Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [patches]

Questions about the official Magento Security patches (SUPEE-xxxx)

104
votes
30answers
49k views

Security Patch SUPEE-8788 - Possible Problems?

The latest Magento 1 security patch SUPEE-8788 contains 17 APPSEC updates, so it is very important to apply it as soon as possible. On the other hand, there are many potential backward compatibility ...
103
votes
23answers
34k views

Security Patch SUPEE-9767 - Possible issues?

A new security patch is out for Magento 1, addressing 16 APPSEC issues: https://magento.com/security/patches/supee-9767 Seven of the vulnerabilities score 8.0 or higher for CVSSv3 Severity, and they ...
135
votes
15answers
53k views

Security Patch SUPEE-7405 - Possible Problems?

It's time for another patch day, SUPEE-7405 for Magento 1.x is out and the list of fixes is long: https://magento.com/security/patches/supee-7405 After the experience with the last patches, I have to ...
43
votes
3answers
14k views

APPSEC-1057 How to add variables or blocks to the white list tables

APPSEC-1057 (part of SUPEE-6788) states Magento now includes a whitelist of allowed blocks or directives. If a module or anyone uses variables like {{config path=”web/unsecure/base_url”}} and {{...
49
votes
6answers
31k views

Critical Reminder: Download and install Magento security patches. (FTP with no SSH access)

The Magento security patches look like they are .sh files, how would someone apply these patches without SSH access to their Magento installations? Also, are these patches cumulative? IE: Will they ...
37
votes
9answers
15k views

Security Patch SUPEE-10415 - Possible Issues?

New Magento 1 patch has been released, SUPEE-10415. This patch provides protection against several types of security-related issues Info page: https://magento.com/security/patches/supee-10415 ...
35
votes
11answers
11k views

Security Patch SUPEE-10266 - Possible issues?

A new security patch is out for Magento 1, addressing 13 APPSEC issues https://magento.com/security/patches/supee-10266 What common issues do you have to watch out for when applying this patch? ...
81
votes
3answers
24k views

Access Denied errors after installing SUPEE-6285

After installing the SUPEE-6285 patch on our Magento 1.7.0.2 store the system is showing an "Access Denied" error when attempting to access all custom modules for users who have selective permissions (...
42
votes
4answers
47k views

How to check the latest patch version applied to magento?

I just applied the security patch PATCH_SUPEE-5344_CE_1.8.0.0_v1-2015-02-10-08-10-38.sh Since I have no SSH access to the web server, the provider did the work for me. How can I check by myself if ...
15
votes
2answers
6k views

Magento hacked even after applied patch

Some days before my Magento community edition 1.8.1 site is hacked, because we are late to apply the patch. we found certain files were changed those are index.php [hackers added some code to it]. ...
44
votes
16answers
11k views

Security Patch SUPEE-10570 - Possible issues?

Magento has released a new security patch for M1, and updates for M1 and M2. What issues should I look out for when upgrading or applying this patch? SUPEE-10570 SUPEE-10570, Magento Commerce 1....
9
votes
4answers
10k views

Issue in Admin Panel after SUPEE Patch 8788 installation

I have Magento CE 1.9.2.4 installed along with patches (5377,1533,4788 etc. almost all patches). This question also reveals issues that may/surely occur in any custom module involving Image uploads ...
21
votes
5answers
15k views

Why does PATCH_SUPEE-6788 appear to have no effect on a 1.7.0.2 installation?

Note: This issue appears to apply to all versions of Magento which received the SUPEE-6788 patch. You'll see in my answer that both .htaccess and .htaccess.sample need to be restored for the patch ...
7
votes
4answers
2k views

Upgrading compromised Magento from 1.7 to 1.9

I've been doing some research but there appears to be multiple solutions, and I want to get it right. I need to upgrade my Magento from 1.7.0.2 to the latest (1.9) being that our server was ...
5
votes
3answers
752 views

Security Patch (SUPEE-6285) – Install Immediately In Magento 1.9.0.1

How To Resolve New Magento Security Patch (SUPEE-6285) – Install Immediately In Magento 1.9.0.1 please find the below image I have tried this code passthru("/bin/bash PATCH_SUPEE-6285_CE_1.9.1.1_v2-...
20
votes
5answers
6k views

Watermark get black background when transparent

I've installed PATCH SUPEE 9767 on my magento 1.9.2.4 shop. Now i've uploaded a new Watermark but the background changes to black. Is this a problem since the new update? On a other magento 1.9.2.4 ...
70
votes
5answers
17k views

How to check which modules are affected by security patch SUPEE-6788

On October 27, 2015, Magento has released security patch SUPEE-6788. According to the technical details, 4 APPSEC's that have been fixed require some rework in local and community modules: APPSEC-...
35
votes
2answers
9k views

