View source for Zimbra Releases/8.8.15/P28

= Zimbra Collaboration Joule 8.8.15 Patch 28 GA Release =
<div style="font-size:14px;" >
Release Date: '''November 22, 2021'''
</div>
<div class="col-md-9">
Check out the '''[[#Security Fixes|Security Fixes]]''','''[[#What's New|What's New]]''', '''[[#Fixed Issues|Fixed Issues]]''', and '''[[#Known Issues|Known Issues]]''' for this version of Zimbra Collaboration.
Please refer to the '''[[#Patch Installation|Patch Installation]]''' section for Patch Installation instructions.
As always, you are encouraged to tell us what you think in the Forums or open a support ticket to report issues.
{{ReleaseNote-note}}


= Security Recommendation =
Zimbra would strongly recommend the customer to review whether the Proxy Servlet is configured to allow a particular host  (via zimbraProxyAllowedDomains configuration setting on each class of services), please make sure each entry in zimbraProxyAllowedDomains should be a safe and trusted host, there should '''NOT''' be any wild card entries like '''*.webex.com''' instead use specific host '''example.webex.com'''.

Any entry in zimbraProxyAllowedDomains resolves to an internal IP address (such as 127.0.0.1), an attacker could possibly access services running on a different port on the same server, which would normally not be exposed publicly. So we urge our customers to review this configuration setting to ensure that there are no vulnerabilities are introduced.


==Security Fixes==
{|class="wikitable" style="border: solid #ffffff; padding: 20px;"
!style="background-color:#f15922; color: white; border:solid #ffffff"|Summary 
!style="background-color:#f15922; color: white; border:solid #ffffff"|CVE-ID 
!style="background-color:#f15922; color: white; border:solid #ffffff"|CVSS Score
!style="background-color:#f15922; color: white; border:solid #ffffff"|Zimbra Rating 
!style="background-color:#f15922; color: white; border:solid #ffffff"|Fix Patch Version
|-
|style="border: solid #ffffff;"|Upgraded Apache to 2.4.51 to avoid multiple vulnerabilities.
|style="border: solid #ffffff;"| [https://nvd.nist.gov/vuln/detail/CVE-2021-30641 CVE-2021-30641] [https://nvd.nist.gov/vuln/detail/CVE-2020-35452 CVE-2020-35452]
|style="border: solid #ffffff;text-align:center;"| 7.3
|style="border: solid #ffffff;text-align:center;"| High
|style="border: solid #ffffff;text-align:center;"| 8.8.15 P28
|-
|}

= What's New =

<br/>
<div style="padding:1%; background-color:#f68b1f; color:#ffffff; font-size:20px;">
Zimbra 8.8.15 is now fully supported on Ubuntu 20 (GA)

Download the latest Ubuntu 20 binaries from https://www.zimbra.com/downloads
</div>
<br/>

== Package Upgrade ==
<br/>
<div style="padding:1%; color:#f68b1f;font-size:20px;" >
* Apache has been upgraded from 2.4.46 to 2.4.51.
</div>
<br/>

= Fixed Issues =

== Web UX - Classic ==
* In Classic Web App, an incorrect date was set when the user creates an appointment, set start date from the second week of the month with a Monthly custom recurrence rule - "The second day of every month". The issue has been fixed.
* When creating an appointment with the location and setting an "End by" date in the custom recurrent rule, if an appointment exists on the set "End by" date with the same location, then the location did not return conflict. The issue has been fixed.
* If the user composes an email and pastes an image from another email and sends it, the recipient receives the email without an image in it. The issue has been fixed.

== ZCO ==
* Corruption in the user's profile property which stores the ZDB path causes Outlook to crash. The issue has been fixed.

