Questions tagged [patches]

Questions about the official Magento Security patches (SUPEE-xxxx)

Filter by
Sorted by
Tagged with
0
votes
0answers
20 views

Could not apply patch! Skipping. The error was: Cannot apply patch XXXXXXXXXX.diff

I'm installing a code base which is created by others, then i remove the old when i run "composer install" and encounter show many this kind of error message. Anyone know what is the problem?
0
votes
2answers
73 views

SUPEE Patch 11219 not available for 1.7.0.2 Magento1

After so many days, Magento released patches for less than 1.9, But I could not see the patch for version 1.7.0.2 Does anyone any information when it will be available or will it be available?
2
votes
0answers
24 views

How do i apply path APPSEC-1679 for Magento 2.3.1 via composer

Could you please provide the clear steps to apply the patch via composer for Magento 2.3.1 version. APPSEC-1679 - API ACL - Failed. API ACL Patch not detected
0
votes
2answers
221 views

EmailMessageInterface backward compatibility issue patch for Magento 2.3.3

Has anyone had success with applying the following patch https://magento.com/tech-resources/download#download2333 I think process is composer require cweagans/composer-patches Path to patch: "...
0
votes
1answer
129 views

SUPEE 11219 not available for 1.9.2.x

I have noticed that the latest SUPEE 11219 is not available for Magento 1.9.2.x via Magento you can only download for 1.9.3 and up, even thought the affected versions are Magento Open Source prior to ...
0
votes
2answers
132 views

Can't install SUPEE-11155 or SUPEE-11219

This is what I get if I try to install SUPEE-11155 with $ ./PATCH_SUPEE-11155_CE_1.9.4.0_v4-2019-08-01-04-08-31.sh` Output: Checking if patch can be applied/reverted successfully... ERROR: Patch ...
0
votes
0answers
48 views

Security patch 11219 risk error for Magento 1.9.2.4

Security patch 11219 risk Error for Magento 1.9.2.4 I'm using Magento 1.9.2.4 version in the Security patch error(magereport.com) But in the Magento Security patch not have this version (https://...
9
votes
9answers
4k views

SUPEE-11219 Potential issues?

Magento just sent out an email about a new security patch (SUPEE-11219). https://magento.com/security/patches/supee-11219 Affected versions: Magento Commerce 1.9.0.0-1.14.4.1 Magento Open Source 1....
0
votes
0answers
13 views

What are the chhanges to keep in mind while applying Magento php7.2 patch in Magento 1.9?

What are the possible things to keep in mind while applying compatible patch for PHP7.2 in magento1.9?
0
votes
1answer
34 views

Why SUPEE-10888 is requested on magento 1.9.4?

I scan my website on magentary.com, it says "SUPEE-10888: Vulnerable, immediate attention required. Patch not detected." but the version is 1.9.4. Anyone knows why?
2
votes
0answers
29 views

M2 early patches are not available for some auth keys

Magento sends an email to vendors before announcing officially about security patch to provide vendors possibility to upgrade/patch M2 beforehand. We have two Commerce Edition projects with different ...
0
votes
0answers
60 views

Magento security report We were unable to check for API ACL

I scanned my site from the Magento Security . The report showed We were unable to check for API ACL (APPSEC-1679) Magento version 2.3.2 How to solve this?
0
votes
0answers
47 views

Magento 2.2.5 Security Patch Issue

Was there any solution to this? - Magento 2.2.2 Security Patch Issue I have the same issue with PRODSECBUG-2233 on Magento 2.2.5 - Installed via composer and using composer version of patch. When I ...
0
votes
1answer
41 views

SUPEE-5994 - Failed.Admin login screen detected (APPSEC-977)

I'm running the latest version of Magento, 1.9.4.2, which includes the patch SUPEE-5994. Even with that, I'm still getting this notice their Security Scanner: SUPEE-5994 - Failed.Admin login screen ...
0
votes
1answer
46 views

How to secure our Magento store from hackers?

