1

I need to run the new security patches on Magento Open Source 2.4.3 - 2.4.3-p1 but Adobe don't actually elaborate on how to choose the correct version. My guess would be the COMPOSER version, but I would like to understand this, so could someone please explain how you know which one to use?

https://support.magento.com/hc/en-us/articles/4426353041293-Security-updates-available-for-Adobe-Commerce-APSB22-12-

https://helpx.adobe.com/security/products/magento/apsb22-12.html

My open source instance was originally from an archive.

Improve this question
1
  • running threw the same interrogation as the patch can't be applied directly as it modify vendor files. Composer seems to be the good way but not sure the patch can be applied this way.
    – Claims
    Feb 18, 2022 at 10:56

2 Answers 2

Reset to default
1

Magento 2 can be installed in two ways :

Github installation or Composer based Installation

A Github installation is usually used by developers who are contributing to the Magento codebase and is a clone of the Magento 2 github repo.

Production installations should use the composer based installation which downloads released packages of Magento 2 from the Magento composer repo.

A composer installation has the Magento core code located in /vendor/magento the github installation has the Magento core code located in /app/code

Use the composer patch for your Magento 2 composer based installation.

Attempting to use a github patch will fail as the patched files will not be found.

Improve this answer
1
  • 1
    Thank you. That explains it perfectly. I had diffed the files and noticed the changes were in different locations, but wasn't sure why.
    – SilkSpin
    Feb 18, 2022 at 17:11
2

You need to read this article.

https://support.magento.com/hc/en-us/articles/360028367731
Improve this answer
1
  • I had read that article, but that just tells you how to patch it, and doesn't explain what the 2 versions are for. That's what I want to understand.
    – SilkSpin
    Feb 18, 2022 at 15:55

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.