Zimbra: Actualizar a Zimbra Collaboration 8.8.15 Patch 6, mejoras, bugs resueltos y update de openssl

Saludos amigos, como breve recordatorio me gustaría comenzar mencionando dos aspectos importantes.

1. Zimbra ha movido ya Zimbra Collaboration 8.6.x fuera del Technical Guidance, ya desde Septiembre de 2018 no se lanzaba ningún nuevo parche ni se corregían bugs en esta versión.
2. Zimbra Collaboration 8.7.11 (la versión más robusta y sólida que Zimbra ha tenido) se queda sin General Support y entra en Technical Guidance, lo que significa que no veremos más bugs resueltos ni parches, una pena.
3. Zimbra Collaboration 8.8.12 se queda sin General Support y entra en Technical Guidance, lo que significa que no veremos más bugs resueltos ni parches.

Para estas versiones, mi recomendación es usar Zextras para migrar desde éstas últimas a Zimbra Collaboration 8.8.15 con el último parche. Ya os lo contaré en un blog, pero por ahora aquí las instrucciones en Inglés.

Zimbra Collaboration 8.8.15 Patch 6

Hace un tiempo que tengo en mi laboratorio Zimbra Collaboration 8.8.15, el cuál intento mantener actualizado al máximo, y hace apenas unos días Zimbra lanzaba un nuevo parche. Os dejo aquí las Release Notes de ésta versión.

Novedades en Zimbra Collaboration 8.8.15 Patch 6

ZCS	Zimbra Classic now has an updated OpenSSL version (OpenSSL 1.0.2t-fips).
ZCO	Documentation has been updated to reflect currently supported platforms. Note that Windows 7 is officially End-of-Life as of January 2020, so ZCO support on that OS has ended as well.
ZCO	When creating server rules using Zimbra Connector for Outlook, users can now have the options – “Delete It” and “Delete permanently” – for emails matching the defined criteria.
ZCO	Earlier when creating rules, selecting a condition, and moving to the next screen, users sometimes encountered errors. This issue is now fixed.
Zimbra Docs	Documentation has been updated to reflect currently supported platforms. Note that Windows 7 is officially End-of-Life as of January 2020, so is no longer supported by Zimbra.

Bugs resueltos en Zimbra Collaboration 8.8.15 Patch 6

ZCS	Users were unable to collect logs using `zmdialog` after updating to 8.8.15 Patch5 and saw an openJDK error. This issue is now fixed.
ZCS	Changes introduced with iOS 13 have modified the behavior of IMAP sync from Apple devices. Those devices now sync all folders continuously, which impacts the mailbox process performance.
ZWC	Fixed a bug in the Admin Web Console to ensure that Class-of-Service Retention Policy changes are properly applied to the selected COS. Previously, changing these values for successive COSes would cause the first selected COS to be updated with changes intended for the later COS.
ZWC	With a Japanese language preference set, the expected Firstname Lastname order was not preserved when contacts were added from .vcf attachments that were forwarded as email attachments. Such contacts now have their “FileAs” option set to ensure the surname appears first.
ZWC	When users deleted or renamed a contact group, the contact list view did not update to reflect the changes. This issue is now fixed.
ZCO	Ensured that shares that have been previously mounted will not be remounted when the owner’s account has an alias.
ZCO	Contact group members of groups imported from PST files would not be populated because the referenced contacts were not known to Outlook. It that situation, such members are now imported as inline contacts and will sync to the Zimbra server.
ZCO	Contact group members that were added to a group by selecting a contact’s _alternate_ email address would not sync to the Zimbra server. Such members are now converted to inline group members upon synchronization.
Zimbra Connect	Contact auto-complete had used GAL contacts only, requiring full email address to be entered to initiate conversations with other contacts via the “Speak to your friends” textbox. All the users’ contacts are now used.
Zimbra Docs	The current cursor position in a document being edited is now retained when the user navigates to other tabs and then returns.

Incidencias conocidas en Zimbra Collaboration 8.8.15 Patch 6

Zimbra Connect

Beginning in 8.8.15, Chat History is ID-based instead of email-based: if a mailbox is deleted and then a new mailbox with the same email address is created, the history of the old mailbox will not be available to the new mailbox.

