[Users] Zimbra 8.8.8 Patch 1 release - Seems to break FOSS only servers

Barry de Graaff info at barrydegraaff.tk
Sat Apr 14 09:42:54 CEST 2018


Yeah that works well, and it is also in the release notes... so my bad!

Kind regards, 

Barry de Graaff
Zeta Alliance 
Co-founder & Developer
zetalliance.org | github.com/Zimbra-Community

+31 617 220 227 | skype: barrydegraaff.tk
Fingerprint: 97f4694a1d9aedad012533db725ddd156d36a2d0

----- Original Message -----
From: "Tony Publiski" <tonster at tonster.com>
To: "Barry en Katie de Graaff" <info at barrydegraaff.tk>, "Malte S. Stretz" <mss at msquadrat.de>
Cc: "Phil Pearl" <ppearl at zimbra.com>, users at lists.zetalliance.org
Sent: Friday, April 13, 2018 7:36:54 PM
Subject: Re[3]: [Users] Zimbra 8.8.8 Patch 1 release - Seems to break FOSS only servers

Hello again!

Here's the response I got from engineering toda:

I looked at installation steps. It looks like, they are using yum update 
-y to install patch packages.

Instead, they should use below commands to install the patch:
yum --disablerepo=* --enablerepo=zimbra-888-patch clean metadata
yum check-update --disablerepo=* --enablerepo=zimbra-888-patch --noplugins
yum install zimbra-patch

Let me know if this helps!

Tony

------ Original Message ------
From: "Tony Publiski" <tonster at tonster.com>
To: "Barry de Graaff" <info at barrydegraaff.tk>; "Malte S. Stretz" 
<mss at msquadrat.de>
Cc: "Phil Pearl" <ppearl at zimbra.com>; users at lists.zetalliance.org
Sent: 4/13/2018 9:53:01 AM
Subject: Re[2]: [Users] Zimbra 8.8.8 Patch 1 release - Seems to break 
FOSS only servers

