Novell announced today the immediate availability of GroupWise 8.0.3. This is the latest support pack for the GroupWise 8 product line and can be downloaded immediately.
While our primary focus is on GroupWise 2012 and beyond, this release demonstrates our commitment to customers who need a little more time to plan and fund an upgrade of their GroupWise environment. If you're on GroupWise 8, download it today and let us know what you think.
GroupWise 8 Support Pack 3 is an update to all GroupWise agents and Web Applications and the GroupWise 8 Windows client. Support Pack 3 does not include the GroupWise 8 Mac/Linux client.
Updates to the GroupWise 8 Mac client will be released in the coming months. In the meantime, Mac users can continue to run the GroupWise 8 Support Pack 2 Mac client with GroupWise 8 Support Pack 3 and with GroupWise 2012.
GroupWise 8.0.3 is an accumulation of all fixes and changes that have been made to the GroupWise 8 product line. All Hot Patches, FTFs and Security related fixes that were made and released previously are included in the GroupWise 8.0.3 release.
GroupWise 8.0.3 has approximately 200 additional fixes since GroupWise 8.0.2 HP3 was released in September 2011. The Support Pack can be downloaded here.
Novell continues to be diligent about finding and fixing security related issues. Announced a few weeks ago was the availability of a FTF to address a security related issue in the address book. That fix along with a few more security related changes are included in GroupWise 8.0.3. All of the reported security issues documented in GroupWise 8.0.3 were previously fixed and released as part of GroupWise 2012.
Here are some details…
GroupWise WebAccess is vulnerable to a directory transversal exploit in the "User.interface" parameter whereby an attacker could potentially force WebAccess to return the contents of other files under the WebAccess directory structure.
GroupWise 8.0x up to and including 8.02HP3. Previous versions of GroupWise are likely also vulnerable but are no longer supported. Customers on earlier versions of GroupWise should, at a minimum, upgrade their WebAccess servers and associated Domains to version 8.0 Support Pack 3 in order to secure their system.
This vulnerability was discovered and reported by Tim Brown with Portcullis Computer Security, LTD.
Novell bug 712163, CVE-2012-0410
Related TID: Security Vulnerability - GroupWise WebAccess Directory Traversal Vulnerability in 'User.interface' parameter
As stated in previous blog posts:
"Novell and GroupWise take every security report very seriously. Novell expects our community to be well informed and well protected. GroupWise is very reliable and customers expect it to be the very best.
Policy states: - All security issues should be taken seriously and patches applied.
Please follow Best Practices guidelines for updating your system when applying this patch."
For a list of the issues resolved in this Hot Patch, please refer to the release notes, which can be found as part of the download.
The engineering team is now entirely focused on Windermere, GroupWise/Exchange Co-existence, and a Messenger Update (code named Dillon). With the stability and confidence Novell expects GroupWise 8.0.3 to bring to current GroupWise 8 customers and the availability of GroupWise 2012, it is not expected that Novell will release another support pack for GroupWise 8 until sometime next year. Serious customer issues will still be addressed through support and the availability of FTFs (Field Test Files). In addition, although considerations can be made for a Hot Patch to GroupWise 8.0.3, there are not any current plans to release one. Novell encourages all customers to move to the latest versions of the product where they will find support for the latest platforms and mobile devices, new productivity enhancements for their users, the latest security and vulnerability fixes, and better integrations with other Novell products and 3rd-Party products.
Engineering is working with all partners to validate, support, and certify their products with GroupWise 8.0.3 and GroupWise 2012. In many cases, the IT team has been running the latest products with partner's products in production environments for several months before an official release. Most partners also participate with Novell during beta and early adopter programs. Final testing of 3rd-party products can usually only occur once a product ships and is made available in either a Gold Master or Final Release format to partners.
The initial quality of GroupWise 2012 has been exceptional! GroupWise engineering and support are not aware of any serious inhibitors for GroupWise 2012. You might find this interesting - here at Novell our IT department is still running GroupWise 2012 shipping code/agents. They have not found or requested any changes or reported any serious issues. Nothing has been identified that warrants updating our Novell production system to a build with a specific fix or change.
We recognize that some customers are waiting for a particular partner or 3rd-party solution to certify or validate with GroupWise 2012 before deploying. Many customers are moving forward with their upgrade plans and looking forward to the many benefits that GroupWise 2012 will bring their end-user communities.
Please sound off in the comments of this blog about your GroupWise 2012 deployment experience !
Novell has a variety of awesome collaboration things coming! First of all, check out the Interactive Roadmap Application that was launched in January. Here is the perfect place for you to bookmark and refer to for the latest information on Novell's collaboration plans, priorities and objectives. Updates to this application happen regularly, so check back often!
Here is what is coming…..
- Novell Vibe 3.3 (Granite) released in June. Check it out!
- Novell GroupWise 2012 SP1 …code named Cardiff, is scheduled to be released next month.
- GroupWise/Exchange co-existence. A solution for having GroupWise and Exchange co-exist in the same organization is planned for early fall. This will be called GroupWise 2012 SP2 and will contain not only this new functionality, but also will be the second support pack for GroupWise 2012.
- Novell Messenger. An update to Novell Messenger that includes Instant Messaging mobile apps for iOS and Android is also scheduled for this fall.
- GroupWise Mac Update. Novell is working on an update to the current GroupWise 8 Mac desktop client. This update will be named GroupWise 8.0.2 HP4 and will include several quality fixes and support for Mountain Lion. This client will be supported running against a GroupWise 8.x POA or GroupWise 2012 POA. This release will be released next month as well.
- Novell Data Synchronizer Mobility Pack 1.2.3 or Update 3 – released on May 23rd. See related blog post.
- RIM Certification for GroupWise 2012 and for GroupWise 8.0.3. RIM has already announced certification for GroupWise 2012. They will be updating their support matrix soon with today's announcement of GroupWise 8.0.3.
GroupWIse 2012 IDM Driver
The IDM Engineering and QA team are finalizing their changes and fixes to officially support a GroupWise 2012 IDM driver. They are working on one final change that deals with the MSInfo policy package populating properly in the driver. The rest of the QA is complete and an official announcement is imminent. Early access to the build with this remaining issue outstanding can be delivered to customers with Priority Maintenance.
GroupWise BETA programs
Engineering has already begun the beta for GroupWise 2012 SP1. GroupWise 2012 SP1 is our first support pack for GroupWise 2012. It includes customer-requested bug fixes to GroupWise 2012. It also includes the following enhancements:
- Android tablet support
- RIM Playbook 2 support
- Bulgarian and Turkish UI support in WebAccess
GroupWise 8.0.2 HP4 – Mac Client Update
The BETA for the upcoming update to the Mac client has also begun.
The pace is picking up, the solutions and progress coming more rapidly and there is something for everyone!
Disclaimer: As with everything else at Cool Solutions, this content is definitely not supported by Novell (so don't even think of calling Support if you try something and it blows up).
It was contributed by a community member and is published "as is." It seems to have worked for at least one person, and might work for you. But please be sure to test, test, test before you do anything drastic with it.