View source for Zimbra Releases/8.8.9/P7


=Zimbra Collaboration 8.8.9 Patch 7 GA Release=

<div class="col-md-9">
Check out the'''"[[#security|Security Fixes]]"''', '''"[[#ng-changelog|Zimbra NG Changelog]]"''' for this version of Zimbra Collaboration. Please refer '''"[[#installation|Patch Installation]]"''' section for Patch Installation instructions. As always, you’re encouraged to tell us what you think in the Forums, or open a support ticket to report issues.

=Security Fixes=
<div id="security"></div>
Information about security fixes, security response policy and vulnerability rating classification are listed below. See the [https://wiki.zimbra.com/wiki/Zimbra_Security_Response_Policy Zimbra Security Response Policy] and the [https://wiki.zimbra.com/wiki/Zimbra_Vulnerability_Rating_Classification Zimbra Vulnerability Rating] Classification information below for details.
<table class="table table-striped table-condensed">
<tr>
  <th style="background-color: #f15922; width: 80px;"><span style="color: #ffffff;">Bug#</span></th>
  <th style="background-color: #f15922;"><span style="color: #ffffff;">Summary</span></th>
  <th style="background-color: #f15922;"><span style="color: #ffffff;"><strong>CVE-ID</strong></span></th>
  <th style="background-color: #f15922;"><span style="color: #ffffff;"><strong>CVSS<br>Score</strong></span></th>
  <th style="text-align: center; background-color: #f15922;"><span style="color: #ffffff;"><strong>Zimbra<br>Rating</strong></span></th>
  <th style="text-align: center; background-color: #f15922;"><span style="color: #ffffff;">Fix&nbsp;Release&nbsp;or <br>Patch&nbsp;Version</span></th>
</tr>
<tr>
  <td class="col-md-1">[https://bugzilla.zimbra.com/show_bug.cgi?id=109020 109020]</td>
  <td>Persistent XSS - Web Client / Defanger [CWE-79] </td>
  <td>CVE-2018-18631</td>
  <td style="text-align: center; ">5.0</td>
  <td style="text-align: center; ">Major</td>
  <td style="text-align: center; ">8.8.9 Patch 7</td>
</tr>
</table>

=Software changes=
* '''<font color='blue'>OpenLDAP 1.0.2 package is available with multiVal and sortVal fixes</font>''', Multival configuration is recommended for '''large deployments'''. 
** Please follow https://wiki.zimbra.com/wiki/Zimbra-LDAP_Multival_Configuration for Multival configuration steps
<br>
<table class="table table-striped table-condensed">
        <tr>
            <th colspan="2" class="info"><h4><div id="ng-changelog">Zimbra NG Changelog</div></h4></th>
        </tr>
<tr><td class="col-md-1">'''Chat Zimlet:'''
*  Fixed visualization problem with file shared via chat 
*  Fixed error on inviting on space channel
</td></tr>

<tr><td class="col-md-1">'''Admin Zimlet:'''
* Fixed the bug on Restore interface allowing to set an end date earlier than start date
</td></tr>

<tr><td class="col-md-1">'''HSM:'''
* Fixed the bug to avoid errors in output of deDuplicate
</td></tr>

<tr><td class="col-md-1">'''Backup:'''
* Fixed the bug to avoid CPU the busy loop.
</td></tr>

</table>

=Patch Installation=
<div id="installation"></div>

==Before Installing the Patch==
Before installing the patch, consider the following:
* Patches are cumulative.
* A full backup should be performed before any patch is applied. There is no automated roll-back.
* Zimlet patches can include removing existing Zimlets and redeploying the patched Zimlet.
* Only files or Zimlets associated with installed packages will be installed from the patch.
* Switch to user '''zimbra''' before using ZCS CLI commands.
* '''Important!''' You cannot revert to the previous ZCS release after you upgrade to the patch.
* '''Important Note for ZCS Setup with Local ZCS repository:''' Customers who have setup local ZCS repository should first update the local repository by following instructions in [https://wiki.zimbra.com/wiki/Zimbra_Collaboration_repository#Keep_the_local_Repository_up_to_date wiki]

==Install the Patch==
* Please make note that, installing zimbra-patch package only updates the Zimbra core packages. 

