Zimbra Releases/8.8.12: Difference between revisions

No edit summary
No edit summary
Line 1: Line 1:
<ol class="breadcrumb">
<ol class='breadcrumb'>
   <li>[[Main Page|Zimbra Wiki]]</li>
   <li>[[Main Page|Zimbra Wiki]]</li>
   <li>[[Zimbra Releases]]</li>
   <li>[[Zimbra Releases]]</li>
   <li class="active">Zimbra Collaboration 8.8.12</li>
   <li class='active'>Zimbra Collaboration 8.8.12 GA Release</li>
</ol>
</ol>


__FORCETOC__
__FORCETOC__
<div class="col-md-12">
<div class='col-md-12'>
<div class="col-md-9">
  <div class='col-md-9'>
    <h1><span id='release-note' class='mw-headline'>Zimbra Collaboration 8.8.12 GA Release</span></h1>


=Zimbra Collaboration 8.8.12 GA Release=
    <div class='col-md-9'>
<div class="col-md-9">
      <p>Check out the <b>[[#Security Fixes|Security Fixes]], [[#What's New|What's New]], [[#fixed|Fixed Issues]] and [[#known|Known Issues]]</b> for this version of Zimbra Collaboration. As always, you’re encouraged to tell us what you think in the Forums, or open a support ticket to report issues.</p>
Check out the '''[[#Security Fixes|Security Fixes]]''', '''[[#What's New|What's New]]''', '''[[#fixed|Fixed Issues]]''', '''[[#known|Known Issues]]''' and the '''new [[#lifecycle|Product Lifecycle Updates]] section''' for this version of Zimbra Collaboration. As always, you’re encouraged to tell us what you think in the Forums, or open a support ticket to report issues.  
      <div class='alert alert-dark fade in'>
        <p><b>NOTE: If you are upgrading and/or migrating from an older version of Zimbra to Zimbra 8.8 Production Ready, please read [https://wiki.zimbra.com/wiki/Zimbra_Next_Generation_Modules/Things_To_Know_Before_Upgrading Things to Know Before Upgrading] and [https://wiki.zimbra.com/wiki/Zimbra_Next_Generation_Modules/First_Steps_with_the_Zimbra_NG_Modules First Steps with the Zimbra NG Modules] for critical information before you upgrade.</b></p>
      </div>
      <h1><span id='Security_Fixes' class='mw-headline'>Security Fixes</span></h1>
      <p>Information about security fixes, security response policy and vulnerability rating classification are listed below. See the [https://wiki.zimbra.com/wiki/Zimbra_Security_Response_Policy Zimbra Security Response Policy] and the [https://wiki.zimbra.com/wiki/Zimbra_Vulnerability_Rating_Classification Zimbra Vulnerability Rating] Classification information below for details. You can also refer to the [https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories Security Vulnerability Advisories] register.</p>


<div class="alert alert-dark fade in"> <p>'''NOTE: If you are upgrading and/or migrating from an older version of Zimbra to Zimbra 8.8 Production Ready, please read [https://wiki.zimbra.com/wiki/Zimbra_Next_Generation_Modules/Things_To_Know_Before_Upgrading "Things to Know Before Upgrading"] and [https://wiki.zimbra.com/wiki/Zimbra_Next_Generation_Modules/First_Steps_with_the_Zimbra_NG_Modules "First Steps with the Zimbra NG Modules"] for critical information before you upgrade.'''</p></div>  
      <table class='table table-striped table-condensed'>
        <tr>
          <th style='background-color: #f15922; width: 80px;'><span style='color: #ffffff;'>Bug#</span></th>
          <th style='background-color: #f15922;'><span style='color:#ffffff;'>Summary</span></th>
          <th style='background-color: #f15922;'><span style='color: #ffffff;'><strong>CVE-ID</strong></span></th>
          <th style='background-color: #f15922;'><span style='color: #ffffff;'><strong>CVSS<br>Score</strong></span></th>
          <th style='text-align: center; background-color: #f15922;'><span style='color: #ffffff;'><strong>Zimbra<br>Rating</strong></span></th>
          <th style='text-align: center; background-color: #f15922;'><span style='color: #ffffff;'>Fix&nbsp;Release <br>Version</span></th>
        </tr>


