Questions tagged [patches]
Questions about the official Magento Security patches (SUPEE-xxxx)
574
questions
0
votes
2answers
46 views
Magento 2, XSS Patch not detected (APPSEC-2143)
In Magento security scan I got the below message for my Magento instance:
XS Vulnerability - Failed.
XSS Patch not detected (APPSEC-2143)
I am using Magento 2.2.3
How could I resolve this?
Is ...
1
vote
1answer
29 views
Magento 2 Open Source End of Life Timeline
Does anybody have the timeframe for end of life support for Magento 2 Open Source? All I've been able to find from an official source is this (https://magento.com/legal/terms/enterprise-agreement#...
0
votes
0answers
19 views
Migration from Magento 2.3.0 to 2.3.2 will patches apply automatically?
I have recently upgraded the Magento 2.3.0 to 2.3.2 EE version but I have a doubt that security patches will automatically installed while upgrading or I need to install manually?
Can anyone help ...
0
votes
1answer
65 views
SUPEE-11155 for magento 1.9.3.10
I don't see the patch SUPEE-11155 for Magento version 1.9.3.10 in the Magento site https://cl.ly/c96fd50d706d . Is this patch not needed for 1.9.3.10?
I tried to install for version 1.9.3.9 and 1.9.4....
2
votes
0answers
43 views
Apply a security patch
I need to apply some security patches to a Magento 2.2.7 installation but I don't want to upgrade to 2.2.8 or 2.2.9
Is it possible to apply a patch (e.g. PRODSECBUG-2202: Security bypass via form ...
3
votes
1answer
36 views
Magento 2: Load patches or update
I'm aware that this probably isn't the first time this question has been answered, but I'm wondering what is the best approach to keeping my magento 2.3.1 install secure: Should I update to 2.3.2 or ...
1
vote
1answer
24 views
Where is the Magento 1.x PHP 5.4 patch?
I'm trying to download the PHP 5.4 patch for Magento 1.x CE but I cannot find it, I think this guide is out of date:
https://devdocs.magento.com/guides/m1x/other/php5.4_patch.html
26
votes
18answers
5k views
Security Patch SUPEE-11155 - Possible issues?
Magento has released a new security patch for M1, and updates for M1 and M2.
What common issues do you have to watch out for when applying this patch/upgrade?
Magento 1
https://magento.com/security/...
1
vote
1answer
84 views
Error: DDL statements are not allowed in transactions while running setup:upgrade. Running Data Patch
Magento 2.3.1
After making the data patch @ following location
vendor/ModuleName/Setup/Patch/Data/AddMyColumnPatch.php
code given below for AddMyColumnPatch.php. When I run bin/magento setup:...
0
votes
2answers
69 views
How to patch Magento 2 Information Leakage scan result?
I scanned the Magento 2 site from the official magento scanner and here's the result.
Any ideas on how and what specific patch to apply for this one?
Thanks!
1
vote
1answer
39 views
Does Magento 2 have an app/etc/applied.patches.list file like Magento 1
Apologies if this is a duplicate. Searched SO and couldn't see that this has been asked before.
In Magento 1 you have a app/etc/applied.patches.list file which is updated when applying security ...
0
votes
1answer
25 views
Magento 2 recommended approach to applying patches
So far had to apply patches through command line. Bugs me there is not version control for this as in some cases changing vendor folder contents which is ignored. More for accountability with time and ...
1
vote
1answer
44 views
Patch SUPEE 11086 Hunk #1 FAILED at 144
I want to apply the patch SUPEE 11086 on magento 1.7 store but it gives me the following error:
Checking if patch can be applied/reverted successfully...
ERROR: Patch can't be applied/reverted ...
0
votes
2answers
53 views
SUPEE-11086 Patch for Magento CE 1.9.3.9
as my question says, I need to know if there is the released of Magento Patch SUPEE-11086 for M1 versione 1.9.3.9.
1
vote
1answer
55 views
Patch PRODSECBUG-2198 for Magento Enterprise Cloud
it has been some time after my last experience with Magento 2 and I've been asked to install a security patch, as in the title.
My problem is due to the fact that I've never used a cloud ...
1
vote
0answers
18 views
M2 Patch getDependencies
In patch which implements DataPatchInterface there is a method "getDependencies()" which seems to be used if one patch need to be played before current one.
But problem is if required patch define in ...
