Difference between revisions of "Zimbra Releases/8.6.0/P13"

m
m
Line 1: Line 1:
 
{{WIP}}
 
{{WIP}}
 
 
<ol class="breadcrumb">
 
<ol class="breadcrumb">
 
   <li>[[Main Page|Zimbra Wiki]]</li>
 
   <li>[[Main Page|Zimbra Wiki]]</li>
Line 11: Line 10:
  
 
=Zimbra Collaboration 8.6.0 Patch 13 GA Release=
 
=Zimbra Collaboration 8.6.0 Patch 13 GA Release=
 +
Check out the '''"[[#security|Security Fixes]]"'''  for this version of Zimbra Collaboration below. As always, you’re encouraged to tell us what you think in the '''[https://forums.zimbra.org/ Forum]''', or open a support ticket.
  
Check out the '''"[[#security|Security Fixes]]"''' for this version of Zimbra Collaboration below. As always, you’re encouraged to tell us what you think in the '''[https://forums.zimbra.org/ Forum]''', or open a support ticket.
+
<div class="col-md-9">
 +
<br />
  
==Security Fixes==
+
=Security Fixes=
 
<div id="security"></div>
 
<div id="security"></div>
 
Information about security fixes, security response policy and vulnerability rating classification are listed below. See the [https://wiki.zimbra.com/wiki/Zimbra_Security_Response_Policy Zimbra Security Response Policy] and the [https://wiki.zimbra.com/wiki/Zimbra_Vulnerability_Rating_Classification Zimbra Vulnerability Rating] Classification information below for details.
 
Information about security fixes, security response policy and vulnerability rating classification are listed below. See the [https://wiki.zimbra.com/wiki/Zimbra_Security_Response_Policy Zimbra Security Response Policy] and the [https://wiki.zimbra.com/wiki/Zimbra_Vulnerability_Rating_Classification Zimbra Vulnerability Rating] Classification information below for details.
Line 28: Line 29:
 
<tr>
 
<tr>
 
   <td class="col-md-1">[https://bugzilla.zimbra.com/show_bug.cgi?id=109129 109129]</td>
 
   <td class="col-md-1">[https://bugzilla.zimbra.com/show_bug.cgi?id=109129 109129]</td>
   <td> Bug 109129 - XXE [CWE-611] </td>
+
   <td>Bug 109129 - XXE [CWE-611]</td>
   <td>CVE-2019-9670</td>
+
   <td> CVE-2019-9670 </td>
   <td style="text-align: center; ">6.4</td>
+
   <td style="text-align: center; "> 6.4 </td>
   <td style="text-align: center; ">Major</td>
+
   <td style="text-align: center; "> Major</td>
 
   <td style="text-align: center; ">8.6.0 Patch13</td>
 
   <td style="text-align: center; ">8.6.0 Patch13</td>
 
</tr>
 
</tr>
 
</table>
 
</table>
  
==Before Installing the Patch==
+
=Before Installing the Patch=
 
Before installing the patch, consider the following:
 
Before installing the patch, consider the following:
 
* Zimbra Collaboration patches can be found at https://www.zimbra.com/downloads/zimbra-collaboration
 
* Zimbra Collaboration patches can be found at https://www.zimbra.com/downloads/zimbra-collaboration
Line 46: Line 47:
 
* '''Important!''' You cannot revert to the previous ZCS release after you upgrade to the patch.
 
* '''Important!''' You cannot revert to the previous ZCS release after you upgrade to the patch.
  
==Install the Patch ==
+
=Install the Patch =
 
Note: This patch should be installed '''only''' on '''all mailbox''' nodes running in your environment.
 
Note: This patch should be installed '''only''' on '''all mailbox''' nodes running in your environment.
  
Line 67: Line 68:
  
 
'''Note:''' For users who have the web-client open and are running the FOSS edition, the refresh notice mightstate that you have changed to the NETWORK Edition; however, your feature set will remain FOSS only.
 
'''Note:''' For users who have the web-client open and are running the FOSS edition, the refresh notice mightstate that you have changed to the NETWORK Edition; however, your feature set will remain FOSS only.
 +
 +
</div>
 
</div>
 
</div>
 
     <div class="col-md-3">{{GuidePosts}}</div>
 
     <div class="col-md-3">{{GuidePosts}}</div>
 
</div>
 
</div>

Revision as of 11:24, 19 March 2019

Zimbra Collaboration 8.6.0 Patch 13 GA Release

Check out the "Security Fixes" for this version of Zimbra Collaboration below. As always, you’re encouraged to tell us what you think in the Forum, or open a support ticket.


Security Fixes

Information about security fixes, security response policy and vulnerability rating classification are listed below. See the Zimbra Security Response Policy and the Zimbra Vulnerability Rating Classification information below for details.

Bug# Summary CVE-ID CVSS
Score
Zimbra
Rating
Fix Release or
Patch Version
109129 Bug 109129 - XXE [CWE-611] CVE-2019-9670 6.4 Major 8.6.0 Patch13

Before Installing the Patch

Before installing the patch, consider the following:

  • Zimbra Collaboration patches can be found at https://www.zimbra.com/downloads/zimbra-collaboration
  • Patches are cumulative, and delivered as a TGZ file.
  • A full backup should be performed before any patch is applied. There is no automated roll-back.
  • Zimlet patches can include removing existing Zimlets and redeploying the patched Zimlet.
  • Only files or Zimlets associated with installed packages will be installed from the patch.
  • Switch to user zimbra before using ZCS CLI commands.
  • Important! You cannot revert to the previous ZCS release after you upgrade to the patch.

Install the Patch

Note: This patch should be installed only on all mailbox nodes running in your environment.

1. Before you begin, confirm you have the following:

  • Zimbra Collaboration 8.6.0 GA installed
  • Zimbra Collaboration 8.6.0 Patch13 TGZ file

2. Copy the patch.tgz file(s) to your server.

3. Install Zimbra Collaboration 8.6.0 Patch13

  • a. Log in as root and cd to the directory where the tar file is saved. Type
tar xzf zcs-patch-8.6.0_GA_XXX.tgz
cd zcs-patch-8.6.0_GA_XX
  • b. As root, install the patch. Type
./installPatch.sh
  • c. Switch to user zimbra
su – zimbra
  • d. ZCS must be restarted to changes to take effect. Type
zmcontrol restart

Note: For users who have the web-client open and are running the FOSS edition, the refresh notice mightstate that you have changed to the NETWORK Edition; however, your feature set will remain FOSS only.



Try Zimbra

Try now Zimbra Collaboration without any cost with the 60-day free Trial.
Get it now »

Want to get involved?

You can contribute in the Community, in the Wiki, in the Code, or developing Zimlets.
Find out more. »

Looking for a Video?

Visit our YouTube Channel to keep posted about Webinars, technology news, Product overviews and more.
Go to the YouTube Channel »

Jump to: navigation, search