>Hi Barry,
>
>Nice find. I'll take a look and see what engineering has to say.
>
>Tony
>
>------ Original Message ------
>From: "Barry de Graaff" <info at barrydegraaff.tk>
>To: "Malte S. Stretz" <mss at msquadrat.de>
>Cc: "Tony Publiski" <tonster at tonster.com>; "Phil Pearl" 
><ppearl at zimbra.com>; users at lists.zetalliance.org
>Sent: 4/13/2018 4:41:18 AM
>Subject: Re: [Users] Zimbra 8.8.8 Patch 1 release - Seems to break FOSS 
>only servers
>
>>No this was always FOSS only, not Zextras no Talk none of that.
>>
>>Kind regards,
>>
>>Barry de Graaff
>>Zeta Alliance
>>Co-founder & Developer
>>zetalliance.org | github.com/Zimbra-Community
>>
>>+31 617 220 227 | skype: barrydegraaff.tk
>>Fingerprint: 97f4694a1d9aedad012533db725ddd156d36a2d0
>>
>>----- Original Message -----
>>From: "Malte S. Stretz" <mss at msquadrat.de>
>>To: "Barry en Katie de Graaff" <info at barrydegraaff.tk>
>>Cc: "Tony Publiski" <tonster at tonster.com>, "Phil Pearl" 
>><ppearl at zimbra.com>, users at lists.zetalliance.org
>>Sent: Friday, April 13, 2018 10:35:12 AM
>>Subject: Re: [Users] Zimbra 8.8.8 Patch 1 release - Seems to break 
>>FOSS only servers
>>
>>Hi Barry,
>>
>>
>>I always have trouble reading the dependency output of yum but to me 
>>it
>>looks like zimbra-network-modules-ng is pulled in by zimbra-talk. 
>>Which
>>isn't supported for FOSS and shouldn't appear in the dependency tree 
>>at
>>all. Especially both zimbra-chat and zimbra-talk shouldn't appear at 
>>the
>>same time.
>>
>>
>>Did you by any chance downgrade this system from NE to FOSS at
>>somepoint? Since this sounds a bit like the issue I had with such a
>>downgrade on Ubuntu and for which I filed
>>https://bugzilla.zimbra.com/show_bug.cgi?id=108911
>>
>>
>>Cheers,
>>
>>Malte
>>
>>
>>
>>On 13.04.2018 09:13, Barry de Graaff wrote:
>>>Hello Tony and Phil,
>>>
>>>It seems the patch 8.8.8 p1 is distributed via the repos.
>>>
>>>It does NOT seem to work if one runs a FOSS only server (aka without
>>>Zextras).
>>>
>>>I am addressing Phil as there is a CVE 5.8 Major security fix in the
>>>patch.
>>>
>>>[root at zimbra1 ~]# yum update -y
>>>Loaded plugins: fastestmirror, langpacks
>>>Loading mirror speeds from cached hostfile
>>>* base: centos.mirror.triple-it.nl
>>>* epel: mirror.1000mbps.com
>>>* extras: mirror.denit.net
>>>* updates: mirror.prolocation.net
>>>Resolving Dependencies
>>>--> Running transaction check
>>>---> Package zimbra-chat.x86_64 0:1.0.13.1521626727-2.r7 will be 
>>>obsoleted
>>>---> Package zimbra-common-core-jar.x86_64 0:1.0.0.1521707697-1.r7
>>>will be updated
>>>---> Package zimbra-common-core-jar.x86_64 0:1.0.0.1522952748-1.r7
>>>will be an update
>>>---> Package zimbra-mbox-conf.x86_64 0:1.0.0.1521707697-1.r7 will be
>>>updated
>>>---> Package zimbra-mbox-conf.x86_64 0:1.0.0.1522952748-1.r7 will be
>>>an update
>>>---> Package zimbra-mbox-service.x86_64 0:1.0.0.1521707697-1.r7 will
>>>be updated
>>>---> Package zimbra-mbox-service.x86_64 0:1.0.0.1522952748-1.r7 will
>>>be an update
>>>---> Package zimbra-mbox-war.x86_64 0:1.0.0.1521707697-1.r7 will be
>>>updated
>>>---> Package zimbra-mbox-war.x86_64 0:1.0.0.1522952748-1.r7 will be 
>>>an
>>>update
>>>---> Package zimbra-mbox-webclient-war.x86_64 0:1.0.0.1521723166-1.r7
>>>will be updated