I have read somewhere that hackers are making target to e-commerce sites to hack. As we know Magento provides some inbuilt security features but still wants to know more regarding security. Also, ...
0
votes
1answer
23 views

How I can add security patch for magento 2.2.6 without updating magento

I have Magento 2.2.6 I want to update security patch I have lost my server databases (maybe SQL injection) my questions 1)How to update security patches? 2)Is it will helpful? 3)Is ...
0
votes
2answers
193 views

Magento 2, XSS Patch not detected (APPSEC-2143)

In Magento security scan I got the below message for my Magento instance: XS Vulnerability - Failed. XSS Patch not detected (APPSEC-2143) I am using Magento 2.2.3 How could I resolve this? Is ...
1
vote
1answer
87 views

Magento 2 Open Source End of Life Timeline

Does anybody have the timeframe for end of life support for Magento 2 Open Source? All I've been able to find from an official source is this (https://magento.com/legal/terms/enterprise-agreement#...
0
votes
0answers
21 views

Migration from Magento 2.3.0 to 2.3.2 will patches apply automatically?

I have recently upgraded the Magento 2.3.0 to 2.3.2 EE version but I have a doubt that security patches will automatically installed while upgrading or I need to install manually? Can anyone help ...
0
votes
1answer
114 views

SUPEE-11155 for magento 1.9.3.10

I don't see the patch SUPEE-11155 for Magento version 1.9.3.10 in the Magento site https://cl.ly/c96fd50d706d . Is this patch not needed for 1.9.3.10? I tried to install for version 1.9.3.9 and 1.9.4....
2
votes
0answers
52 views

Apply a security patch

I need to apply some security patches to a Magento 2.2.7 installation but I don't want to upgrade to 2.2.8 or 2.2.9 Is it possible to apply a patch (e.g. PRODSECBUG-2202: Security bypass via form ...
3
votes
1answer
38 views

Magento 2: Load patches or update

I'm aware that this probably isn't the first time this question has been answered, but I'm wondering what is the best approach to keeping my magento 2.3.1 install secure: Should I update to 2.3.2 or ...
1
vote
1answer
27 views

Where is the Magento 1.x PHP 5.4 patch?

I'm trying to download the PHP 5.4 patch for Magento 1.x CE but I cannot find it, I think this guide is out of date: https://devdocs.magento.com/guides/m1x/other/php5.4_patch.html
28
votes
20answers
9k views

Security Patch SUPEE-11155 - Possible issues?

Magento has released a new security patch for M1, and updates for M1 and M2. What common issues do you have to watch out for when applying this patch/upgrade? Magento 1 https://magento.com/security/...
2
votes
1answer
378 views

Error: DDL statements are not allowed in transactions while running setup:upgrade. Running Data Patch

Magento 2.3.1 After making the data patch @ following location vendor/ModuleName/Setup/Patch/Data/AddMyColumnPatch.php code given below for AddMyColumnPatch.php. When I run bin/magento setup:...
0
votes
2answers
96 views

How to patch Magento 2 Information Leakage scan result?

I scanned the Magento 2 site from the official magento scanner and here's the result. Any ideas on how and what specific patch to apply for this one? Thanks!
1
vote
1answer
48 views

Does Magento 2 have an app/etc/applied.patches.list file like Magento 1

Apologies if this is a duplicate. Searched SO and couldn't see that this has been asked before. In Magento 1 you have a app/etc/applied.patches.list file which is updated when applying security ...
1
vote
1answer
28 views

Magento 2 recommended approach to applying patches

So far had to apply patches through command line. Bugs me there is not version control for this as in some cases changing vendor folder contents which is ignored. More for accountability with time and ...
1
vote
1answer
73 views

Patch SUPEE 11086 Hunk #1 FAILED at 144

I want to apply the patch SUPEE 11086 on magento 1.7 store but it gives me the following error: Checking if patch can be applied/reverted successfully... ERROR: Patch can't be applied/reverted ...
0
votes
2answers
73 views

SUPEE-11086 Patch for Magento CE 1.9.3.9

as my question says, I need to know if there is the released of Magento Patch SUPEE-11086 for M1 versione 1.9.3.9.
1
vote
1answer
72 views

Patch PRODSECBUG-2198 for Magento Enterprise Cloud

it has been some time after my last experience with Magento 2 and I've been asked to install a security patch, as in the title. My problem is due to the fact that I've never used a cloud ...
1
vote
0answers
30 views

M2 Patch getDependencies

In patch which implements DataPatchInterface there is a method "getDependencies()" which seems to be used if one patch need to be played before current one. But problem is if required patch define in ...
1
vote
1answer
62 views

How to patch a core controller, model, block or helper in Magento 2

How to create a custom patch file for Magento 2?
3
votes
1answer
177 views

magento2 apply patch prodsecbug issue found

seems simple enough to aplly prodsecbug patch but I get this ... public_html$ bash PRODSECBUG-2198-2.2-CE.composer-2019-03-27-06-12-19.patch diff: unrecognized option '--git' diff: Try 'diff --help' ...
1
vote
1answer
164 views