=Security Fixes=
        <tr>
Information about security fixes, security response policy and vulnerability rating classification are listed below. See the [https://wiki.zimbra.com/wiki/Zimbra_Security_Response_Policy Zimbra Security Response Policy] and the [https://wiki.zimbra.com/wiki/Zimbra_Vulnerability_Rating_Classification Zimbra Vulnerability Rating] Classification information below for details. You can also refer to the [https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories Security Vulnerability Advisories] register.
          <td class='col-md-1' style='width:10%;'>[https://bugzilla.zimbra.com/show_bug.cgi?id=109096 109096] </td>
<table class="table table-striped table-condensed">
          <td class='col-md-1' style='width:67%;'>Blind SSRF vulnerability - Feed [CWE-918]</td>
<tr>
          <td class='col-md-1' style='text-align:left; width:10%'>CVE-2019-6981</td>
  <th style="background-color: #f15922; width: 80px;"><span style="color: #ffffff;">Bug#</span></th>
          <td class='col-md-1' style='text-align:center; width:4%'>4.0</td>
  <th style="background-color: #f15922;"><span style="color: #ffffff;">Summary</span></th>
          <td class='col-md-1' style='text-align:center; width:4%'>Minor</td>
  <th style="background-color: #f15922;"><span style="color: #ffffff;"><strong>CVE-ID</strong></span></th>
          <td class='col-md-1' style='text-align:center; width:5%'>8.8.12</td>
  <th style="background-color: #f15922;"><span style="color: #ffffff;"><strong>CVSS<br>Score</strong></span></th>
        </tr>
  <th style="text-align: center; background-color: #f15922;"><span style="color: #ffffff;"><strong>Zimbra<br>Rating</strong></span></th>
        <tr>
  <th style="text-align: center; background-color: #f15922;"><span style="color: #ffffff;">Fix&nbsp;Release&nbsp;or <br>Patch&nbsp;Version</span></th>
          <td class='col-md-1' style='width:10%;'>[https://bugzilla.zimbra.com/show_bug.cgi?id=109127 109127 ] </td>
</tr>
          <td class='col-md-1' style='width:67%;'>SSRF vulnerability - ProxyServlet [CWE-918 / CWE-807]</td>
<tr>
          <td class='col-md-1' style='text-align:left; width:10%'>CVE-2019-9621</td>
  <td class="col-md-1">[https://bugzilla.zimbra.com/show_bug.cgi?id=109127 109127]</td>
          <td class='col-md-1' style='text-align:center; width:4%'>4.0</td>
  <td>SSRF CWE-918 / CWE-807</td>
          <td class='col-md-1' style='text-align:center; width:4%'>Minor</td>
  <td>CVE-2019-9621</td>
          <td class='col-md-1' style='text-align:center; width:5%'>8.8.12</td>
  <td>4.0</td>
        </tr>
  <td style="text-align: center;">Minor</td>
        <tr>
  <td style="text-align: center;">8.8.12</td>
          <td class='col-md-1' style='width:10%;'>[https://bugzilla.zimbra.com/show_bug.cgi?id=108181 108181] </td>
</tr>
          <td class='col-md-1' style='width:67%;'>Upgraded [https://www.php.net/releases/index.php#7.3.1 3rd party php] to version 7.3.1.</td>
<tr>
          <td class='col-md-1' style='text-align:left; width:10%'>n/a</td>
  <td class="col-md-1">[https://bugzilla.zimbra.com/show_bug.cgi?id=109096 109096]</td>
          <td class='col-md-1' style='text-align:center; width:4%'>-</td>
  <td> Blind SSRF CWE-918 </td>
          <td class='col-md-1' style='text-align:center; width:4%'>-</td>
  <td> CVE-2019-6981 </td>
          <td class='col-md-1' style='text-align:center; width:5%'>8.8.12</td>
  <td> 4.0 </td>
        </tr>
  <td style="text-align: center;"> Minor </td>
        <tr>
  <td style="text-align: center;">8.8.12</td>
          <td class='col-md-1' style='width:10%;'>[https://bugzilla.zimbra.com/show_bug.cgi?id=107548 107548] </td>
</tr>
          <td class='col-md-1' style='width:67%;'>Upgraded [https://httpd.apache.org/security/vulnerabilities_24.html#2.4.38 3rd party Apache] to version 2.4.38.</td>
<tr>
          <td class='col-md-1' style='text-align:left; width:10%'>n/a</td>
  <td class="col-md-1">[https://bugzilla.zimbra.com/show_bug.cgi?id=108181 108181]</td>
          <td class='col-md-1' style='text-align:center; width:4%'>-</td>
  <td>Upgraded [https://www.php.net/releases/index.php#7.3.1 3rd party php] to version 7.3.1. </td>
          <td class='col-md-1' style='text-align:center; width:4%'>-</td>
  <td> n/a </td>
          <td class='col-md-1' style='text-align:center; width:5%'>8.8.12</td>
  <td> - </td>
        </tr>
  <td style="text-align: center;"> - </td>
      </table>
  <td style="text-align: center;">8.8.12</td>
      <h1><span id='What.27s_New' class='mw-headline'>What's New</span></h1>
</tr>
      <div class='alert alert-dark fade in'>
<tr>
        <p><b>NOTE:</b> Beta features should not be installed and are not supported on production systems. Beta modules have been provided for evaluation in lab environments only.</p>
  <td class="col-md-1">[https://bugzilla.zimbra.com/show_bug.cgi?id=107548 107548]</td>
      </div>
  <td> Upgraded [https://httpd.apache.org/security/vulnerabilities_24.html#2.4.38 Apache HTTP Server] to version 2.4.38. </td>
      <p><br></p>
  <td> n/a </td>
      <table class='table table-striped table-condensed'>
  <td> - </td>
        <tr>
  <td style="text-align: center;"> - </td>
          <td class='col-md-1'><b>Zimbra Collaboration Suite:</b>
  <td style="text-align: center;">8.8.12</td>
            <ul>
</tr>
              <li>'''Ubuntu 18.04 support''' (Beta)</li>
</table>
              <li>'''Hierarchical Address Book''' (Stable) - An Hierarchical Address Book (HAB) is an enhancement of the Global Address List (GAL) that includes organization information, enabling contact selection by sub-organization and seniority. The Zimbra Web Client now gives users the ability to view, navigate and select contacts from the HAB. With HAB enabled, Global Organization appears as a contact source in the Select-Addresses dialog, and selecting it changes the dialog to facilitate navigating the organization as a tree structure.</li>
              <li>Automatic configuration for platform Calendar, Contact and Email apps on iOS and MacOS is now supported by direct download of mobileconfig files. Users will find Mobile Configuration in Preferences - Connected Devices & Apps.</li>
            </ul>
          </td>
        </tr>