>>>---> Package zimbra-mbox-webclient-war.x86_64 0:1.0.0.1523095946-1.r7
>>>will be an update
>>>---> Package zimbra-talk.x86_64 0:1.0.3.1523266296-1.r7 will be 
>>>obsoleting
>>>--> Processing Dependency: zimbra-network-modules-ng >= 1.0.14 for
>>>package: zimbra-talk-1.0.3.1523266296-1.r7.x86_64
>>>--> Running transaction check
>>>---> Package zimbra-network-modules-ng.x86_64 
>>>0:1.0.14.1522918190-1.r7
>>>will be installed
>>>--> Processing Dependency: zimbra-network-store >= 8.8.8 for package:
>>>zimbra-network-modules-ng-1.0.14.1522918190-1.r7.x86_64
>>>--> Finished Dependency Resolution
>>>*Error: Package:
>>>zimbra-network-modules-ng-1.0.14.1522918190-1.r7.x86_64
>>>(zimbra-888-patch)*
>>>*           Requires: zimbra-network-store >= 8.8.8*
>>>You could try using --skip-broken to work around the problem
>>>You could try running: rpm -Va --nofiles --nodigest
>>>
>>>[root at zimbra1 ~]# su zimbra
>>>[zimbra at zimbra1 root]$ zmcontrol -v
>>>Release 8.8.8_GA_2009.RHEL7_64_20180322150747 RHEL7_64 FOSS edition.
>>>
>>>This is a FOSS only server, and should not fetch
>>>*zimbra-network-modules-ng.*
>>>
>>>
>>>Funny thing is, that on a FOSS server with Zextras installed, it does
>>>work:
>>>[root at mail ~]# yum update -y
>>>Loaded plugins: fastestmirror
>>>Loading mirror speeds from cached hostfile
>>>* base: mirrors.centos.webair.com
>>>* epel: mirror.math.princeton.edu
>>>* extras: mirrors.centos.webair.com
>>>* updates: mirrors.tripadvisor.com
>>>Resolving Dependencies
>>>--> Running transaction check
>>>---> Package zimbra-common-core-jar.x86_64 0:1.0.0.1521707697-1.r7
>>>will be updated
>>>---> Package zimbra-common-core-jar.x86_64 0:1.0.0.1522952748-1.r7
>>>will be an update
>>>---> Package zimbra-mbox-conf.x86_64 0:1.0.0.1521707697-1.r7 will be
>>>updated
>>>---> Package zimbra-mbox-conf.x86_64 0:1.0.0.1522952748-1.r7 will be
>>>an update
>>>---> Package zimbra-mbox-service.x86_64 0:1.0.0.1521707697-1.r7 will
>>>be updated
>>>---> Package zimbra-mbox-service.x86_64 0:1.0.0.1522952748-1.r7 will
>>>be an update
>>>---> Package zimbra-mbox-war.x86_64 0:1.0.0.1521707697-1.r7 will be
>>>updated
>>>---> Package zimbra-mbox-war.x86_64 0:1.0.0.1522952748-1.r7 will be 
>>>an
>>>update
>>>---> Package zimbra-mbox-webclient-war.x86_64 0:1.0.0.1521723166-1.r7
>>>will be updated
>>>---> Package zimbra-mbox-webclient-war.x86_64 0:1.0.0.1523095946-1.r7
>>>will be an update
>>>--> Finished Dependency Resolution
>>>
>>>Dependencies Resolved
>>>
>>>================================================================================
>>>Package                   Arch   Version     Repository        Size
>>>================================================================================
>>>Updating:
>>>zimbra-common-core-jar    x86_64 1.0.0.1522952748-1.r7
>>>zimbra-888-patch  13 M
>>>zimbra-mbox-conf          x86_64 1.0.0.1522952748-1.r7
>>>zimbra-888-patch  35 k
>>>zimbra-mbox-service       x86_64 1.0.0.1522952748-1.r7
>>>zimbra-888-patch 3.7 k
>>>zimbra-mbox-war           x86_64 1.0.0.1522952748-1.r7
>>>zimbra-888-patch  21 M
>>>zimbra-mbox-webclient-war x86_64 1.0.0.1523095946-1.r7
>>>zimbra-888-patch  24 M
>>>
>>>Transaction Summary
>>>================================================================================
>>>Upgrade  5 Packages
>>>
>>>Total download size: 59 M