Patch SUPEE-10975 can't be installed successfully

I have a Magento 1.9.2.4 instance and I am trying to install patch SUPEE-10975 so that I can install patch SUPEE-11086. When I try to install, I get the following message: Checking if patch can be ...
1
vote
1answer
109 views

Magento 1.9.2.0 problem with patch SUPEE-11086

I have been having the below error when I try to patch my Magento store 1.9.2.0 patching file app/code/core/Mage/Cms/etc/config.xml Hunk #1 FAILED at 190. 1 out of 1 hunk FAILED -- saving rejects to ...
0
votes
1answer
99 views

Want to install SUPEE-11086 patch for magento 1.9.2.0 version

I want to install SUPEE-11086 patch Magento 1.9.2.0 version. Does anyone have an idea about this?
0
votes
0answers
108 views

which dedicated patch file to Install patch SUPEE-11086 for Magento 1.14.2.0 EE

I know how to install a patch file. But which dedicated patch file to Install patch SUPEE-11086 for Magento 1.14.2.0 EE. Does anyone know which is the patch I should apply for 1.14.2.0 EE?
0
votes
2answers
58 views

Issue while applying Patch

I am trying to install Magento 2.2 patch on my site. Showing error like this. root@server www/html# patch -p1 < PRODSECBUG-2198-2.2-CE-2019-03-25-08-43-16.patch -bash: patch: command not found ...
3
votes
1answer
391 views

PRODSECBUG-2198 - Installation Steps

I am having a Magento 2.2.6 site. I want to install PRODSECBUG-2198 patch. Little bit confusing with the flow. Can anyone guide me? Magento Decribed the Patch like this: This patch provides ...
3
votes
2answers
99 views

Magento 2.3: How Magento knows that a certain patch is already executed while it didn't use any versioning?

As Magento introduces patches instead of upgrade data and upgrade schema. In earlier version of Magento upgrade data and upgrade schema works by versioning but in Magento 2.3 it only executed the one ...
0
votes
0answers
20 views

Magento1 website Security patch installation by script then error show

Magento1 website Security patch installation by script and when run url in browser (like http://www.mywebsite.com/applypatch.php)then below error show: ERROR: "/app/etc/" must exist for proper ...
0
votes
1answer
220 views

Install patch SUPEE-11086

Magento has just released the patch SUPEE-11086 i am using Magento Version 1.9.2.2 I have scan my site in https://magereport.com it is not showing the SUPEE-11086 patch details. i have also checked ...
0
votes
1answer
30 views

Magento1 website Security patch installation by script

Magento1 my website i have installing following Security patch: Security patch 10975 Security patch 10415 Security patch 9767 Security patch 8788 Security patch 7405 but i want script in my root ...
0
votes
1answer
171 views

Magento 1.9 Patch MPERF-10509 - Invalid HTTP response version

We're on Magento 1.9.2.4 CE and applied patch MPERF-10509-CE. In the admin dashboard, the dashboard sales chart is broken and returning a 503 error in console. Magento error report shows: a:5:{i:0;s:...
1
vote
0answers
125 views

I Have Install this (SUPEE 11086 ) Patch in Magento 1.9.0.4 but Data.php is not working?

I have Install SUPEE 11086 Patch install successfully but not work Properly in backed side? Thanks.
0
votes
0answers
136 views

Magento 2 Finding the applied Patches list

I applied the composer patch for Magento 2.1.15 using the command patch –p0 < PRODSECBUG-2198-2.1-CE.composer.patch It got applied without any errors, but the patch.applied.list file in app/etc ...
0
votes
2answers
340 views

Patch SUPEE 11086

My Magento version is 1.9.2.2 Which file should I choose between the below given options? PATCH_SUPEE-11086_CE_1.9.1.0_v1-2019-03-26-03-03-13 PATCH_SUPEE-11086_CE_1.9.2.4_v1-2019-03-26-03-03-...
1
vote
1answer
491 views

SUPEE-11086 Missing patches for magento versions

I don't see a patch for 1.9.0.1 is this an error by the magento team or is it not supported?
1
vote
1answer
634 views

Magento1 SUPEE-11086 Potential Issues? [duplicate]

The Description of the patch SUPEE-11086 is: SUPEE-11086, Magento Commerce 1.14.4.1 and Open Source 1.9.4.1 contain multiple security enhancements that help close remote code execution (RCE), ...