1
vote
1answer
38 views
How to patch a core controller, model, block or helper in Magento 2
How to create a custom patch file for Magento 2?
3
votes
1answer
129 views
magento2 apply patch prodsecbug issue found
seems simple enough to aplly prodsecbug patch but I get this ...
public_html$ bash PRODSECBUG-2198-2.2-CE.composer-2019-03-27-06-12-19.patch
diff: unrecognized option '--git'
diff: Try 'diff --help' ...
1
vote
1answer
115 views
Patch SUPEE-10975 can't be installed successfully
I have a Magento 1.9.2.4 instance and I am trying to install patch SUPEE-10975 so that I can install patch SUPEE-11086.
When I try to install, I get the following message:
Checking if patch can be ...
1
vote
1answer
99 views
Magento 1.9.2.0 problem with patch SUPEE-11086
I have been having the below error when I try to patch my Magento store 1.9.2.0
patching file app/code/core/Mage/Cms/etc/config.xml
Hunk #1 FAILED at 190.
1 out of 1 hunk FAILED -- saving rejects to ...
0
votes
1answer
92 views
Want to install SUPEE-11086 patch for magento 1.9.2.0 version
I want to install SUPEE-11086 patch Magento 1.9.2.0 version.
Does anyone have an idea about this?
0
votes
0answers
101 views
which dedicated patch file to Install patch SUPEE-11086 for Magento 1.14.2.0 EE
I know how to install a patch file. But which dedicated patch file to Install patch SUPEE-11086 for Magento 1.14.2.0 EE.
Does anyone know which is the patch I should apply for 1.14.2.0 EE?
0
votes
2answers
52 views
Issue while applying Patch
I am trying to install Magento 2.2 patch on my site.
Showing error like this.
root@server www/html# patch -p1 < PRODSECBUG-2198-2.2-CE-2019-03-25-08-43-16.patch
-bash: patch: command not found
...
3
votes
1answer
305 views
PRODSECBUG-2198 - Installation Steps
I am having a Magento 2.2.6 site. I want to install PRODSECBUG-2198 patch.
Little bit confusing with the flow. Can anyone guide me?
Magento Decribed the Patch like this:
This patch provides ...
3
votes
2answers
79 views
Magento 2.3: How Magento knows that a certain patch is already executed while it didn't use any versioning?
As Magento introduces patches instead of upgrade data and upgrade schema. In earlier version of Magento upgrade data and upgrade schema works by versioning but in Magento 2.3 it only executed the one ...
0
votes
0answers
18 views
Magento1 website Security patch installation by script then error show
Magento1 website Security patch installation by script and
when run url in browser (like http://www.mywebsite.com/applypatch.php)then below error show:
ERROR: "/app/etc/" must exist for proper ...
0
votes
1answer
201 views
Install patch SUPEE-11086
Magento has just released the patch SUPEE-11086 i am using Magento Version 1.9.2.2
I have scan my site in https://magereport.com it is not showing the SUPEE-11086 patch details.
i have also checked ...
0
votes
1answer
27 views
Magento1 website Security patch installation by script
Magento1 my website i have installing following Security patch:
Security patch 10975
Security patch 10415
Security patch 9767
Security patch 8788
Security patch 7405
but i want script in my root ...
0
votes
1answer
104 views
Magento 1.9 Patch MPERF-10509 - Invalid HTTP response version
We're on Magento 1.9.2.4 CE and applied patch MPERF-10509-CE.
In the admin dashboard, the dashboard sales chart is broken and returning a 503 error in console. Magento error report shows:
a:5:{i:0;s:...
1
vote
0answers
122 views
I Have Install this (SUPEE 11086 ) Patch in Magento 1.9.0.4 but Data.php is not working?
I have Install SUPEE 11086 Patch install successfully but not work Properly in backed side?
Thanks.
0
votes
0answers
115 views
Magento 2 Finding the applied Patches list
I applied the composer patch for Magento 2.1.15 using the command
patch –p0 < PRODSECBUG-2198-2.1-CE.composer.patch
It got applied without any errors, but the patch.applied.list file in app/etc ...
0
votes
2answers
320 views
Patch SUPEE 11086
My Magento version is 1.9.2.2
Which file should I choose between the below given options?
PATCH_SUPEE-11086_CE_1.9.1.0_v1-2019-03-26-03-03-13
PATCH_SUPEE-11086_CE_1.9.2.4_v1-2019-03-26-03-03-...
