Zimbra Releases/9.0.0/P2

1. Zimbra Wiki
2. Zimbra Releases
3. Zimbra Collaboration 9.0.0 Patch 2

Zimbra Collaboration Kepler 9.0.0 Patch 2 GA Release

Check out the Security Fixes, What's New, Fixed Issues, and Known Issues for this version of Zimbra Collaboration. Please refer to the Patch Installation section for Patch Installation instructions. As always, you are encouraged to tell us what you think in the Forums or open a support ticket to report issues.

Jira Summary lists the tickets fixed in this release.

Security Fixes

Summary	CVE-ID	CVSS Score	Zimbra Rating	Fix Patch Version
XSS through malicious JS embedded in Mail Message or Calendar Event	CVE-2020-11737	3.1	Minor	9.0.0 P2

What's New

ZCS	For systems using Single sign-on (SSO), the Modern Web App now redirects to the zimbraWebClientLogoutURL provisioned in LDAP to complete SSO-logout.
ZCO	Duplicate calendar events would sometimes appear, with no clear trigger action. ZCO now identifies these unwanted duplicates and automatically removes them.
Modern Web App - Common	We’ve introduced a significant change to branding and customization for Zimbra X and the Modern Web Client in Zimbra 9. This change has removed the dependency on product builds by enabling run-time customization deployments.
Modern Web App - Mail	When users paste a large inline image in message composer, they now see a spinner while the image paste (upload) is in progress. Pressing Ctrl+Enter now sends the composed message in Modern Web App.
Modern Web App - Calendar	Recurring events are now marked differently (with a repeat icon) so that users can differentiate between one time and recurring events. Users can set the From address and name to use when sending messages. Once defined in Settings > Accounts > primary account, From address becomes available, and users can access it in the "From" field dropdown. Users can now choose to respond to individual events in a recurring-event series. This feature gives invitees greater flexibility in managing their invitations. Users can now edit their response to a meeting invite before sending them to the organizer. The options to draft a response appears after they click one of the RSVP options. For users with disabled Calendar feature, the meeting invites now appear as a normal email without RSVP options and a meeting.ics file as an attachment. While creating an event when users click Show Availability, the displayed time is as per the locale chosen. 24-hour time format appears as numbers 1 through 24 format. Earlier, the Show Availability button displayed times as numbers 1 through 12. For Shared Calendars, the users can now send an invitation on behalf of the calendar owner. The response to such invitations goes to the calendar owner.
Modern Web App - Search	When a user searches for a word/phrase, the searched word/phrase now appears highlighted in the search results.
Modern Web App - Settings	Users now have an option to specify the start and end times when setting an out-of-office response. Earlier users could set only the start and end days. Users can now specify a name while saving a search. They can also rename that saved search. Personas can be created under Settings > Accounts. A Zimbra persona allows you to create an email identity to change a group of settings ("From" address, display name, signatures, and Reply-To address), making it easy to change a "Role" when managing different types of email. Users can configure any account or alias as the "From" address for a Persona. To change the Persona when composing an email, use the dropdown From selector.
Modern Zimlets	The functionality of zm-x-zimlet-event-from-email zimlet is moved to the core product. When users select an email, the option to create an event from email is available in the context menu. Date and Additional Signature zimlets are now shipped as default and pre-enabled for users.

