Patch 34 for ZIMBRA 9 has been released regarding global security

Posted by: @dominix

↑

Hi everyone, 

Synacor has released P34 for Zimbra 9. made a "apt dist-upgrade" test on an test Z9 OSE by zextras  but LDAP not starting anymore after upgrade, so I returned to previous snapshot.

Did zextras plan to integrate this patch in planned update (planned for july I guess ? )

regards.

https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P34

Hi @dominix,

Zextras originally planned to implement the latest available patch in July and release it at the end of this month, but due to our focus on releasing Carbonio CE, it may be delayed until August.

Hello @arman can you at least analyse why LDAP won't start so we might fix the issue by ourself?

@john_doe Unfortunately the team is too busy at the time but we will try our best. I hope the release will be ready soon as well to resolve this issue altogether.

@arman Have you anyhow put some "Zextras magic" within the Zimbra packages you provide?

I tried to install another precompiled Zimbra version from here ( https://techfiles.online/zimbra/) but this was also not successful as I had some issues with starting zmmailboxd and imap

@john_doe                    Sure, we will try our best 🙂

@arman Of course you do as you always did but it still does not answer my question if you provide any additional stuff within the precompiled packages.

@john_doe Sorry, I didn't get what you mean at first. No, nothing specific, we usually just compile the code including the latest patch available.

@arman It's quiet interessting why it then fails when installing regular updates why `apt`.

If your developers need any tester feel free to get back to me.

@john_doe                   Sure. Thank you very much 🙂 we appreciate any help.

I have compiled builds with patch 34 for RHEL8/Ubuntu 20.04.
You can download here: https://drive.janskolnik.net/s/cyjYjzkHT9nqGgQ

@john_doe So... I figured there is some sort of issue with permission to run zmslapd as user zimbra and I don't know why yet.

What I did was a workaround giving it sudo permissions to it to run and it worked. If you're in the hurry do this:

1 - vi /etc/sudoers.d/02_zimbra-core

add this lines:

%zimbra ALL=NOPASSWD:/opt/zimbra/common/libexec/slapd
%zimbra ALL=NOPASSWD:/opt/zimbra/libexec/zmslapd
%zimbra ALL=NOPASSWD:/bin/kill

2 - vi /opt/zimbra/bin/ldap

add "sudo" in fron of every line that have "zmslapd" and "kill"

3 - zmcontrol restart

it works

UPDATE: running

/opt/zimbra/libexec/zmfixperms

 fixed it =)

@anahuac 

Thank you for sharing. So basically you did apt update and fired

/opt/zimbra/libexec/zmfixperms

thereafter?