Timeline for Security Patch SUPEE-10415 - Possible Issues?
Current License: CC BY-SA 3.0
14 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Dec 13, 2017 at 19:22 | history | edited | Jeroen Vermeulen | CC BY-SA 3.0 |
added 22 characters in body
|
| Dec 13, 2017 at 19:10 | history | edited | Jeroen Vermeulen | CC BY-SA 3.0 |
added 693 characters in body
|
| Dec 11, 2017 at 11:46 | comment | added | wr125 | @PiotrKaminski do you have a link to the release notes? I can only find reference to this in the release archive, and there it currently states it combines SUPEE-10266 and SUPEE-10497 (probably a typo) link | |
| Dec 7, 2017 at 18:51 | comment | added | Piotr Kaminski | Please use SUPEE-10497 instead, it was just recently released to address this problem on 1.9.1.1. Please read the release notes as this patch requires removing SUPEE-10266 prior to installation. | |
| Nov 30, 2017 at 19:09 | comment | added | Jeroen Vermeulen | @danmentzer Did you test it? In my description of the problem is a full list of the patches I installed on 1.9.1.1, which includes 9767 v2. | |
| Nov 30, 2017 at 13:20 | comment | added | danmentzer | @JeroenVermeulen-MageHost You should run the other patches rather then running that manual fix that particular fix is handled within Patch 9767 you should apply that instead because there are other vulnerabilities that get fixed in that patch. That patch has two versions if you installed the first version previously make sure you uninstall it and install the v2. | |
| Nov 29, 2017 at 15:11 | comment | added | Jeroen Vermeulen | You need to apply all previous patches, see my previous comment. I tested it. | |
| Nov 29, 2017 at 15:07 | comment | added | 0xCAFEBABE | I am using magento-1.9.2.2-2015-10-27-03-14-30.zip from the official site. Uploaded and extracted to a linux box, coped the patch file for 1.9.2.2 over. Result: pastebin.com/BCvsKaBW | |
| Nov 29, 2017 at 15:04 | comment | added | Jeroen Vermeulen | I don't agree. We took a vanilla install from github.com/OpenMage/magento-mirror/archive/1.9.2.2.tar.gz and were able to apply patches in this order: SUPEE-7405-CE-1-9-2-2 | CE_1.9.2.2 | v1, SUPEE-7405 | CE_1.9.2.2 | v1.1, SUPEE-7616 | CE_1.9.2.2-CE_1.8.0.0 | v1, SUPEE-8167 | EE_1.14.2.0 | v1, SUPEE-8788 | CE_1.9.2.2 | v2, SUPEE-8967 | EE_1.13.1.0 | v1, SUPEE-9652 | EE_1.14.3.1 | v1, PATCH_SUPEE-9767_CE_1.9.3.0_v2 | CE_1.9.3.0 | v2, SUPEE-10336_v1.14.2.4 | CE_1.9.2.4 | v1, SUPEE-10266-CE-1.9.2.4 | CE_1.9.2.4 | v1, SUPEE-10415-ce-1.9.2.2 | CE_1.9.2.2 | v1 | |
| Nov 29, 2017 at 14:44 | comment | added | 0xCAFEBABE |
Patch cannot be applied to vanilla 1.9.2.2 as well, the earliest break occurs in app/code/core/Mage/Adminhtml/Controller/Action.php.
|
|
| Nov 29, 2017 at 14:36 | comment | added | Jeroen Vermeulen | Fix added to the bottom of my answer. | |
| Nov 29, 2017 at 14:35 | history | edited | Jeroen Vermeulen | CC BY-SA 3.0 |
Added fix.
|
| Nov 29, 2017 at 13:11 | comment | added | wr125 |
I'm also experiencing this. Seems to be an issue with app/code/core/Mage/Core/Model/File/Validator/Image.php. Patch SUPEE-10415 doesn't appear to take into consideration the modification made by Patch SUPEE-9767 (v1 or v2)
|
|
| Nov 29, 2017 at 7:48 | history | answered | Jeroen Vermeulen | CC BY-SA 3.0 |