Fixed Issues

ZCS	zmdialog utility now captures top, ps and netstat output for all servers instead of just the mailbox server.
ZCO	Fixed several possible crashes that would occur periodically when modifying events in shared or delegated calendars.
Classic Web App	Fixed a date parsing error that made it impossible to search for messages before/after specific dates when the language was set to Hungarian. Zimbra Drive - Fixed a bug that interfered with Drag & Drop operations to upload a file to Drive. Zimbra Drive - Fixed a bug that prevented some attachments (such as pdf files) from saving to Drive when clicking ‘Save to Drive’, with no error being returned to the user.
Modern Web App - Zimbra Connect	To get file sharing to work for some users, all quota settings related to their account needed to be removed. This is now fixed.
Modern Web App - Common	System folder names are localized in all supported languages. (e.g., Inbox, Spam, Trash, Archive, Sent, Outbox, Contacts, Calendar.) In Settings → General, the storage-usage bar now correctly displays the utilized user quota. When users set German as the browser language, the application translated the word "Tag" to different words throughout the application. After this fix, the word appears as "Tag" consistently across the application.
Modern Web App - Mail	Attached calendar event files (.ics) are now shown on emails, unless the message is recognized as an invitation or update. Users are able to download and then import events that they receive as attachments. The first time that an existing draft email was selected after login or a forced reset of the App, it would not be rendered and would just show "undefined" in the preview pane. The cache now loads before rendering, so the email appears as expected. If users try to preview an attachment through search results, the search results no more hide. Fixed the alignment of invitation response controls for mobile browsers. .ics attachments in users' email now appear as a regular attachment for them to download and import in their calendar application. When reading an email containing Cc/Bcc addresses, the Cc/Bcc fields disappeared after 30 seconds. The issue has been fixed now.
Modern Web App - Contacts	Fixed an issue where users could not view the GAL folder if administrators disabled users' sharing feature.
Modern Web App - Calendar	Users could save an event even when the specified date was invalid. This issue no longer occurs, and the Save button remains disabled if an invalid date is specified. The pulldown control in the scheduler used to set invitees as "Required" or "Optional" has been translated for all supported languages. When users right-clicked an event in Calendar after the pop-over was displayed, the browser’s context menu appeared in place of the event context menu. After this fix, the event’s context menu appears instread of the browser's context menu. When a user sends an invitation from the shared Calendar on behalf of the Sharer, event action buttons were getting displayed on the invitee's response email. The issue has been fixed now. No action buttons are displayed for such emails. Creating multi-day events that span multiple weeks in the Month view by a "drag" action no longer makes the Web App unresponsive. In month view, when users clicked an appointment from the current or future date and closed the details screen using X icon, the older appointments disappeared. This issue no longer occurs. In environments using external authentication, the application redirected the users to a URL ending in /null. They saw a "400 Not Found" error if zimbraWebClientLogoutURL did not have a defined value in the server LDAP. Now the users redirect to the login page and can access the Inbox without editing the URL.
Modern Web App - Settings	Users can no longer specify invalid dates when configuring out of office response. The save button remains disabled until valid dates are specified.
Progressive Web App	When the user has set the Preview pane to Bottom of the scree, and tried to preview an email attachment, it resulted in an inconsistent user interface and blank email list page. The issue is fixed.
Modern Zimlets	Updated the Date Detection Zimlet. It will recognize a broad set of date strings in a message and replace them with a hyperlink to show the user's agenda for that day upon hover. If the user does not have the Calendar feature enabled, this Zimlet will be automatically disabled. Fixed an issue where activating a file zimlet (dropbox, google drive, onedrive) caused the Download All button on messages with multiple attachments, to disappear. Fixed an issue where saving an attachment to dropbox uploaded a broken file

Known Issues

Modern Web App - Settings

Accounts and Personas, in Settings ->Account -> "Accounts and Personas" list, are not sorted in alphabetical order of their names.

9.0.0 Patch 2 Packages

The package lineup for this release is:

Package Name                                   Version
zimbra-patch                                -> 9.0.0.1587553609.p2-2
zimbra-common-core-jar                      -> 9.0.0.1587480459-1
zimbra-zco                                  -> 9.0.0.1872.1587454207-1
zimbra-modern-ui                            -> 3.4.0.1587551935-1
zimbra-network-modules-ng                   -> 7.0.1.1588070473-1
zimbra-drive-ng                             -> 4.0.1.1587390189-1
zimbra-drive-modern                         -> 1.0.1.1587390189-1
zimbra-connect                              -> 2.0.1.1587390563-1
zimbra-connect-modern                       -> 1.0.1.1587390563-1
zimbra-zimlet-onedrive                      -> 3.0.1.1586888772-1
zimbra-zimlet-slack                         -> 3.0.1.1586888756-1
zimbra-zimlet-google-drive                  -> 3.0.1.1586888748-1
zimbra-zimlet-dropbox                       -> 3.0.1.1586889023-1
zimbra-zimlet-install-pwa                   -> 3.0.1.1587550967-1
zimbra-zimlet-set-default-client            -> 3.0.0.1587395315-1
zimbra-zimlet-date                          -> 3.2.0.1587130563-1
zimbra-zimlet-additional-signature-setting  -> 3.1.0.1587130467-1
zimbra-modern-zimlets                       -> 3.4.0.1587551935-1

Patch Installation

Please refer to the steps below to install 9.0.0 Patch 2 on Redhat and Ubuntu platforms:

Before Installing the Patch

Before installing the patch, consider the following:

• Patches are cumulative.
• A full backup should be performed before any patch is applied. There is no automated roll-back.
• Zimlet patches can include removing existing Zimlets and redeploying the patched Zimlet.
• Only files or Zimlets associated with installed packages will be installed from the patch.
• Switch to zimbra user before using ZCS CLI commands.
• Important! You cannot revert to the previous ZCS release after you upgrade to the patch.
• Important Note for ZCS Setup with Local ZCS repository: Customers who have set up local ZCS repository should first update the local repository by following instructions in wiki
• Please make note that, installing the zimbra-patch package only updates the Zimbra core packages.