<!----- What's New ------------------------------------------------------------------------------------------------------>
        <tr>
<h1><span id='What.27s_New' class='mw-headline'>What's New</span></h1>
          <td class='col-md-1'><b>Zimbra Connector for Outlook:</b>
<div class='alert alert-dark fade in'>
            <ul>
  <p><b>NOTE:</b> Beta features should not be installed and are not supported on production systems. Beta modules have been provided for evaluation in lab environments only.</p>
              <li>Recover Deleted Items: ZCO now supports Zimbra's Dumpster feature. Messages and Contacts that have been permanently deleted can be recovered back to the user's Trash folder. This requires that the feature be enabled for the user (zimbraDumpsterEnabled). Currently this feature is available in English only; localization will be provided in an upcoming patch.</li>
</div>
              <li>Added an option for a ''Simplified Support View'' when producing a custom MSI. This simplifies the Support tab in ZCO with a limited menu of actions.</li>
<p><br></p>
              <li>Actions for the Persona feature will now only be shown if the feature is enabled for the user.</li>
<table class='table table-striped table-condensed'>
            </ul>
          </td>
        </tr>


  <tr>
        <tr>
    <td class='col-md-1'><b>Zimbra Collaboration Suite:</b>
          <td class='col-md-1'><b>Zimbra Drive:</b>
      <ul>
            <ul>
        <li>'''Hierarchical Address Book''' (Stable) - An Hierarchical Address Book (HAB) is an enhancement of the Global Address List (GAL) that includes organization information, enabling contact selection by sub-organization and seniority. The Zimbra Web Client now gives users the ability to view, navigate and select contacts from the HAB. With HAB enabled, "Global Organization" appears as a contact source in the Select-Addresses dialog, and selecting it changes the dialog to facilitate navigating the organization as a tree structure.</li>
              <li>Zimbra Drive is declared Stable as of this release. If you had deployed with Beta, please refer to [[#known|Known Issues]].</li>
        <li>Automatic configuration for platform Calendar, Contact and Email apps on iOS and MacOS is now supported by direct download of mobileconfig files. Users will find Mobile Configuration in Preferences - Connected Devices & Apps.</li>
              <li>When sharing a file in Drive, an email can be automatically sent to collaborators.</li>
        <li>'''Ubuntu 18.04 support''' (Beta)</li>
              <li>Users can now download entire folders from Drive via a new Download option on folder menus and context menus.</li>
      </ul>
              <li>'''Reminder:''' Legacy Zimbra Drive based on Nextcloud / Owncloud integration has been renamed Open Drive, and is compatible with:[ul] [li][https://nextcloud.com/changelog NextCloud] versions 9, 10, 11, 12 and 13 only (See NextCloud store for latest.)[/li] [li][https://owncloud.com/ ownCloud] versions 9.0, 9.1, and 10 only[/li][/ul]</li>
    </td>
            </ul>
  </tr>
          </td>
 
        </tr>
  <tr>
    <td class='col-md-1'><b>Zimbra Connector for Outlook:</b>
      <ul>
        <li>Recover Deleted Items: ZCO now supports Zimbra's Dumpster feature. Messages and Contacts that have been permanently deleted can be recovered back to the user's Trash folder. This requires that the feature be enabled for the user (zimbraDumpsterEnabled). Currently this feature is available in English only; localization will be provided in an upcoming patch.</li>
        <li>Added an option for a ''Simplified Support View'' when producing a custom MSI. This simplifies the Support tab in ZCO with a limited menu of actions.</li>
        <li>Actions for the Persona feature will now only be shown if the feature is enabled for the user.</li>
      </ul>
    </td>
  </tr>


  <tr>
        <tr>
    <td class='col-md-1'><b>Zimbra Drive:</b>
          <td class='col-md-1'><b>Zimbra Talk:</b>
      <ul>
            <ul>
        <li>Zimbra Drive is declared Stable as of this release. If you had deployed with Beta, please refer to [[#known|Known Issues]].</li>
              <li>'''Instant meeting''' adds the ability to initiate a video call including external users.</li>
        <li>When sharing a file in Drive, an email can be automatically sent to collaborators.</li>
            </ul>
        <li>Users can now download entire folders from Drive via a new Download option on folder menus and context menus.</li>
           </td>
        <li>'''Reminder:''' Legacy Zimbra Drive based on Nextcloud / Owncloud integration has been renamed Open Drive, and is compatible with:
         </tr>
          <ul>
          <li>[https://nextcloud.com/changelog NextCloud] versions 9, 10, 11, 12 and 13 only (See NextCloud store for latest.)</li>
          <li>[https://owncloud.com/ ownCloud] versions 9.0, 9.1, and 10 only</li>
           </ul>
         </li>
      </ul>
    </td>
  </tr>