>>>Downloading packages:
>>>Delta RPMs disabled because /usr/bin/applydeltarpm not installed.
>>>(1/5): zimbra-mbox-conf-1.0.0.1522952748-1.r7.x86_64.rpm   |  35 kB
>>>00:00
>>>(2/5): zimbra-mbox-service-1.0.0.1522952748-1.r7.x86_64.rp | 3.7 kB
>>>00:00
>>>(3/5): zimbra-common-core-jar-1.0.0.1522952748-1.r7.x86_64 |  13 MB
>>>00:01
>>>(4/5): zimbra-mbox-war-1.0.0.1522952748-1.r7.x86_64.rpm    |  21 MB
>>>00:02
>>>(5/5): zimbra-mbox-webclient-war-1.0.0.1523095946-1.r7.x86 |  24 MB
>>>00:02
>>>--------------------------------------------------------------------------------
>>>Total  13 MB/s |  59 MB  00:04
>>>Running transaction check
>>>Running transaction test
>>>Transaction test succeeded
>>>Running transaction
>>>Warning: RPMDB altered outside of yum.
>>>  Updating   : zimbra-common-core-jar-1.0.0.1522952748-1.r7.x86_64  
>>>1/10
>>>  Updating   : zimbra-mbox-war-1.0.0.1522952748-1.r7.x86_64   2/10
>>>  Updating   : zimbra-mbox-conf-1.0.0.1522952748-1.r7.x86_64  3/10
>>>  Updating   : zimbra-mbox-service-1.0.0.1522952748-1.r7.x86_64   4/10
>>>  Updating   : zimbra-mbox-webclient-war-1.0.0.1523095946-1.r7.x86_64
>>>  5/10
>>>  Cleanup    : zimbra-mbox-service-1.0.0.1521707697-1.r7.x86_64   6/10
>>>  Cleanup    : zimbra-mbox-war-1.0.0.1521707697-1.r7.x86_64   7/10
>>>  Cleanup    : zimbra-mbox-conf-1.0.0.1521707697-1.r7.x86_64  8/10
>>>  Cleanup    : zimbra-common-core-jar-1.0.0.1521707697-1.r7.x86_64  
>>>9/10
>>>  Cleanup    : zimbra-mbox-webclient-war-1.0.0.1521723166-1.r7.x86_64
>>>10/10
>>>  Verifying  : zimbra-mbox-conf-1.0.0.1522952748-1.r7.x86_64  1/10
>>>  Verifying  : zimbra-mbox-war-1.0.0.1522952748-1.r7.x86_64   2/10
>>>  Verifying  : zimbra-mbox-service-1.0.0.1522952748-1.r7.x86_64   3/10
>>>  Verifying  : zimbra-mbox-webclient-war-1.0.0.1523095946-1.r7.x86_64
>>>  4/10
>>>  Verifying  : zimbra-common-core-jar-1.0.0.1522952748-1.r7.x86_64  
>>>5/10
>>>  Verifying  : zimbra-mbox-webclient-war-1.0.0.1521723166-1.r7.x86_64
>>>  6/10
>>>  Verifying  : zimbra-mbox-war-1.0.0.1521707697-1.r7.x86_64   7/10
>>>  Verifying  : zimbra-mbox-service-1.0.0.1521707697-1.r7.x86_64   8/10
>>>  Verifying  : zimbra-common-core-jar-1.0.0.1521707697-1.r7.x86_64  
>>>9/10
>>>  Verifying  : zimbra-mbox-conf-1.0.0.1521707697-1.r7.x86_64 10/10
>>>
>>>Updated:
>>>  zimbra-common-core-jar.x86_64 0:1.0.0.1522952748-1.r7
>>>  zimbra-mbox-conf.x86_64 0:1.0.0.1522952748-1.r7
>>>  zimbra-mbox-service.x86_64 0:1.0.0.1522952748-1.r7
>>>  zimbra-mbox-war.x86_64 0:1.0.0.1522952748-1.r7
>>>  zimbra-mbox-webclient-war.x86_64 0:1.0.0.1523095946-1.r7
>>>
>>>Complete!
>>>[root at mail ~]# su zimbra
>>>[zimbra at mail root]$ zmcontrol restart
>>>
>>>Good thing it's Friday!
>>>
>>>Kind regards,
>>>
>>>Barry de Graaff
>>>Zeta Alliance
>>>Co-founder & Developer
>>>zetalliance.org | github.com/Zimbra-Community
>>>
>>>+31 617 220 227 | skype: barrydegraaff.tk
>>>Fingerprint: 97f4694a1d9aedad012533db725ddd156d36a2d0
>>>
>>>------------------------------------------------------------------------
>>>*From: *"L Mark Stone" <lmstone at lmstone.com>
>>>*To: *"Randy Leiker" <randy at skywaynetworks.com>,
>>>users at lists.zetalliance.org, "Tony Publiski" <tonster at tonster.com>
>>>*Sent: *Friday, April 13, 2018 2:03:48 AM
>>>*Subject: *Re: [Users] Zimbra 8.8.8 Patch 1 release