1
vote
1answer
475 views
SUPEE-11086 Missing patches for magento versions
I don't see a patch for 1.9.0.1 is this an error by the magento team or is it not supported?
1
vote
1answer
608 views
Magento1 SUPEE-11086 Potential Issues? [duplicate]
The Description of the patch SUPEE-11086 is:
SUPEE-11086, Magento Commerce 1.14.4.1 and Open Source 1.9.4.1 contain
multiple security enhancements that help close remote code execution
(RCE), ...
24
votes
17answers
5k views
Security Patch SUPEE-11086 - Possible issues?
Magento has released a new security patch for M1, and updates for M1 and M2.
These releases include critical security fixes. "We strongly recommend that all merchants upgrade as soon as possible."
...
0
votes
0answers
28 views
Multiple Magento SUPPEE Patches Not Installing
I am having issues applying patches to my Magento store, below I have included the current installed patches and a link to each log of the failing patches. I am unsure why half of these patches ...
0
votes
1answer
70 views
How to install git patch of Authorize.net Direct Post Signature Key?
I am using Magento2.3 and download the Authorize.net Direct Post Signature Key Patch file and put it to magento's root directory then go to the putty and run below command:
patch --p0<...
2
votes
2answers
655 views
Magento 2 : How To Apply Authorize.net Direct Post Signature Key Patch?
Read
https://support.magento.com/hc/en-us/articles/360024368392
Issue :
Magento implements the Authorize.Net Direct Post payment method, using Authorize.Net's AIM (Advanced Integration Method) and ...
2
votes
2answers
266 views
Magento 2 Authorize-Net-Direct-Post-Patch installation
I need to update this patch on magento 2.1.7 - I am confused with file structure.
CE-2.0.0 to CE-2.3.0/vendor/magento/module-authorizenet/
where should I upload these files and what is my CLI ...
0
votes
2answers
400 views
Magento 2 Authorization.net patch Md5 to SHA giving error
I am using Magento 2.1.3 EE and i applied patch using
patch -p1 < patchfile.patch which applied patch in 5 files of vendor/magento/module-authorizenet
I did follow the instruction given by the ...
0
votes
0answers
55 views
Applying Authorize.net Direct Post Patch [duplicate]
We have a magento 2.2.6 installation that was set up via composer, I am unsure of how to apply the .patch file required to use the new encryption.
1
vote
1answer
364 views
Regarding Authorize.net new patch
I am using magento v2.2.6. I am getting notification regarding the new patch release by magento for authorize.net payment method. But i am not using authorize.net payment method in my magento setup. ...
3
votes
3answers
336 views
SUPEE-11085 not working
I SSH the patch - Authorize.net Direct Post Signature Key patch - PATCH_SUPEE-11085_CE_1.14.4.0_v1-2019-02-28-05-21-55.sh and it was successful then following the directions here
I entered my ...
2
votes
1answer
33 views
Security Report - patch 8788
Patch 8788 is available for <= 1.9.2.4.
I have 1.9.3.4.
How can I fix the issues addressed?
-2
votes
1answer
67 views
1
vote
0answers
28 views
Need Help adding Magento2 Patch to IDE
Getting an error when changing Theme via admin Dash... "Something went wrong while saving this configuration: Area is already set" Found the solution patch from Magento. but I don't know where to ...
1
vote
0answers
33 views
Customers receiving order confirmation with another customer's details
We recently upgrade out Magento 1.9.0.1 site to the latest patches through to SUPEE-10975.
We have started seeing a number of problems like so;
Some backend orders show customer email address and ...
0
votes
1answer
303 views
Can't install patch (SUPEE-10975)
I never installed a patch before. I tried to install SUPEE-10975 from here.
But it does fail with the following message:
$ ./PATCH_SUPEE-10975_CE_v1.9.3.3_v1-2018-11-27-09-17-33.sh
Checking if patch ...
0
votes
0answers
43 views
Installed Magento 1.9.4 via Softaculous; Any patches needed?
Magento 1.9.4
I just did a fresh install of Magento 1.9.4 via the Softaculous app in the Cpanel.
Are there any patches that I need to install next or can I proceed with installing a theme and ...
0
votes
0answers
74 views
SUPEE-10975 Creates Console Errors
Magento Community Version 1.9.0.1
Patched Up till 10888
I just applied patch SUPEE-10975 and now when I go to the checkout pages I am getting some serious console errors:
prototype.js:5653 Uncaught ...