  <tr>
        <tr>
    <td class='col-md-1'><b>Zimbra Talk:</b>
          <td class='col-md-1'><b>Zimbra Docs:</b>
      <ul>
            <ul>
        <li>'''Instant meeting''' adds the ability to initiate a video call including external users.</li>
              <li>Zimbra Docs server build is now based on latest version of LOOL 4.0.1. This release includes a fresh look - with improved toolbar colors and layout, ...easier shape editing, as well as improved interoperability provided by upgrading the underlying document rendering core to Collabora Office 6.0.</li>
      </ul>
            </ul>
    </td>
          </td>
  </tr>
        </tr>


  <tr>
        <tr>
    <td class='col-md-1'><b>Zimbra Docs:</b>
          <td class='col-md-1'><b>NG Backup:</b>
       <ul>
            <ul>
         <li>Zimbra Docs server build is now based on latest version of LOOL 4.0.1. "This release includes a fresh look - with improved toolbar colors and layout, ...easier shape editing, as well as improved interoperability provided by upgrading the underlying document rendering core to Collabora Office 6.0."</li>
              <li>'''Blobless Backup''' (Beta) gives administrators the option to skip blobs during backup, thereby reducing the elapsed time required to perform the backup. For system integrity, blob backup should be provided through some other mechanism.</li>
      </ul>
            </ul>
    </td>
          </td>
  </tr>
        </tr>
      </table>
       <table class='table table-striped table-condensed' style='margin-top: 0px><tr><th colspan=' 2' class='info'>
        <h4><span class='mw-headline' id='fixed'>
            <div>Fixed Issues</div>
          </span></h4>
        </th>
        </tr>
        <tr>
          <td class='col-md-1'><strong>Area</strong></td>
          <td class='col-md-1'><strong>Description</strong></td>
        </tr>
         <tr>
          <td class='col-md-1' style='width:5%;'>Zimbra Drive</td>
          <td class='col-md-1' style='text-align:left;width:78%'>After user's computer resumed from sleep, Zimbra Drive would often show errors ''The server is off-line'' or ''I'm thinking''. Now when the websocket connection has been closed, the client tries to reopen it at increasing time intervals, to ensure Drive reconnects.</td>
        </tr>
        <tr>
          <td class='col-md-1' style='width:5%;'>NG Mobile</td>
          <td class='col-md-1' style='text-align:left;width:78%'>Hidden folders and their contents are skipped during synchronization. Previously, such folders caused synchronization to fail.</td>
        </tr>
        <tr>
          <td class='col-md-1' style='width:5%;'>NG Backup</td>
          <td class='col-md-1' style='text-align:left;width:78%'>Missing Blob errors will only be logged once, mitigating a problem that caused mailbox.log to grow exponentially and stop smartscan from completing.</td>
        </tr>
        <tr>
          <td class='col-md-1' style='width:5%;'>Zimbra Docs</td>
          <td class='col-md-1' style='text-align:left;width:78%'>Documents shared in Read-Only mode can now be edited only from the authenticated owner's account.</td>
        </tr>
        <tr>
          <td class='col-md-1' style='width:5%;'>Zimbra Drive</td>
          <td class='col-md-1' style='text-align:left;width:78%'>Files contained in Drive will now remain accessible in ReadOnly mode if the license expires.</td>
        </tr>
        <tr>
          <td class='col-md-1' style='width:5%;'>Zimbra Drive</td>
          <td class='col-md-1' style='text-align:left;width:78%'>On multiserver, downloading a drive folder as zip would sometimes result in a corrupted zip file. This has been fixed.</td>
        </tr>
        <tr>
          <td class='col-md-1' style='width:5%;'>Zimbra Drive</td>
          <td class='col-md-1' style='text-align:left;width:78%'>Fixed a bug that blocked the viewing or editing of share information when a file or folder was shared with a distribution list.</td>
        </tr>
        <tr>
          <td class='col-md-1' style='width:5%;'>Web UX</td>
          <td class='col-md-1' style='text-align:left;width:78%'>The Quick Add or New Event dialog always pre-selects the user's ''Default Calendar'' from preferences when creating a new event. This occurs even when the user is viewing only one of their available calendars; in that case the expected behavior should be to pre-select that calendar, not the user's default.</td>