>>>
>>>On a single Zimbra 8.8.8 server, a number of the Zimbra packages 
>>>today
>>>were given updates that I installed prior to installing the patch, 
>>>FWIW.
>>>
>>>
>>>Not sure how/if they are connected?
>>>
>>>
>>>    Start-Date: 2018-04-1218:40:46
>>>
>>>    Commandline: apt-get dist-upgrade
>>>
>>>    Upgrade: zimbra-mbox-service:amd64 (1.0.0.1521707697-1.u16,
>>>    1.0.0.1522952748-1.u16), plymouth-theme-ubuntu-text:amd64
>>>    (0.9.2-3ubuntu13.3, 0.9.2-3ubuntu13.4), zimbra-mbox-conf:amd64
>>>    (1.0.0.1521707697-1.u16, 1.0.0.1522952748-1.u16),
>>>    libplymouth4:amd64 (0.9.2-3ubuntu13.3, 0.9.2-3ubuntu13.4),
>>>    apport:amd64 (2.20.1-0ubuntu2.15, 2.20.1-0ubuntu2.16),
>>>    zimbra-talk:amd64 (1.0.2.1521642559-1.u16,
>>>    1.0.3.1523266296-1.u16), python3-apport:amd64 (2.20.1-0ubuntu2.15,
>>>    2.20.1-0ubuntu2.16), zimbra-mbox-war:amd64
>>>    (1.0.0.1521707697-1.u16, 1.0.0.1522952748-1.u16), plymouth:amd64
>>>    (0.9.2-3ubuntu13.3, 0.9.2-3ubuntu13.4),
>>>    zimbra-common-core-jar:amd64 (1.0.0.1521707697-1.u16,
>>>    1.0.0.1522952748-1.u16), zimbra-network-modules-ng:amd64
>>>    (1.0.13+1521603981-1.u16, 1.0.14.1522918190-1.u16),
>>>    python3-problem-report:amd64 (2.20.1-0ubuntu2.15,
>>>    2.20.1-0ubuntu2.16), zimbra-mbox-webclient-war:amd64
>>>    (1.0.0.1521723166-1.u16, 1.0.0.1523095946-1.u16)
>>>
>>>    End-Date: 2018-04-1218:41:17
>>>
>>>
>>>    Start-Date: 2018-04-1218:44:25
>>>
>>>    Commandline: apt-get install zimbra-patch
>>>
>>>    Install: zimbra-patch:amd64 (8.8.8.1.1522961836-1.u16)
>>>
>>>    End-Date: 2018-04-1218:44:32
>>>
>>>
>>>
>>>*_________________________________________________*
>>>
>>>*Another Message From...   L. Mark Stone*
>>>
>>>
>>>
>>>
>>>
>>>------------------------------------------------------------------------
>>>*From:* Users <users-bounces at lists.zetalliance.org> on behalf of Tony
>>>Publiski <tonster at tonster.com>
>>>*Sent:* Thursday, April 12, 2018 7:09 PM
>>>*To:* Randy Leiker; users at lists.zetalliance.org
>>>*Subject:* Re: [Users] Zimbra 8.8.8 Patch 1 release
>>>I haven't actually looked at what's fixed in this patch, however
>>>*most* of the time you don't need to ever patch anything but the 
>>>store
>>>server, so really I wouldn't even both with the other nodes. Yes, the
>>>zimbra-common-core-jar package is used by zmprov, and thus exists on
>>>all nodes, however it's almost certain that nothing patched affects
>>>the non-mailbox server nodes. The former patch would, of course, run
>>>on all nodes, but only actually copied files based on what services
>>>were installed, and I can't remember a patch I was involved in
>>>actually patching anything on non-store nodes.
>>>
>>>Tony
>>>
>>>------ Original Message ------
>>>From: "Randy Leiker" <randy at skywaynetworks.com
>>><mailto:randy at skywaynetworks.com>>
>>>To: users at lists.zetalliance.org <mailto:users at lists.zetalliance.org>
>>>Sent: 4/12/2018 7:03:31 PM
>>>Subject: [Users] Zimbra 8.8.8 Patch 1 release
>>>
>>>    Hi Everyone,
>>>
>>>    Today Zimbra 8.8.8 Patch 1 was released as GA:
>>>https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.8/P1
>>>
>>>    One of the bug fixes included (35115) helps with the Zimbra High
>>>    Availability open source project I've been working on developing.
