Installation and Upgrade • Automated OS package updates may break spellcheck (<=10.0.7 [FOSS?])

The Zimbra FOSS component repo updated two days ago to include new versions of:

• zimbra-apache-components 2.0.11 -> 2.0.12
• zimbra-mta-components 1.0.22 -> 1.0.23
• zimbra-php 7.4.27 -> 8.3.0
• zimbra-postfix 3.6.1 -> 3.6.14
• zimbra-spell-components 2.0.13 -> 2.0.14

The PHP upgrade is a major jump that requires changes to the (non-FOSS) zimbra-spell and zimbra-apache components from a forthcoming patch release. Be careful if you pull in package updates via your OS package manager, or apply the (very small) config changes in this commit:
https://github.com/Zimbra/zm-aspell/com ... c354da755c

As an aside -- can we talk about how wild it is that Zimbra pulls in all of Apache and all of PHP for... just the spellcheck endpoint? Surely JavaSpell and a SOAP endpoint would be an easy modification, and save a whole lot of resources and attack surface.

Statistics: Posted by jered — Thu Apr 11, 2024 3:01 pm

---