        </tr>
        <tr>
          <td class='col-md-1' style='width:5%;'>ZCO</td>
          <td class='col-md-1' style='text-align:left;width:78%'>GAL synchronization message now properly reports progress expressed as progress / total items.</td>
        </tr>
        <tr>
          <td class='col-md-1' style='width:5%;'>ZCO</td>
          <td class='col-md-1' style='text-align:left;width:78%'>The Add Share button is hidden for ZCO users who do not have Sharing enabled (i.e. zimbraFeatureSharingEnabled is false).</td>
        </tr>
        <tr>
          <td class='col-md-1' style='width:5%;'>Zimbra Talk</td>
          <td class='col-md-1' style='text-align:left;width:78%'>After a video call ended, the webcam may have remained active. The video stream is now reliably terminated when the call ends. Workaround for earlier versions is to refresh the browser if the webcam activity LED remained on past the end of call.</td>
        </tr>
        <tr>
          <td class='col-md-1' style='width:5%;'>Web UX</td>
          <td class='col-md-1' style='text-align:left;width:78%'>A fix in 8.8.11 that prevented unwanted duplication of attachments came with a side-effect bug that suppressed the display of inline PDF attachments sent from Apple Mail clients. This has been fixed.</td>
        </tr>
      </table>
      <table class='table table-striped table-condensed' style='margin-top: 0px><tr><th colspan=' 2' class='info'>
        <h4><span class='mw-headline' id='known'>
            <div>Known Issues</div>
          </span></h4>
        </th>
        </tr>
        <tr>
          <td class='col-md-1'><strong>Area</strong></td>
          <td class='col-md-10'><strong>Description</strong></td>
        </tr>
        <tr>
          <td class='col-md-1' style='width:5%;'>Zimbra Drive</td>
          <td class='col-md-1' style='text-align:left;width:78%'>Documents stored in briefcase or Zimbra Drive that have very long names are opened in view-only mode. To work around this, shorten the filename on the document.</td>
        </tr>
        <tr>
          <td class='col-md-1' style='width:5%;'>Web UX</td>
          <td class='col-md-1' style='text-align:left;width:78%'>Hierarchical Address Book (HAB) is supported in English only. Support for additional languages will be provided in an upcoming patch release.</td>
        </tr>
        <tr>
          <td class='col-md-1' style='width:5%;'>Zimbra Drive</td>
          <td class='col-md-1' style='text-align:left;width:78%'>If you used Zimbra Drive v2 (Beta) prior to its Stable release, we advise you to clean up the Beta database before proceeding. Refer to [https://wiki.zimbra.com/wiki/index.php?curid=23831 How to Clean up a Zimbra Drive (Beta) Database].</td>
        </tr>
        <tr>
          <td class='col-md-1' style='width:5%;'>ZCO</td>
          <td class='col-md-1' style='text-align:left;width:78%'>Dumpster feature is supported in English only. Support for additional languages will be provided in an upcoming patch release.</td>
        </tr>
        <tr>
          <td class='col-md-1' style='width:5%;'>ZCO</td>
          <td class='col-md-1' style='text-align:left;width:78%'>Older versions of the Outlook Connector for Zimbra (prior to Version 8.8.10) do not detect versions 8.8.10 and higher, so users will receive no notification that an upgrade is available. End users are recommended to initiate a manual upgrade to this version of the connector. </td>
        </tr>
        <tr>
          <td class='col-md-1' style='width:5%;'>Zextras</td>
          <td class='col-md-1' style='text-align:left;width:78%'>When attempting to install Zimbra Suite Plus (ZSP) on an incompatible version of ZCS, the admin will receive an error message with the incorrect URL for the Compatibility List. The correct URL is https://wiki.zimbra.com/wiki/Zimbra_Suite_Plus/Compatibility_List.</td>
        </tr>
        <tr>
          <td class='col-md-1' style='width:5%;'>Platform</td>
          <td class='col-md-1' style='text-align:left;width:78%'>After an upgrade to 8.8.12, IMAP users are unable to access folders with names containing non-ASCII characters. This is fixed in 8.8.12 P1.</td>
        </tr>
      </table>