>>>     I'll be publishing the initial reference designs for that project
>>>    very soon on its own web site.  In the meantime, I deployed 8.8.8
>>>    patch 1 to begin testing in my lab environment which is running
>>>    CentOS 7, with ZCS 8.8.8.  The install instructions as written in
>>>    the release notes for Red Hat/CentOS servers
>>>    
>>>(https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.8/P1#Install_the_Patch)
>>>    work fine if you're running a single server install of ZCS.  But,
>>>    if you're running a multi-node install of ZCS, the patch install
>>>    instructions in the release notes are inaccurate.
>>>
>>>    In my lab environment, I have the following ZCS nodes provisioned:
>>>
>>>      * 2 x LDAP MMR nodes
>>>      * 2 x MTA nodes
>>>      * 2 x Proxy nodes
>>>      * 2 x Mailbox nodes
>>>
>>>    If you attempt to follow the install instructions for the patch
>>>    with a similar ZCS multi-node environment as noted above, you'll
>>>    see a dependency failure in Yum that will prevent the patch from
>>>    installing:
>>>
>>>    Error: Package: zimbra-patch-8.8.8.1.1522961836-1.r7.x86_64
>>>    (zimbra-888-patch)
>>>               Requires: zimbra-store >= 8.8.8
>>>     You could try using --skip-broken to work around the problem
>>>     You could try running: rpm -Va --nofiles --nodigest
>>>
>>>    This occurs because the zimbra-store package isn't installed on
>>>    all of the ZCS nodes.  Instead, what you'll need to do is on your
>>>    LDAP, MTA, and Proxy nodes, or essentially any ZCS node where the
>>>    zimbra-store package is NOT installed, simply run these commands:
>>>
>>>      * As the root user:
>>>          o yum upgrade (upgrades the zimbra-common-core-jar package)
>>>      * As the zimbra user:
>>>          o zmcontrol restart
>>>
>>>    Then, on your ZCS mailbox nodes (where the zimbra-store package is
>>>    installed), follow the install instructions as written in the
>>>    8.8.8 Patch 1 release notes.
>>>
>>>    When you get to the section in the release notes that advises 
>>>running:
>>>
>>>      * yum install zimbra-network-modules-ng
>>>      * yum install zimbra-chat  OR    yum install zimbra-talk
>>>
>>>    If you've already upgraded to 8.8.8, which would of course be the
>>>    case if you're trying to install patch 1, the 8.8.8 install
>>>    process uninstalls the zimbra-chat package & replaces it with
>>>    zimbra-talk, so you only need to run:
>>>
>>>      * As the root user:
>>>          o yum install zimbra-network-modules-ng
>>>          o yum install zimbra-talk
>>>      * As the zimbra user:
>>>          o zmmailboxdctl restart
>>>
>>>    Otherwise, all of the ZCS services appeared to start successfully
>>>    following the install of Patch 1. I wasn't able to test it within
>>>    my Zimbra lab environment, but I suspect the Ubuntu install
>>>    instructions in the release notes need a similar clarification for
>>>    multi-node ZCS installs.
>>>
>>>
>>>    Randy Leiker (randy at skywaynetworks.com
>>>    <mailto:randy at skywaynetworks.com> )
>>>    Skyway Networks, LLC
>>>    1.800.538.5334 / 913.663.3900 Ext. 100
>>>https://www.skywaynetworks.com <http://www.skywaynetworks.com>
>>>
>>>




More information about the Users mailing list