== Zimbra Connect ==
* Now every icon in Connect has an alternative text, a title and a label to improve accessibility.
* Fixed a bug that loaded a Matomo instance on log into Zimbra, raising an HTTP 404 bug. Now Matomo is no more loaded on login.
* Text paste on the conversation component will now work after upgrading Chrome to version 92.
* Improved the download of a file from one-to-one chat that suffered casual failures due to buffer issues. Now, the possibility of a file download failing has been drastically reduced.
* Information regarding the mute state of a conversation, such as groups or spaces, is now deleted when the user leaves it, whether he leaves the conversation or is being kicked by it.
* Updated logs for ChatAutoCleanup procedure.
* Video reference will be cleaned after every span of view mode.
* Removed secondary bar on external meeting and updated year in the external access login page.
* Now meetings on the external tab require login if the domain is different from the user’s domain.
* Now mini chats are automatically closed when the user is removed from the conversation or the conversation is removed.
* Changed meeting action name from "Mute for All" to "Mute".

== NG Mobile ==
* Fixed a bug that caused the PARTSTAT field of an invitation to be wrongly set as NEED-ACTION on accepting one appointment via Exchange ActiveSync. This bug caused the appointment not to be shown via CalDAV.

== HSM ==
* The default behaviour of the mailbox move now will not move the backup from the source server so the operation will take less time.

== NG Auth ==
* A new widget *Mobile Password* has been added to the Zimbra Admin so the admins can manage mobile passwords from the GUI.

== NG Backup ==
* The doPurgeMailboxes operation now marks as deleted mailboxes the ones that are moved to other servers. This makes the Backup purge operation clean the data left after by the move operations too.


= Known Issues =
* None



{{PatchInstallation-8815V2|Version=8.8.15 Patch 28|Packages=
FOSS:
 '''PackageName'''                     '''Version'''
 zimbra-patch                  ->      8.8.15.1636710484.p28-2
 zimbra-mta-patch              ->      8.8.15.1634924656.p27-1
 zimbra-mta-components         ->      1.0.14-1zimbra8.8b1
 zimbra-proxy-patch            ->      8.8.15.1634196512.p27-1
 zimbra-proxy-components       ->      1.0.9-1zimbra8.8b1
 zimbra-nginx                  ->      1.20.0-1zimbra8.8b2
 zimbra-common-core-jar        ->      8.8.15.1634917408-1
 zimbra-common-core-libs       ->      8.8.15.1623913824-1
 zimbra-mbox-conf              ->      8.8.15.1568012813-1
 zimbra-mbox-service           ->      8.8.15.1568694943-1
 zimbra-mbox-store-libs        ->      8.8.15.1626439528-1
 zimbra-mbox-war               ->      8.8.15.1618222785-1
 zimbra-mbox-admin-console-war ->      8.8.15.1624007059-1
 zimbra-mbox-webclient-war     ->      8.8.15.1635813854-1
 zimbra-drive                  ->      1.0.13.1576152256-1
 zimbra-core-components        ->      2.0.14-1zimbra8.8b1
 zimbra-openjdk                ->      13.0.1-1zimbra8.8b1
 zimbra-openjdk-cacerts        ->      1.0.8-1zimbra8.7b1
 zimbra-openssl                ->      1.1.1l-1zimbra8.7b4
 zimbra-openldap-lib           ->      2.4.59-1zimbra8.8b5
 zimbra-openldap-client	      ->      2.4.59-1zimbra8.8b5
 zimbra-openldap-server        ->      2.4.59-1zimbra8.8b5
 zimbra-ldap-components        ->      1.0.14-1zimbra8.8b1
 zimbra-core-components        ->      2.0.14-1zimbra8.8b1
 zimbra-postfix                ->      3.6.1-1zimbra8.7b3
 zimbra-postfix-logwatch       ->      1.40.03-1zimbra8.7b1
 zimbra-clamav                 ->      0.103.2-1zimbra8.8b3
 zimbra-perl-mail-spamassassin ->      3.4.5-1zimbra8.8b3
 zimbra-spamassassin-rules     ->      1.0.0-1zimbra8.8b4
 zimbra-openldap-server        ->      2.4.59-1zimbra8.8b5
 zimbra-chat                   ->      3.0.1.1594306000-1
                                                         

NETWORK:                                                      
 '''Package Name'''                    '''Version'''           
 zimbra-patch                  ->      8.8.15.1636710484.p28-1
 zimbra-mbox-ews-service       ->      8.8.15.1590048861-1
 zimbra-drive-ng               ->      3.0.15.1616091166-1
 zimbra-network-modules-ng     ->      6.0.30.1635431729-1
 zimbra-docs                   ->      3.0.8.1616090809-1
 zimbra-connect                ->      1.0.29.1635424238-1
 zimbra-zco                    ->      8.8.15.1908.1636710405-1
 zimbra-zimlet-auth            ->      1.0.2.1622463729-1
}}