  <tr>
      <h1><span class='mw-headline' id='Quick_note:_Open_Source_repo'>Quick note: Open Source repo</span></h1>
    <td class='col-md-1'><b>NG Backup:</b>
      <p>Downloading and building our Zimbra Code? Keep reading... Starting ZCS 8.7.6 and above we have new steps to download, build and see our code via Github:</p>
       <ul>
       <ul>
         <li>'''Blobless Backup''' (Beta) gives administrators the option to skip blobs during backup, thereby reducing the elapsed time required to perform the backup. For system integrity, blob backup should be provided through some other mechanism.</li>
         <li>[https://github.com/Zimbra/zm-build https://github.com/Zimbra/zm-build]</li>
       </ul>
       </ul>
     </td>
     </div>
  </tr>
   </div>
 
   <div class='col-md-3'>{{GuidePosts}}</div>
</table>
 
<table class='table table-striped table-condensed'>
  <tr>
    <th colspan='2' class='info'>
      <h4><span class='mw-headline' id='fixed'>
          <div id=''>Fixed Issues</div>
        </span></h4>
    </th>
  </tr>
  <tr>
    <td class='col-md-1'><strong>Area</strong></td>
    <td class='col-md-10'><strong>Description</strong></td>
  </tr>
  <tr>
    <td class='col-md-1' style='width:5%;'>Mail</td>
    <td class='col-md-1' style='text-align:left;width:78%'>A fix in 8.8.11 that prevented unwanted duplication of attachments came with a side-effect bug that suppressed the display of inline PDF attachments sent from Apple Mail clients. This has been fixed.</td>
  </tr>
  <tr>
    <td class='col-md-1' style='width:5%;'>Calendar</td>
    <td class='col-md-1' style='text-align:left;width:78%'>The Quick Add or New Event dialog always pre-selects the user's ''Default Calendar'' from preferences when creating a new event. This occurs even when the user is viewing only one of their available calendars; in that case the expected behavior should be to pre-select that calendar, not the user's default.</td>
  </tr>
  <tr>
    <td class='col-md-1' style='width:5%;'>ZCO</td>
    <td class='col-md-1' style='text-align:left;width:78%'>GAL synchronization message now properly reports progress expressed as progress / total items.</td>
   </tr>
  <tr>
    <td class='col-md-1' style='width:5%;'>ZCO</td>
    <td class='col-md-1' style='text-align:left;width:78%'>The Add Share button is hidden for ZCO users who do not have Sharing enabled (i.e. zimbraFeatureSharingEnabled is false).</td>
  </tr>
  <tr>
    <td class='col-md-1' style='width:5%;'>NG Mobile</td>
    <td class='col-md-1' style='text-align:left;width:78%'>Hidden folders and their contents are skipped during synchronization. Previously, such folders caused synchronization to fail.</td>
  </tr>
  <tr>
    <td class='col-md-1' style='width:5%;'>NG Backup</td>
    <td class='col-md-1' style='text-align:left;width:78%'>Missing Blob errors will only be logged once, mitigating a problem that caused mailbox.log to grow exponentially and stop smartscan from completing.</td>
  </tr>
  <tr>
    <td class='col-md-1' style='width:5%;'>Zimbra Docs</td>
    <td class='col-md-1' style='text-align:left;width:78%'>Documents shared in Read-Only mode can now be edited only from the authenticated owner's account.</td>
  </tr>
  <tr>
    <td class='col-md-1' style='width:5%;'>Zimbra Drive</td>
    <td class='col-md-1' style='text-align:left;width:78%'>Files contained in Drive will now remain accessible in ReadOnly mode if the license expires.</td>
  </tr>
  <tr>
    <td class='col-md-1' style='width:5%;'>Zimbra Drive</td>
    <td class='col-md-1' style='text-align:left;width:78%'>On multiserver, downloading a drive folder as zip would sometimes result in a corrupted zip file. This has been fixed.</td>
  </tr>
  <tr>
    <td class='col-md-1' style='width:5%;'>Zimbra Drive</td>
    <td class='col-md-1' style='text-align:left;width:78%'>Fixed a bug that blocked the viewing or editing of share information when a file or folder was shared with a distribution list.</td>
  </tr>
  <tr>
    <td class='col-md-1' style='width:5%;'>Zimbra Drive</td>
    <td class='col-md-1' style='text-align:left;width:78%'>After user's computer resumed from "sleep", Zimbra Drive would often show errors ''The server is off-line'' or ''I'm thinking''. Now when the websocket connection has been closed, the client tries to reopen it at increasing time intervals, to ensure Drive reconnects.</td>
  </tr>
  <tr>
    <td class='col-md-1' style='width:5%;'>Zimbra Talk</td>
    <td class='col-md-1' style='text-align:left;width:78%'>After a video call ended, the webcam may have remained active. The video stream is now reliably terminated when the call ends. Workaround for earlier versions is to refresh the browser if the webcam activity LED remained on past the end of call.</td>
  </tr>
</table>
 
<table class='table table-striped table-condensed'>
  <tr>
    <th colspan='2' class='info'>
      <h4><span class='mw-headline' id='known'>
          <div id=''>Known Issues</div>
        </span></h4>
    </th>
  </tr>
  <tr>
    <td class='col-md-1'><strong>Area</strong></td>
    <td class='col-md-10'><strong>Description</strong></td>
  </tr>
  <tr>
    <td class='col-md-1' style='width:5%;'>Zimbra Drive</td>
    <td class='col-md-1' style='text-align:left;width:78%'>Documents stored in briefcase or Zimbra Drive that have very long names are opened in view-only mode. To work around this, shorten the filename on the document.</td>
  </tr>
  <tr>
    <td class='col-md-1' style='width:5%;'>Contacts</td>
    <td class='col-md-1' style='text-align:left;width:78%'>Hierarchical Address Book (HAB) is supported in English only. Support for additional languages will be provided in an upcoming patch release.</td>
  </tr>
  <tr>
    <td class='col-md-1' style='width:5%;'>Zimbra Drive</td>
    <td class='col-md-1' style='text-align:left;width:78%'>If you used Zimbra Drive v2 (Beta) prior to its Stable release, we advise you to clean up the Beta database before proceeding. Refer to [https://wiki.zimbra.com/wiki/index.php?curid=23831 How to Clean up a Zimbra Drive (Beta) Database].</td>
  </tr>
  <tr>
    <td class='col-md-1' style='width:5%;'>ZCO</td>
    <td class='col-md-1' style='text-align:left;width:78%'>Older versions of the Outlook Connector for Zimbra (prior to Version 8.8.10) do not detect versions 8.8.10 and higher, so users will receive no notification that an upgrade is available. End users are recommended to initiate a manual upgrade to this version of the connector. </td>
  </tr>
  <tr>
    <td class='col-md-1' style='width:5%;'>ZCO</td>
    <td class='col-md-1' style='text-align:left;width:78%'>Dumpster feature is supported in English only. Support for additional languages will be provided in an upcoming patch release.</td>
  </tr>
</table>
 
