ZBUG-3263: Upgrading onlyoffice to v7.2.2.56 (7.2.1)

[GaneshAnarse]

ZBUG-3263: Upgrading onlyoffice to v7.2.2.56 (7.2.1)

• We had been using outdated version of only office with following vulnerabilities -
  • CVE-2021-43447: Unauthenticated Websocket
  • CVE-2021-43445: Default JWT signing key
  • CVE-2021-43444: Default download URL signing key
  • CVE-2021-43448: Web socket tampering (e.g. user names)
  • CVE-2021-43446: XSS in macros
  • CVE-2021-43449: SSRF in “auth” websocket command
• ONLYOFFICE/server has fixed all issues in the newer versions. Please refer the changelog.
• We will also need to upgrade the forked zm-onlyoffice/server repo with these changes.
• The new version - 7.2.2.56 has all the security fixes and is seem to be working fine with zimbra.

Implemented

• Synced the forked repository - zm-onlyoffice with its base repository - ONLYOFFICE/server
• Cherry picked all the zimbra specific commits form this branch of zm-onlyoffice which was earlier used for compiling the zm-onlyoffice.
• Increased connection limit to 99999 from 20.

Additional changes

• Updated createdb.sql for v7.2.2.56.
• Updated circle-ci config to create rpm/debian packages.
• Spellchecker as a separate service is not needed since v6.3.x of ONLYOFFICE/server. That's why its not needed to be run at all.
• Please refer - SpellChecker not built ONLYOFFICE/build_tools#431.
• Hence, removed the spellchecker endpoint from the file - Common/config/default.json
• Also updated the spellchecker dictionaries path to Zimbra's setup specific path. See - Common/config/onlyofficeconfig.json.

For compiling

• Please refer to the comments / steps mentioned on the ticket - ZBUG-3263