===Upgraded 3rd Party Packages===
* OpenSSL and Postfix TLS 1.3 GA Packages
The packages for RHEL6, RHEL7, UBUNTU14, UBUNTU16, UBUNTU18 are:

 '''Package Name'''      '''Version'''
 zimbra-openssl : 1.1.1l-1zimbra8.7b4
 zimbra-postfix : 3.6.1-1zimbra8.7b3
 zimbra-nginx : 1.20.0-1zimbra8.8b2
 zimbra-mariadb : 10.1.25-1zimbra8.7b3
 zimbra-heimdal : 1.5.3-1zimbra8.7b3
 zimbra-curl : 7.49.1-1zimbra8.7b3
 zimbra-perl-net-ssleay : 1.88-1zimbra8.7b2
 zimbra-unbound : 1.11.0-1zimbra8.7b2
 zimbra-apr-util : 1.6.1-1zimbra8.7b2
 zimbra-perl-dbd-mysql : 4.050-1zimbra8.7b4
 zimbra-net-snmp : 5.8-1zimbra8.7b2
 zimbra-perl-crypt-openssl-random : 0.11-1zimbra8.7b3
 zimbra-perl-crypt-openssl-rsa : 0.31-1zimbra8.7b2
 zimbra-cyrus-sasl : 2.1.26-1zimbra8.7b3
 zimbra-openldap : 2.4.59-1zimbra8.8b4
 zimbra-opendkim : 2.10.3-1zimbra8.7b5
 zimbra-clamav : 0.103.2-1zimbra8.8b3
 zimbra-perl-io-socket-ssl : 2.068-1zimbra8.7b2
 zimbra-perl-net-http : 6.09-1zimbra8.7b3
 zimbra-perl-libwww : 6.13-1zimbra8.7b3
 zimbra-perl-lwp-protocol-https : 6.06-1zimbra8.7b3
 zimbra-perl-xml-parser : 2.44-1zimbra8.7b3
 zimbra-perl-soap-lite : 1.19-1zimbra8.7b3
 zimbra-perl-xml-sax-expat : 0.51-1zimbra8.7b3
 zimbra-perl-xml-simple : 2.25-1zimbra8.7b2
 zimbra-perl-mail-dkim : 0.40-1zimbra8.7b3
 zimbra-perl-mail-spamassassin : 3.4.5-1zimbra8.8b4
 zimbra-spamassassin-rules : 1.0.0-1zimbra8.8b5
 zimbra-perl-innotop : 1.9.1-1zimbra8.7b3
 zimbra-httpd : 2.4.46-1zimbra8.7b3
 zimbra-php : 7.3.25-1zimbra8.7b3
 zimbra-postfix-logwatch : 1.40.03-1zimbra8.7b1
 zimbra-perl : 1.0.5-1zimbra8.7b1
 zimbra-dnscache-components : 1.0.2-1zimbra8.7b1
 zimbra-apache-components : 2.0.4-1zimbra8.8b1
 zimbra-spell-components : 2.0.4-1zimbra8.8b1
 zimbra-snmp-components : 1.0.3-1zimbra8.7b1
 zimbra-mta-components : 1.0.14-1zimbra8.8b1
 zimbra-core-components : 2.0.14-1zimbra8.8b1
 zimbra-proxy-components : 1.0.9-1zimbra8.8b1
 zimbra-store-components : 1.0.3-1zimbra8.7b1
 zimbra-ldap-components : 1.0.14-1zimbra8.8b1

* OpenSSL and Postfix TLS 1.3 Packages
The GA packages for RHEL8 are:

 '''Package Name'''      '''Version'''
 zimbra-openssl : 1.1.1l-1zimbra8.7b4
 zimbra-postfix : 3.6.1-1zimbra8.7b3
 zimbra-nginx : 1.20.0-1zimbra8.8b2
 zimbra-mariadb : 10.1.25-1zimbra8.7b3
 zimbra-heimdal : 1.5.3-1zimbra8.7b3
 zimbra-curl : 7.49.1-1zimbra8.7b3
 zimbra-perl-net-ssleay : 1.88-1zimbra8.7b2
 zimbra-unbound : 1.11.0-1zimbra8.7b2
 zimbra-apr-util : 1.6.1-1zimbra8.7b2
 zimbra-perl-dbd-mysql : 4.050-1zimbra8.7b4
 zimbra-net-snmp : 5.8-1zimbra8.7b3
 zimbra-perl-crypt-openssl-random : 0.11-1zimbra8.7b3
 zimbra-perl-crypt-openssl-rsa : 0.31-1zimbra8.7b2
 zimbra-cyrus-sasl : 2.1.26-1zimbra8.7b3
 zimbra-openldap : 2.4.59-1zimbra8.8b4
 zimbra-opendkim : 2.10.3-1zimbra8.7b5
 zimbra-clamav : 0.103.2-1zimbra8.8b3
 zimbra-perl-io-socket-ssl : 2.068-1zimbra8.7b3
 zimbra-perl-net-http : 6.09-1zimbra8.7b4
 zimbra-perl-libwww : 6.13-1zimbra8.7b4
 zimbra-perl-lwp-protocol-https : 6.06-1zimbra8.7b4
 zimbra-perl-xml-parser : 2.44-1zimbra8.7b4
 zimbra-perl-soap-lite : 1.19-1zimbra8.7b4
 zimbra-perl-xml-sax-expat : 0.51-1zimbra8.7b4
 zimbra-perl-xml-simple : 2.25-1zimbra8.7b3
 zimbra-perl-mail-dkim : 0.40-1zimbra8.7b3
 zimbra-perl-mail-spamassassin : 3.4.5-1zimbra8.8b4
 zimbra-spamassassin-rules : 1.0.0-1zimbra8.8b5
 zimbra-perl-innotop : 1.9.1-1zimbra8.7b4
 zimbra-httpd : 2.4.46-1zimbra8.7b3
 zimbra-php : 7.3.25-1zimbra8.7b3
 zimbra-perl : 1.0.6-1zimbra8.7b1 
 zimbra-dnscache-components : 1.0.2-1zimbra8.7b1
 zimbra-apache-components : 2.0.4-1zimbra8.8b1
 zimbra-spell-components : 2.0.4-1zimbra8.8b1
 zimbra-snmp-components : 1.0.3-1zimbra8.7b1
 zimbra-mta-components : 1.0.14-1zimbra8.8b1
 zimbra-core-components : 2.0.14-1zimbra8.8b1
 zimbra-proxy-components : 1.0.9-1zimbra8.8b1
 zimbra-store-components : 1.0.3-1zimbra8.7b1
 zimbra-ldap-components : 1.0.14-1zimbra8.8b1

The updated GA packages are:

 '''Package'''            '''Old-Version'''    '''New-Version'''
 postfix              3.5.6          3.6.1
 openssl              1.1.1k         1.1.1l
 openldap             2.4.49         2.4.59
 nginx                1.19.0          1.20.0
 postfix-logwatch     1.40.01        1.40.03
 io-socket-ssl	     2.020          2.068
 xml-simple           2.20           2.25
 crypt-openssl-rsa    0.28           0.31
 net-snmp             5.7.3          5.8
 dbd-mysql            4.033          4.050
 apr-util             1.5.4          1.6.1
 unbound              1.5.9          1.11.0
 net-ssleay           1.72           1.88

* Nginx TLS 1.3 Packages
The GA packages for RHEL6, RHEL7, RHEL8, UBUNTU14, UBUNTU16, UBUNTU18 are:
 '''PackageName'''                                       '''Version'''
 zimbra-nginx                               ->     1.20.0-1zimbra8.8b2
 zimbra-proxy-patch                         ->     8.8.15.1634196512.p27-1
 zimbra-proxy-components                    ->     1.0.9-1zimbra8.8b1

= Quick note: Open Source repo =
The steps to download, build, and see our code via Github can be found here:
[https://github.com/Zimbra/zm-build https://github.com/Zimbra/zm-build]