<!----- Product Lifecycle Updates------------------------------------------------------------------------------------------>
<table class="table table-striped table-condensed">
   <tr>
    <th class="info">
      <h4>
        <div id="lifecycle">Product Lifecycle Updates</div>
      </h4>
    </th>
  </tr>
  <tr>
    <td class="col-md-1">'''IMAPD''' was released as Beta with [[Zimbra Releases/8.8|Zimbra 8.8.5]], and has not been released as Stable. It has been deprecated.</td>
  </tr>
  <tr>
    <td class="col-md-1"> '''ZCS Migration Wizard for Exchange''' is supported only for PST file import, with End of Technical Guidance set for 31 December 2020.  We recommend [https://zimbra.audriga.com audriga's self-service migration solution] as a preferred alternative for all account migrations.</td>
  </tr>
  <tr>
    <td class="col-md-1">'''ZCS Migration Wizard for Domino''' is now deprecated.</td>
  </tr>
  <tr>
    <td class="col-md-1">'''ZCS Account Migration''' within the Zimbra Admin UI is no longer supported, with End of Technical Guidance set for 17 December 2019.</td>
  </tr>
  <tr>
    <td class="col-md-1">'''Zimbra Classic HSM, Classic Backup,''' and '''Classic Mobile''' are deprecated and will be removed in the next release of Zimbra 8.8. Installations that have not yet migrated to new Network Edition NG Modules or ZSP are encouraged to do so.</td>
  </tr>
  <tr>
    <td class="col-md-1">'''Zimbra Desktop''' is no longer supported, with End of Technical Guidance set for 1 October 2019.</td>
  </tr>
  <tr>
    <td class="col-md-1">'''Zimbra Touch Client''' is now deprecated.</td>
  </tr>
  <tr>
    <td class="col-md-1">'''Zimbra Mobile Client''' is now deprecated.</td>
  </tr>
  <tr>
    <td class="col-md-1">'''HTML Client''' is no longer supported, with End of Technical Guidance set for 1 July 2022.</td>
  </tr>
</table>
 
=Quick note: Open Source repo=
Downloading and building our Zimbra Code? Keep reading... Starting ZCS 8.7.6 and above we have new steps to download, build and see our code via Github:
*https://github.com/Zimbra/zm-build
</div>
</div>
    <div class="col-md-3">{{GuidePosts}}</div>
</div>
</div>

Revision as of 13:52, 12 April 2019


Zimbra Collaboration 8.8.12 GA Release

Check out the Security Fixes, What's New, Fixed Issues and Known Issues for this version of Zimbra Collaboration. As always, you’re encouraged to tell us what you think in the Forums, or open a support ticket to report issues.

NOTE: If you are upgrading and/or migrating from an older version of Zimbra to Zimbra 8.8 Production Ready, please read Things to Know Before Upgrading and First Steps with the Zimbra NG Modules for critical information before you upgrade.

Security Fixes

Information about security fixes, security response policy and vulnerability rating classification are listed below. See the Zimbra Security Response Policy and the Zimbra Vulnerability Rating Classification information below for details. You can also refer to the Security Vulnerability Advisories register.

Bug# Summary CVE-ID CVSS
Score
Zimbra
Rating
Fix Release
Version
109096 Blind SSRF vulnerability - Feed [CWE-918] CVE-2019-6981 4.0 Minor 8.8.12
109127 SSRF vulnerability - ProxyServlet [CWE-918 / CWE-807] CVE-2019-9621 4.0 Minor 8.8.12
108181 Upgraded 3rd party php to version 7.3.1. n/a - - 8.8.12
107548 Upgraded 3rd party Apache to version 2.4.38. n/a - - 8.8.12

What's New

NOTE: Beta features should not be installed and are not supported on production systems. Beta modules have been provided for evaluation in lab environments only.