Error after successfull patch SUPEE-5994: Class 'Mage_Install_Controller_Router_Install' not found

I successfully installed the SUPEE-5994 patch : [root@x]# sh PATCH_SUPEE-5994_EE_1.14.1.0_v1-2015-05-14-05-05-02.sh Checking if patch can be applied/reverted successfully... Patch was applied/...
18
votes
6answers
13k views

SUPEE-9767 Patch/CE 1.9.3.3 - One Page Checkout - Customer Registration issue

On a clean, vanilla install of Magento 1.9.2.4, patched with SUPEE-8788, SUPEE-9652 and SUPEE-9767, and with the new 'Enable Form Key Validation On Checkout' setting turned on, following a successful ...
9
votes
1answer
4k views

ERROR: “/app/etc/” must exist for proper tool work magento 1.9

I am trying to install the newly release security patch for magento 1.9. I am working on window system. and I am getting the following error. D:\xampp\htdocs\magento>sh PATCH_SUPEE-1533_EE_1.13....
7
votes
5answers
8k views

How to apply the Magento 2 patches?

I'm using the Magento 2.1.6 and I want to apply the patch CE-MAGETWO-67805.patch. How can I apply the *.patch files?
2
votes
1answer
3k views

After applying SUPEE-6788 , cron stopped working

I am using 1.9.2.1. After applying SUPEE-6788 , cron stopped working. Why?? I attached the cron setting of my system.
4
votes
4answers
5k views

Magento 1.9.2.0 SUPEE-8788 v2 Hunk #1 FAILED at 91 after reverting SUPEE-1533 [duplicate]

I reverted SUPEE-1533 as suggested successfully but when I try to patch SUPEE-8788, I get "Hunk #1 FAILED at 91" Please see the log below sh PATCH_SUPEE-8788_CE_1.9.2.0_v2-2016-10-14-09-39-55.sh ...
23
votes
17answers
4k views

Security Patch SUPEE-11086 - Possible issues?

Magento has released a new security patch for M1, and updates for M1 and M2. These releases include critical security fixes. "We strongly recommend that all merchants upgrade as soon as possible." ...
15
votes
14answers
5k views

SUPEE-10975 Potential Issues

SUPEE-10975 has been released, it would be great to know if anyone runs into any issues while trying to apply this, will this conflict with the most recent patch that adds 7.2 support? So far these ...
7
votes
7answers
10k views

Image Upload issue after PATCH 8788 install on 1.9.2.4 [duplicate]

After installing Patch 8788 on 1.9.2.4, product image upload says the upload is complete but it not show on the front end. I checked the media directory but image not uploaded.
4
votes
1answer
2k views

Security Patch SUPEE-7405 Issues [duplicate]

I am using Magento 1.7.0.2 and just applied this patch. There where two errors patching file app/code/core/Mage/Core/Model/Email/Template/Filter.php Hunk #1 FAILED at 166. Hunk #2 succeeded at 177 (...
6
votes
1answer
8k views

Error while Patching Security Patch (SUPEE-6285)

While trying to patch magento, which I have done a few times now with prior patches successfully, I encountered an issue with this latest patch. Checking if patch can be applied/reverted successfully....
4
votes
1answer
652 views

Magento 1: what does SUPEE stand for?

As you guys may know, the Magento 1 patch names all start with SUPEE and I was wondering if any of you know what does "SUPEE" stand for ? Is that an acronym or a real word ? I have to specify I'm not ...
2
votes
2answers
1k views

Magento 1.9.0.1 + Patch SUPEE-6788 breaks custom theme

I have tried to apply the new patch SUPEE-6788 on my website which was successful without any errors. After that I recompiled Magento using Configuration > tools > compilation. After doing that my ...
24
votes
6answers
14k views

SUPEE-6285 patch, what has been changed?

OK, somebody has to ask this: today, 7/7/2015 a new security patch for Magento < 1.9.2 has been released. update your shops ASAP! But what has been changed? Are there known exploits of the ...
16
votes
4answers
4k views

SecurityPatch 9652: Possible problems after SUPEE-9652 applied

Magento has released its security patch SUPEE-9652, for Magento 1.x CE and EE I just want to know what are the possible problems after applying this security patch and What are the new changes in ...
12
votes
3answers
2k views

Should I upgrade or patch Magento?

