Zimbra Collaboration 8.5.1 and 8.0.9 are now GA, with important Security Updates

Official Zimbra news, events, releases, and updates.
User avatar
jorgedlcruz
Zimbra Alumni
Zimbra Alumni
Posts: 2773
Joined: Thu May 22, 2014 4:47 pm

Zimbra Collaboration 8.5.1 and 8.0.9 are now GA, with important Security Updates

Postby jorgedlcruz » Wed Nov 05, 2014 12:02 pm


Hi Zimbra Community, today is an important day as the 8.5.1 and 8.0.9 security releases are now public.


These two updates contain the patches for multiple security issues, (CVE-2014-3513), (CVE-2014-3567) and (CVE-2014-3568) are now fixed, and Zimbra Collaboration now uses the OpenSSL version 1.0.1j in all components.


Additionally, in both versions Zimbra fixed Bug 96145, which is related to the recent Moscow and Saint Petersburg time zone change. Russia was in the same time zone during the past years by order of the Government, but this year our customers and users in Russia again change the time zone, from +4 hours to +3 hours. Zimbra Collaboration now supports this new Russia time zone.


The ZCS 8.5.1 and 8.0.9 downloads (tgz and md5) and Release Notes are available here:



Don’t miss the rest of the fixed bugs, every of them are important:


8.5.1 – Bug List resolved



  • 96008 – Upgrade to OpenSSL 1.0.1j in all Zimbra Collaboration components, fixing a critical security issue with Dos vulnerability

  • 95237 – Zimbra Disclaimer/Signature Option per Domain does not work.

  • 95461 – RHEL rpm packaging sets /opt/zimbra/conf files as executable

  • 96145 – Moscow timezone change

  • 94725 – Update timezones.ics to tzdata2014i.tar.gz

  • 96084 – Logrotate Cron error after update to 8.0.8

  • 96120 – ZCS open source license update for 8.5.1 GA

  • 96195 – Upgrade step for migrating global disclaimers to domain level is broken


8.0.9 – Bug List resolved



  • 96008 – Upgrade to OpenSSL 1.0.1j in all Zimbra Collaboration components, fixing a critical security issue with Dos vulnerability

  • 96145 – Moscow timezone change

  • 94725 – Update timezones.ics to tzdata2014i.tar.gz

  • 96084 – Logrotate Cron error after update to 8.0.8

  • 96113 – ZCS open source license update for 8.0.9 GA


Please let us know if you have any questions or issues.


Security Blog - http://community.zimbra.com/support/security/b/weblog/archive/2014/11/06/zimbra-collaboration-updates-8-0-9-amp-8-5-1


Blog article - http://community.zimbra.com/zblogs/b/teamblog/archive/2014/11/06/zimbra-collaboration-updates-8-0-9-amp-8-5-1



Jorge de la Cruz https://jorgedelacruz.es
Systems Engineer at Veeam Software https://www.veeam.com/
fnoopdogg
Posts: 9
Joined: Wed Oct 29, 2014 3:05 am

Zimbra Collaboration 8.5.1 and 8.0.9 are now GA, with important Security Updates

Postby fnoopdogg » Thu Nov 06, 2014 1:50 am

The release graphic above says 'inlcuded' :)
User avatar
jorgedlcruz
Zimbra Alumni
Zimbra Alumni
Posts: 2773
Joined: Thu May 22, 2014 4:47 pm

Zimbra Collaboration 8.5.1 and 8.0.9 are now GA, with important Security Updates

Postby jorgedlcruz » Thu Nov 06, 2014 2:02 am

Fixed, thank you :)
Jorge de la Cruz https://jorgedelacruz.es
Systems Engineer at Veeam Software https://www.veeam.com/
davidkillingsworth
Outstanding Member
Outstanding Member
Posts: 203
Joined: Sat Sep 13, 2014 2:26 am
ZCS/ZD Version: 8.8.15.GA.3829.UBUNTU14.64 -Patch 1

Zimbra Collaboration 8.5.1 and 8.0.9 are now GA, with important Security Updates

Postby davidkillingsworth » Wed Nov 12, 2014 4:14 am

Awesome news on the per domain site wide disclaimer. We've been waiting 2+ years for that.



Thank You!

Return to “Announcements”

Who is online

Users browsing this forum: No registered users and 3 guests