Aplicar el último parche para Zimbra Collaboration 8.8.15

Antes de hacer nada, os recomiendo tener un backup usando Zextras, y por supuesto un backup del servidor entero, bien sea mediante Veeam Agent for Linux, o usando Veeam si tenemos Zimbra como máquina virtual.

Los paquetes, una vez actualizado deben quedaros en las siguientes versiones:

FOSS

Package Name                       Version
zimbra-patch                  -> 8.8.15.1578402266.p6-1
zimbra-common-core-jar        -> 8.8.15.1577331207-1
zimbra-common-core-libs       -> 8.8.15.1574853769-1
zimbra-mbox-store-libs        -> 8.8.15.1574853769-1
zimbra-mbox-war               -> 8.8.15.1575620896-1
zimbra-mbox-admin-console-war -> 8.8.15.1576145915-1 
zimbra-mbox-webclient-war     -> 8.8.15.1576146019-1
zimbra-drive                  -> 1.0.13.1574269069-1
zimbra-core-components        -> 2.0.1-1zimbra8.8b1
zimbra-openjdk                -> 13.0.1-1zimbra8.8b1
zimbra-openssl                -> 1.0.2t-1zimbra8.7b2

NE

Package Name                       Version
zimbra-patch                  -> 8.8.15.1578402266.p6-2
zimbra-mbox-ews-service       -> 8.8.15.1575894778-1
zimbra-drive-ng               -> 3.0.2.1570176838-1
zimbra-network-modules-ng     -> 6.0.7.1576856224-1
zimbra-docs                   -> 3.0.3.1574937069-1
zimbra-connect                -> 1.0.6.1576857553-1
zimbra-zco                    -> 8.8.15.1864.1577707082-1

Vamos a proceder a realizar el update usando el administrador de paquetes, en mi caso Ubuntu, como root:

apt-get update
apt-get upgrade

Veremos los siguientes paquetes para actualizar:

Reading package lists... Done
Building dependency tree       
Reading state information... Done
Calculating upgrade... Done
The following packages were automatically installed and are no longer required:
  linux-headers-4.15.0-66 linux-headers-4.15.0-66-generic linux-headers-4.15.0-70 linux-headers-4.15.0-70-generic linux-image-4.15.0-66-generic linux-image-4.15.0-70-generic
  linux-modules-4.15.0-66-generic linux-modules-4.15.0-70-generic linux-modules-extra-4.15.0-66-generic linux-modules-extra-4.15.0-70-generic
Use 'sudo apt autoremove' to remove them.
The following packages will be upgraded:
  libdrm-common libdrm2 telegraf zimbra-common-core-jar zimbra-mbox-admin-console-war zimbra-mbox-webclient-war zimbra-openssl zimbra-openssl-lib zimbra-patch
9 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 67.5 MB of archives.
After this operation, 787 kB of additional disk space will be used.
Do you want to continue? [Y/n]

Además de estos paquetes, en caso de que no lo tuvieramos ya, tendremos que lanzar el siguiente comando si queremos instalar el nuevo paquete de openssl de Zimbra:

apt-get install zimbra-openssl

Si os aparece que está todo instalado y no hay nada nuevo, perfecto, si no, simplemente aceptar e instalar el paquete.

Ya como root, podremos lanzar el siguiente comando, que básicamente se loguea como usuario zimbra y lanza el arrancado de los servicios:

su - zimbra -c 'zmcontrol restart'

Eso es todo amigos. Es una lástima ver productos tan maduros y que están en tantos sitios, como son Zimbra Collaboration 8.6 o Zimbra Collaboration 8.7, quedarse sin soporte, pero supongo que es la realidad de cada producto de software.

UPDATE – Error al cargar la interfaz Mobile y HTML

Si has actualizado recientemente a este Patch 6, seguramente tengas problemas con la interfaz Mobile y HTML, para solucionarlo, por favor realiza los siguientes pasos una vez has aplicado el parche:

su - zimbra
zmcontrol stop
cd /opt/zimbra/jetty/
mv work old-work
mkdir work
zmcontrol start

Con esto ya todo funciona de manera correcta, gracias a Imanudin.