Redhat

Installing Zimbra packages with system package upgrades

• As root, first clear the yum cache and check for updates so the server sees there is a new zimbra-patch package in the patch repository:

yum clean metadata
yum check-update

• Update available packages:

yum update

• Restart ZCS as zimbra user:

su - zimbra
zmcontrol restart

Installing Zimbra packages individually

• As root, first clear the yum cache and check for updates so the server finds new packages in the patch repository:

yum clean metadata
yum check-update

Install/Upgrade zimbra-patch on mailstore node

• As root, install the package:

yum install zimbra-patch

• Restart ZCS as zimbra user:

su - zimbra
zmcontrol restart

Install/Upgrade zimbra-network-modules-ng

• As root, install the package:

yum install zimbra-network-modules-ng

• Restart ZCS as zimbra user:

su - zimbra
zmcontrol restart

Install/Upgrade zimbra-drive-ng

• As root, install the package:

yum install zimbra-drive-ng

• Restart ZCS as zimbra user:

su - zimbra
zmcontrol restart

Install/Upgrade zimbra-connect

• As root, install the package:

yum install zimbra-connect

• Restart ZCS as zimbra user:

su - zimbra
zmcontrol restart

Install/Upgrade zimbra-zimlet-onedrive

• As root, install the package:

yum install zimbra-zimlet-onedrive

• Restart ZCS as zimbra user:

su - zimbra
zmcontrol restart

Install/Upgrade zimbra-zimlet-slack

• As root, install the package:

yum install zimbra-zimlet-slack

• Restart ZCS as zimbra user:

su - zimbra
zmcontrol restart

Install/Upgrade zimbra-zimlet-google-drive

• As root, install the package:

yum install zimbra-zimlet-google-drive

• Restart ZCS as zimbra user:

su - zimbra
zmcontrol restart

Install/Upgrade zimbra-zimlet-dropbox

• As root, install the package:

yum install zimbra-zimlet-dropbox

• Restart ZCS as zimbra user:

su - zimbra
zmcontrol restart

Ubuntu

Installing Zimbra packages with system package upgrades

• As root, check for updates so the server sees there is a new zimbra-patch package in the patch repository:

apt-get update

• Update available packages:

apt-get upgrade

OR

• Update all available packages plus any kernel updates:

apt-get dist-upgrade

• Restart ZCS as zimbra user:

su - zimbra
zmcontrol restart

Installing Zimbra packages individually

Installing zimbra packages individually

• As root, first clear the yum cache and check for updates so the server finds new packages in the patch repository:

apt-get update

Install/Upgrade zimbra-patch on mailstore node

• As root, install the package:

apt-get install zimbra-patch

• Restart ZCS as zimbra user:

su - zimbra
zmcontrol restart

Install/Upgrade zimbra-network-modules-ng

• As root, install the package:

apt-get install zimbra-network-modules-ng

• Restart ZCS as zimbra user:

su - zimbra
zmcontrol restart

Install/Upgrade zimbra-drive-ng

• As root, install the package:

apt-get install zimbra-drive-ng

• Restart ZCS as zimbra user:

su - zimbra
zmcontrol restart

Install/Upgrade zimbra-connect

• As root, install the package:

apt-get install zimbra-connect

• Restart ZCS as zimbra user:

su - zimbra
zmcontrol restart

Install/Upgrade zimbra-zimlet-onedrive

• As root, install the package:

apt-get install zimbra-zimlet-onedrive

• Restart ZCS as zimbra user:

su - zimbra
zmcontrol restart

Install/Upgrade zimbra-zimlet-slack

• As root, install the package:

apt-get install zimbra-zimlet-slack

• Restart ZCS as zimbra user:

su - zimbra
zmcontrol restart

Install/Upgrade zimbra-zimlet-google-drive

• As root, install the package:

apt-get install zimbra-zimlet-google-drive

• Restart ZCS as zimbra user:

su - zimbra
zmcontrol restart

Install/Upgrade zimbra-zimlet-dropbox

• As root, install the package:

apt-get install zimbra-zimlet-dropbox

• Restart ZCS as zimbra user:

su - zimbra
zmcontrol restart

Jira Summary

Jira Tickets fixed in 9.0.0 Patch 2

ZCS-8657	Backport ClientInfoRequest to Zimbra 9
ZBUG-1055	zmdiaglog does not capturing top, ps and netstat outputs on a non-mailbox server
ZCS-9156	Missing drive en_us translation file
ZCS-9155	Video issues in IM sessions with multiple attendees
ZCS-9056	Support Zimbra 9 Kepler Patch-1 and Patch-2
ZCS-8911	Add PATCH support in zm-oauth-social proxy
ZCOMT-2020	OLK 2019, OLK 2016,OLK 2013,OLK 2010 crashes after updating meeting time from the shared calendar
ZCOMT-2004	F/B scheduling window continues to show no information even after the connection is recovered.
ZCOMT-2002	O365 crashes while sending a meeting/emails from the mixed profile (ZCO is primary profile user)
ZCOMT-2001	ZCO does not show f/b information for an exchange user who has "Working Elsewhere" meetings.
ZCOMT-1392	Delete the Orphaned PST item
ZCOMT-1309	{OL2016} ZCO crashes during automation run against office 365, OLK 2016(c2r)
ZBUG-1526	After setting French language in Modern Web UI folder name are displayed in English.
ZBUG-1467	Unable to save attachment in Zimbra Drive (Error: Cannot create folder/file with unsupported name)
ZBUG-1466	File sharing is not working in Zimbra Connect.
ZBUG-1462	drag and drop doesn't work with drive v2.
ZBUG-1386	Encrypted email with SMIME attachment are exposed with ActiveSync protocol.
PREAPPS-4802	Kepler-9.0.0-Patch-2/Desktop-May-20/3.4.0 release regression and integration testing
PREAPPS-4778	Update Translations
PREAPPS-4767	Required/Optional pulldown in scheduler widget is not localized
PREAPPS-4735	Update translations
PREAPPS-4734	Icon elements get keyboard focus via Tab; they should not be in the TabIndex
PREAPPS-4725	Selecting all mails moves scroll bar to bottom
PREAPPS-4722	Links in Calendar Events + Email not Properly sanitized allowing XSS
PREAPPS-4720	Handle getway timeout/bad gateway errors properly in the app
PREAPPS-4716	Replace hard coded font sizes with less variables
PREAPPS-4710	CC field disappears automatically while reading a mail after 30-40 secs.
PREAPPS-4703	Log out appends "/null" to the end of the server URL; login at that point results in "Not Found"
PREAPPS-4687	zm-x-zimlet-date not detecting dates
PREAPPS-4686	GAL folder not visible when user's sharing feature is disabled
PREAPPS-4673	Modify Date zimlet to be disabled when Calendar feature is disabled.
PREAPPS-4666	Disable Calendar impact on mail/contacts vertical
PREAPPS-4654	Fix PWA app
PREAPPS-4651	Date and Signature zimlets to be shipped in Zimbra 9 package as default zimlets
PREAPPS-4642	Open attachment preview from search screen hides search result
PREAPPS-4639	Visual indicator for differentiating between one time and recurring events
PREAPPS-4623	Appointments older than particular date disappearing from calendar views and Details screen cannot be viewed
PREAPPS-4614	Regression: User quota showing wrong result in progress bar
PREAPPS-4606	Make Gravatar use client-configurable
PREAPPS-4605	User may pick a default "From" address to use for messages sent from their Primary account
PREAPPS-4602	GraphQL error 'upload not found' shows after attaching .ics file; draft mail in Drafts does not contain .ics file
PREAPPS-4587	Allow user to name a saved-search while creation
PREAPPS-4586	Show start and end time for OOO settings
PREAPPS-4565	Provide users the ability to Create a Persona
PREAPPS-4556	Translation : German translation of "Tags" is cluttered: Sometimes it's called "Tag", sometimes "Stichworte" and sometimes "Etikett"
PREAPPS-4554	In month view, creating 15 days event through drag make UI unresponsive
PREAPPS-4518	Update translations
PREAPPS-4496	Draft mail shows body content "undefined" when viewed first time after login or after client reset
PREAPPS-4486	Event sender (SENT-BY) is shown an invitation header when viewing an invitee's response email
PREAPPS-4474	Bottom Preview Pane | Opening attachment in preview pane breaks UI(Blank mail list)
PREAPPS-4439	Search no longer restricts search results to folder selected from dropdown
PREAPPS-4391	Incorrect dates can be saved in Out of Office
PREAPPS-4291	No visual feedback when large inline image is being pasted/Uploaded into compose window
PREAPPS-4290	Branding | Deploy strategy for Zimbra X
PREAPPS-4212	Move 'New Event' from message functionality to core product
PREAPPS-4063	Highlight search matches when previewing search results
PREAPPS-3977	Right-Click on an event in calendar opens browser's rt-click context menu
PREAPPS-3937	.ics attachments not shown even when message is not an invitation
PREAPPS-3934	Facilitate actions to accept or decline specific instances of recurring events
PREAPPS-3543	Invitation response buttons are misaligned in mobile view when viewing in mail pane
PREAPPS-3504	Creating new folder navigates to Inbox folder view
PREAPPS-3448	"Edit reply before sending" a response to a meeting invite
PREAPPS-3112	Send invitations to events in shared calendar on behalf of calendar owner
PREAPPS-2894	Localize time display on Show Availability dialog and Calendar views
PREAPPS-2732	Implement CTRL+Enter shortcut for Send mail action
PREAPPS-2277	System Folder Name Translation - Zimbra X UI