Zimbra Collaboration Suite:
  • Ubuntu 18.04 support (Beta)
  • Hierarchical Address Book (Stable) - An Hierarchical Address Book (HAB) is an enhancement of the Global Address List (GAL) that includes organization information, enabling contact selection by sub-organization and seniority. The Zimbra Web Client now gives users the ability to view, navigate and select contacts from the HAB. With HAB enabled, Global Organization appears as a contact source in the Select-Addresses dialog, and selecting it changes the dialog to facilitate navigating the organization as a tree structure.
  • Automatic configuration for platform Calendar, Contact and Email apps on iOS and MacOS is now supported by direct download of mobileconfig files. Users will find Mobile Configuration in Preferences - Connected Devices & Apps.
Zimbra Connector for Outlook:
  • Recover Deleted Items: ZCO now supports Zimbra's Dumpster feature. Messages and Contacts that have been permanently deleted can be recovered back to the user's Trash folder. This requires that the feature be enabled for the user (zimbraDumpsterEnabled). Currently this feature is available in English only; localization will be provided in an upcoming patch.
  • Added an option for a Simplified Support View when producing a custom MSI. This simplifies the Support tab in ZCO with a limited menu of actions.
  • Actions for the Persona feature will now only be shown if the feature is enabled for the user.
Zimbra Drive:
  • Zimbra Drive is declared Stable as of this release. If you had deployed with Beta, please refer to Known Issues.
  • When sharing a file in Drive, an email can be automatically sent to collaborators.
  • Users can now download entire folders from Drive via a new Download option on folder menus and context menus.
  • Reminder: Legacy Zimbra Drive based on Nextcloud / Owncloud integration has been renamed Open Drive, and is compatible with:[ul] [li]NextCloud versions 9, 10, 11, 12 and 13 only (See NextCloud store for latest.)[/li] [li]ownCloud versions 9.0, 9.1, and 10 only[/li][/ul]
Zimbra Talk:
  • Instant meeting adds the ability to initiate a video call including external users.
Zimbra Docs:
  • Zimbra Docs server build is now based on latest version of LOOL 4.0.1. This release includes a fresh look - with improved toolbar colors and layout, ...easier shape editing, as well as improved interoperability provided by upgrading the underlying document rendering core to Collabora Office 6.0.
NG Backup:
  • Blobless Backup (Beta) gives administrators the option to skip blobs during backup, thereby reducing the elapsed time required to perform the backup. For system integrity, blob backup should be provided through some other mechanism.

Fixed Issues

Area Description
Zimbra Drive After user's computer resumed from sleep, Zimbra Drive would often show errors The server is off-line or I'm thinking. Now when the websocket connection has been closed, the client tries to reopen it at increasing time intervals, to ensure Drive reconnects.
NG Mobile Hidden folders and their contents are skipped during synchronization. Previously, such folders caused synchronization to fail.
NG Backup Missing Blob errors will only be logged once, mitigating a problem that caused mailbox.log to grow exponentially and stop smartscan from completing.
Zimbra Docs Documents shared in Read-Only mode can now be edited only from the authenticated owner's account.
Zimbra Drive Files contained in Drive will now remain accessible in ReadOnly mode if the license expires.
Zimbra Drive On multiserver, downloading a drive folder as zip would sometimes result in a corrupted zip file. This has been fixed.
Zimbra Drive Fixed a bug that blocked the viewing or editing of share information when a file or folder was shared with a distribution list.
Web UX The Quick Add or New Event dialog always pre-selects the user's Default Calendar from preferences when creating a new event. This occurs even when the user is viewing only one of their available calendars; in that case the expected behavior should be to pre-select that calendar, not the user's default.
ZCO GAL synchronization message now properly reports progress expressed as progress / total items.
ZCO The Add Share button is hidden for ZCO users who do not have Sharing enabled (i.e. zimbraFeatureSharingEnabled is false).
Zimbra Talk After a video call ended, the webcam may have remained active. The video stream is now reliably terminated when the call ends. Workaround for earlier versions is to refresh the browser if the webcam activity LED remained on past the end of call.
Web UX A fix in 8.8.11 that prevented unwanted duplication of attachments came with a side-effect bug that suppressed the display of inline PDF attachments sent from Apple Mail clients. This has been fixed.

Known Issues

Area Description
Zimbra Drive Documents stored in briefcase or Zimbra Drive that have very long names are opened in view-only mode. To work around this, shorten the filename on the document.
Web UX Hierarchical Address Book (HAB) is supported in English only. Support for additional languages will be provided in an upcoming patch release.
Zimbra Drive If you used Zimbra Drive v2 (Beta) prior to its Stable release, we advise you to clean up the Beta database before proceeding. Refer to How to Clean up a Zimbra Drive (Beta) Database.
ZCO Dumpster feature is supported in English only. Support for additional languages will be provided in an upcoming patch release.
ZCO Older versions of the Outlook Connector for Zimbra (prior to Version 8.8.10) do not detect versions 8.8.10 and higher, so users will receive no notification that an upgrade is available. End users are recommended to initiate a manual upgrade to this version of the connector.
Zextras When attempting to install Zimbra Suite Plus (ZSP) on an incompatible version of ZCS, the admin will receive an error message with the incorrect URL for the Compatibility List. The correct URL is https://wiki.zimbra.com/wiki/Zimbra_Suite_Plus/Compatibility_List.
Platform After an upgrade to 8.8.12, IMAP users are unable to access folders with names containing non-ASCII characters. This is fixed in 8.8.12 P1.

Quick note: Open Source repo

Downloading and building our Zimbra Code? Keep reading... Starting ZCS 8.7.6 and above we have new steps to download, build and see our code via Github:



Try Zimbra

Try now Zimbra Collaboration without any cost with the 60-day free Trial.
Get it now »

Want to get involved?

You can contribute in the Community, in the Wiki, in the Code, or developing Zimlets.
Find out more. »

Looking for a Video?

Visit our YouTube Channel to keep posted about Webinars, technology news, Product overviews and more.
Go to the YouTube Channel »

Jump to: navigation, search