= Jira Summary =
== Jira Tickets fixed in 8.8.15 Patch 28 ==
{|class="wikitable" style="border: solid #ffffff; padding: 20px;"
|-
|style="border: solid #ffffff;vertical-align:middle;"|ZCS-11056
|style="border: solid #ffffff;vertical-align:middle;"|Accessibility improved in Connect
|-
|style="border: solid #ffffff;vertical-align:middle;"|ZCS-11055
|style="border: solid #ffffff;vertical-align:middle;"|Bug with PARTSTAT field on appointment invitation fixed
|-
|style="border: solid #ffffff;vertical-align:middle;"|ZCS-11054
|style="border: solid #ffffff;vertical-align:middle;"|Moved mailboxes now marked as deleted
|-
|style="border: solid #ffffff;vertical-align:middle;"|ZCS-11053
|style="border: solid #ffffff;vertical-align:middle;"|Introducing new widget "Mobile password"
|-
|style="border: solid #ffffff;vertical-align:middle;"|ZCS-11052
|style="border: solid #ffffff;vertical-align:middle;"|Prevent Matomo requests
|-
|style="border: solid #ffffff;vertical-align:middle;"|ZCS-11051
|style="border: solid #ffffff;vertical-align:middle;"|Fix paste bug on Chrome > 91
|-
|style="border: solid #ffffff;vertical-align:middle;"|ZCS-11050
|style="border: solid #ffffff;vertical-align:middle;"|Connect file download improved
|-
|style="border: solid #ffffff;vertical-align:middle;"|ZCS-11049
|style="border: solid #ffffff;vertical-align:middle;"|Delete mute information on leaving a conversation
|-
|style="border: solid #ffffff;vertical-align:middle;"|ZCS-11047
|style="border: solid #ffffff;vertical-align:middle;"|Updated logs for ChatAutoCleanup procedure
|-
|style="border: solid #ffffff;vertical-align:middle;"|ZCS-11046
|style="border: solid #ffffff;vertical-align:middle;"|Forced video reference to clean after every spaw of view mode
|-
|style="border: solid #ffffff;vertical-align:middle;"|ZCS-11045
|style="border: solid #ffffff;vertical-align:middle;"|Mailbox move speed improvement
|-
|style="border: solid #ffffff;vertical-align:middle;"|ZCS-10993
|style="border: solid #ffffff;vertical-align:middle;"|Remove secondary bar on external meeting
|-
|style="border: solid #ffffff;vertical-align:middle;"|ZCS-10989
|style="border: solid #ffffff;vertical-align:middle;"|Meetings on external tab require login if domain is different from userâ€™s one
|-
|style="border: solid #ffffff;vertical-align:middle;"|ZCS-10985
|style="border: solid #ffffff;vertical-align:middle;"|Auto close mini chat on kick
|-
|style="border: solid #ffffff;vertical-align:middle;"|ZCS-10981
|style="border: solid #ffffff;vertical-align:middle;"|Change "Mute for All" in "Mute"
|-
|style="border: solid #ffffff;vertical-align:middle;"|ZCS-10918
|style="border: solid #ffffff;vertical-align:middle;"|Wrong start date is set when <ordinal number> day is specified in custom monthly repeat dialog on Classic UI
|-
|style="border: solid #ffffff;vertical-align:middle;"|ZCS-10912
|style="border: solid #ffffff;vertical-align:middle;"|End day of custom repeat doesn't include the specified day on Classic UI
|-
|style="border: solid #ffffff;vertical-align:middle;"|ZCOMT-2384
|style="border: solid #ffffff;vertical-align:middle;"|Merge changes done as part of ZESC-2083 into develop
|-
|style="border: solid #ffffff;vertical-align:middle;"|ZBUG-2411
|style="border: solid #ffffff;vertical-align:middle;"|zmdhparam is broken
|-
|style="border: solid #ffffff;vertical-align:middle;"|ZBUG-2362
|style="border: solid #ffffff;vertical-align:middle;"|Apache vulnerabilities
|-
|style="border: solid #ffffff;vertical-align:middle;"|ZBUG-1344
|style="border: solid #ffffff;vertical-align:middle;"|Copying an image from existing email to a composed email, receiver receives an email without image.
|-
|}