4

I am having a Magento 2.2.6 site. I want to install PRODSECBUG-2198 patch.

Little bit confusing with the flow. Can anyone guide me?

Magento Decribed the Patch like this:

This patch provides protection against the SQL injection vulnerability described under PRODSECBUG-2198 here. To quickly protect your store from this vulnerability only, install this patch. However, to apply protection against this vulnerability and others, you must apply the 2.3.1, 2.2.8, or 2.1.17 patch code. We strongly suggest that you install these full patches as soon as you can

Here what they are supposed to mean for

you must apply the 2.3.1, 2.2.8, or 2.1.17 patch code. We strongly suggest that you install these full patches as soon as you can

2
  • how to Remove the a/ and b/ before the path name magento patch? Jun 17, 2019 at 13:51
  • @Fousseinikonate While edit the patch file before move in, you can see the Path file mentioned in the Patch with a/ and b/. You just remove the letters in it. and upload the Patch to server. Jun 18, 2019 at 5:12

1 Answer 1

3

1.Download the composer patch for Magento 2.2 version PRODSECBUG-2198-2.2-CE.composer.patch.

2.Remove the a/ and b/ before the path name.

3.Move the patch file to your Magento root and execute patch -p0 < PRODSECBUG-2198-2.2-CE.composer.patch

The patch has very critical fixes. To get the other Magento bugs fixed do update to the latest version.

5
  • what does this means ? you must apply the 2.3.1, 2.2.8, or 2.1.17 patch code Apr 4, 2019 at 11:04
  • There are 3 patch files for 2.1, 2.2, and 2.3 so select the patch for your version and Apply the patch code Apr 4, 2019 at 11:05
  • Oh.. Got it. Thanks. Can you explain to me what is the point of removing a/ and b/ ? Apr 4, 2019 at 11:13
  • And Do we need file and db backup before applying it on live? Apr 4, 2019 at 11:13
  • I was facing a wrong path error when I executed the patch, so then I found that the a/ and b/ before the path was causing this, Once I removed it was working fine. You no need to backup the database, you can backup these two files vendor/magento/module-catalog/Model/Product/ProductFrontendAction/Synchronizer.php and vendor/magento/framework/DB/Adapter/Pdo/Mysql.php b/vendor/magento/framework/DB/Adapter/Pdo/Mysql.php since the patch changes are for these two files only Apr 4, 2019 at 11:22

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.