apache/mina/mina-core/2.0.4/mina-core-2.0.4.jar

su - zimbra
zmmailboxdctl stop
exit

sudo rm -f /opt/zimbra/jetty_base/webapps/service/WEB-INF/lib/mina-core-2.1.10.jar
sudo rm -f /opt/zimbra/jetty_base/webapps/zimbra/WEB-INF/lib/mina-core-2.1.10.jar
sudo rm -f /opt/zimbra/lib/jars/mina-core-2.1.10.jar

sudo cp /tmp/mina-core-2.1.6.jar /opt/zimbra/jetty_base/webapps/service/WEB-INF/lib/
sudo cp /tmp/mina-core-2.0.4.jar /opt/zimbra/jetty_base/webapps/zimbra/WEB-INF/lib/
sudo cp /tmp/mina-core-2.1.6.jar /opt/zimbra/lib/jars/

sudo /opt/zimbra/libexec/zmfixperms

su - zimbra
zmmailboxdctl start

[adrian.gibanel.btactic]

I'm pretty lost on what might be the problem here but for now, after checking zm-mailbox develop branch my guess is: ZCS-17622:Apache mina version update.

Well, Revert "ZCS-17622:Apache mina version update" commits have just appeared in zm-mailbox, zm-zcs-lib and zm-web-client repos default branches.

Apache mina is the most likely candidate.

Once you are in ZCS NE 10.1.13 I'm not quite sure that you can revert to previous versions of Apache mina manually because I suspect the linkage might vary from one version to the other. It's not like changing one class file would work, you would need to change many of them but then... something else might go wrong.

I think it's better to wait for the actual next release from Zimbra themselves.

If some of you repacks some .jar with the previous version Apache-mina class file and it doesn't explode for you... just let us know.

( This jar repack would be similar to: Autocomplete behaviour change between 9.0 and 10.1. The only difference is that this is probably going to be fixed ASAP (Probably around December 6, 2025) ).

[Klug]

I had to approve tobiasperschon's post (because of the links in it I guess).

Zimbra's support is making people downgrade mina manualy as a quick solution to the IMAP issues.

[ghen]

Can we get a statement from Zimbra regarding the Apache Mina downgrade please? @uttam.takalkar?

Does the downgrade fix the IMAP issues for the people that reported them?

Code: Select all

sudo rm -f /opt/zimbra/jetty_base/webapps/service/WEB-INF/lib/mina-core-2.1.10.jar
sudo rm -f /opt/zimbra/jetty_base/webapps/zimbra/WEB-INF/lib/mina-core-2.1.10.jar
sudo rm -f /opt/zimbra/lib/jars/mina-core-2.1.10.jar

sudo cp /tmp/mina-core-2.1.6.jar /opt/zimbra/jetty_base/webapps/service/WEB-INF/lib/
sudo cp /tmp/mina-core-2.0.4.jar /opt/zimbra/jetty_base/webapps/zimbra/WEB-INF/lib/
sudo cp /tmp/mina-core-2.1.6.jar /opt/zimbra/lib/jars/

[ghen]

Here are the corresponding reverts on github:

https://github.com/Zimbra/zm-mailbox/pull/1772
https://github.com/Zimbra/zm-web-client/pull/899
https://github.com/Zimbra/zm-zcs-lib/pull/125