I am currently patching Magento with the latest patches and wondered whether it is worth applying the patches or upgrading to the latest version? As far as I can tell the only changes seem to be the ...
6
votes
1answer
3k views

SUPEE 7405 - Hunk #2 Failed at 43

Today 2 patches were released for my Magento 1.9.1.0 CE website - SUPEE 7405 and 7616. Installing 7616 on my local dev site worked perfectly and I experienced no problems. When attempting to run 7405 ...
2
votes
3answers
210 views

Probably security issue

Some months ago i have patched my magento with: SUPEE-1533 SUPEE-5344 SUPEE-6285 SUPEE-5994 SUPEE-6482 SUPEE-6788 and i patched using this instruction https://magentary.com/kb/install-supee-6788-...
4
votes
4answers
2k views

Patch SUPEE-8788, MageReport.com says no, but I say yes

I recently went with all the workarounds that Magento supplied after the v1 of the patch had some issues, and now have finally successfully installed v2 of SUPEE-8788. sh PATCH_SUPEE-8788_CE_1.9.0....
3
votes
3answers
2k views

Check what Magento patches were installed [duplicate]

I need to install patches 5994 and 6285 on Magento installation (Community edition) but I am not sure if they are already installed or not. Is there any way in Magento to check if a particular patch ...
1
vote
5answers
2k views

Apply 7616_EE 7405_EE patch not successfuly

here is the command output, seems not applied, anyone know what is the problem? [root@uat-web html]# sh PATCH_SUPEE-7405_EE_1.14.0.0_to_1.14.0.1_v1-2016-01-19-05-36-52.sh Checking if patch can be ...
1
vote
2answers
4k views

5344 security patch installation error in Magento

Showing given below error, While I am installing the patch file in my Magento version 1.4.2.0. Please help me to find out the reason for the error! Checking if patch can be applied/reverted ...
20
votes
16answers
6k views

Security Patch SUPEE-10888 - Possible issues?

SUPEE-10888 is a new security patch for Magento 1 which addresses 12 security issues. https://magento.com/security/patches/supee-10888 SUPEE-10888, Magento Commerce 1.14.3.10 and Open Source 1.9.3....
18
votes
1answer
2k views

Patch 5994 is causing module Adminhtml 404 Status Error

I applied the Patch 5994 the other day and it has caused the admin section of a module I build to throw a 404. Has anyone else had this. The module is fine on the frontend though. It's Magento 1.8.1....
5
votes
5answers
1k views

Magento Hacked: displays list of user emails and error message

-My client suspects his site was hacked,I'm not sure, but when I open index.php I get a list of emails and usernames, and what appears to be encrypted passwords (please correct me if I'm wrong). I ...
4
votes
3answers
2k views

Shoplift vulnerability if admin panel is hidden?

Among the six installations I have access to there's one that was apparently compromised by Shoplift. This is the only one that has a standard /admin backend url. After patching all of them and ...
9
votes
2answers
7k views

Error! Some required system tools when trying to apply Magento patches via SSH

I have been trying to apply some Magento patches via SSH (SUPEE-5344 and SUPEE-1533) from the Magento Community Edition download page (https://www.magentocommerce.com/products/downloads/magento/) I ...
0
votes
1answer
415 views

Critical security Patches [duplicate]

I got this Notification message every time i open the admin. Can anybody tell me in detail what to do ? How to install these patches ?
7
votes
1answer
2k views

Patch SUPEE-7405 v1.1 release, is it same as we had 7405 earlier?

It's not been long since I had applied SUPEE-7405 and magento says there is another one available. I am not sure if this is the same as before. Today, we are distributing updates that improve our ...
5
votes
4answers
4k views

Magento 1.9.1.0 patch SUPEE-6788 1 out of 1 hunk ignored missing .htaccess.sample

I am using Magento 1.9.1.0 and tried to install the new patch SUPEE-6788 through SSH but getting ERROR below. I am not able to understand what's wrong and where exactly the error lies I have ...
5
votes
2answers
771 views

How to find PATCH by affected target files?

I am trying to apply the newest patch for my Magento 1.7.0.2 installation, PATCH_SUPEE-7405_CE_1.7.0.2_v1-2016-01-20-04-58-44.sh One hunk is failing in app/code/core/Mage/Core/Model/Email/Template/...
3
votes
2answers
2k views

Security Patch SUPEE 8788 problem

Even I follow the procedure as mentioned in magento. Apply SUPEE-8788 To apply patch SUPEE-8788: Open /app/etc/applied.patches.list in a text editor. Verify SUPEE-8788 is not applied....
3
votes
1answer
2k views

failed while applying security patch SUPEE-6285 [duplicate]

i got error while applying SUPEE-6285 i saw online that i have to apply SUPEE-5994 and i got this error when i applied: $ Sh PATCH_SUPEE-5994.sh Checking if patch can be applied/reverted ...