===8.8.9 Patch7 Packages===
Below are the latest available packages:
 '''Package Name'''                  '''Version'''
 FOSS:
 zimbra-patch                  ->  8.8.9.1540983778.p7-1
 zimbra-common-core-jar        ->  2.0.0.1539762104-1
 zimbra-mbox-webclient-war     ->  2.0.0.1538676137-1
 zimbra-mbox-admin-console-war ->  2.0.0.1534256855-1
 zimbra-network-store          ->  8.8.9.1531211951-1
 zimbra-ldap-components        ->  1.0.2-1zimbra8.7b1
 zimbra-lmdb                   ->  2.4.46-1zimbra8.7b3
 zimbra-clamav                 ->  0.99.4-1zimbra8.7b1
 zimbra-clamav-libs            ->  0.99.4-1zimbra8.7b1
 zimbra-chat                   ->  2.0.1.1532356008

 NETWORK:
 zimbra-patch                  ->  8.8.9.1540983778.p7-2
 zimbra-network-modules-ng     ->  2.0.7.1540572786-1
 zimbra-docs                   ->  1.0.4.1540570862-1
 zimbra-talk                   ->  2.0.7.1540571349-1
 
Please refer below steps for 8.8.9 Patch installation on Redhat and Ubuntu platforms:

===Redhat===

==== 1. Installing zimbra packages individually ====
<div id="install1">
'''Install/Upgrade zimbra-patch on mailstore node for FOSS and NETWORK'''
* As root, install the patch. Type below command:
 yum clean metadata 
 yum check-update 
 yum install zimbra-patch
* Switch to user zimbra
 su – zimbra
* ZCS must be restarted to changes to take effect. Type below command:
 zmcontrol restart

</div>

'''Install/Upgrade zimbra-chat for FOSS'''
<br/>
* As root, Type below command. 
 yum install zimbra-chat 
* Switch to user zimbra
 su – zimbra
* Zimbra mailbox service must be restarted to changes to take effect. Type below command:
 zmmailboxdctl restart

'''Install/Upgrade zimbra-talk and zimbra-network-modules-ng'''
<br/>
* As root, Type below command. 
 yum clean metadata 
 yum check-update 
 yum install zimbra-network-modules-ng
 yum install zimbra-talk
* Switch to user zimbra
 su – zimbra
* Zimbra mailbox service must be restarted to changes to take effect. Type below command:
 zmmailboxdctl restart

'''Install/Upgrade zimbra-docs (NETWORK Only)'''
<br/>
* As root, Type below command. 
 yum install zimbra-docs
* Switch to user zimbra
 su – zimbra
* Zimbra mailbox service must be restarted to changes to take effect. Type below command:
 zmmailboxdctl restart

'''Upgrade OpenLDAP on LDAP node for FOSS and NETWORK'''
* As root. Type
 yum install zimbra-ldap-components
* Restart ldap as zimbra user
 su - zimbra
 ldap restart

==== 2. Installing zimbra packages with system package upgrades ====
* As root, type below command to clear yum cache
 yum clean metadata
* As root, type below command first time so the server sees there is a new zimbra-patch package in the 889 patch repository
 yum check-update
* As root, type below command to update most available packages.
 yum update
* Switch to user zimbra
 su – zimbra
* ZCS must be restarted to changes to take effect. Type below command:
 zmcontrol restart

=== Ubuntu ===
==== 1. Installing zimbra packages individually ====
<div id="install2">
'''Install/Upgrade zimbra-patch on mailstore node for FOSS and NETWORK'''
* As root, install the patch. Type below command:
 apt-get update
 apt-get install zimbra-patch
* Switch to user zimbra
 su – zimbra
* ZCS must be restarted to changes to take effect. Type below command:
 zmcontrol restart

</div>

'''Install/Upgrade zimbra-chat for FOSS'''
* As root, Type below command. 
 apt-get install zimbra-chat 
* Switch to user zimbra
 su – zimbra
* Zimbra mailbox service must be restarted to changes to take effect.Type below command:
 zmmailboxdctl restart

'''Install/Upgrade zimbra-talk and zimbra-network-modules-ng (NETWORK Only)'''
<br/>
* As root. Type below command. 
 apt-get update
 apt-get install zimbra-network-modules-ng
 apt-get install zimbra-talk
* Switch to user zimbra
 su – zimbra
* Zimbra mailbox service must be restarted to changes to take effect.Type below command:
 zmmailboxdctl restart

'''Install/Upgrade zimbra-docs (NETWORK Only)'''
<br/>
* As root, Type below command. 
 apt-get install zimbra-docs
* Switch to user zimbra
 su – zimbra
* Zimbra mailbox service must be restarted to changes to take effect.Type below command:
 zmmailboxdctl restart

'''Upgrade OpenLDAP on LDAP node for FOSS and NETWORK'''
* As root. Type
 apt-get install zimbra-ldap-components
* Restart ldap as zimbra user
 su - zimbra
 ldap restart

==== 2. Installing zimbra packages with system package upgrades ====
* As root, type below command first time so the server sees there is a new zimbra-patch package in the 889 patch repository 
 apt-get update
* As root, type below command to update most available packages
 apt-get upgrade
OR 
* As root, type below command to update all available packages plus any kernel updates.
 apt-get dist-upgrade
* Switch to user zimbra
 su – zimbra
* ZCS must be restarted to changes to take effect. Type below command:
 zmcontrol restart
</div>