Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [patches]

Questions about the official Magento Security patches (SUPEE-xxxx)

135
votes
15answers
53k views

Security Patch SUPEE-7405 - Possible Problems?

It's time for another patch day, SUPEE-7405 for Magento 1.x is out and the list of fixes is long: https://magento.com/security/patches/supee-7405 After the experience with the last patches, I have to ...
104
votes
30answers
49k views

Security Patch SUPEE-8788 - Possible Problems?

The latest Magento 1 security patch SUPEE-8788 contains 17 APPSEC updates, so it is very important to apply it as soon as possible. On the other hand, there are many potential backward compatibility ...
103
votes
23answers
34k views

Security Patch SUPEE-9767 - Possible issues?

A new security patch is out for Magento 1, addressing 16 APPSEC issues: https://magento.com/security/patches/supee-9767 Seven of the vulnerabilities score 8.0 or higher for CVSSv3 Severity, and they ...
81
votes
3answers
24k views

Access Denied errors after installing SUPEE-6285

After installing the SUPEE-6285 patch on our Magento 1.7.0.2 store the system is showing an "Access Denied" error when attempting to access all custom modules for users who have selective permissions (...
70
votes
5answers
17k views

How to check which modules are affected by security patch SUPEE-6788

On October 27, 2015, Magento has released security patch SUPEE-6788. According to the technical details, 4 APPSEC's that have been fixed require some rework in local and community modules: APPSEC-...
49
votes
6answers
31k views

Critical Reminder: Download and install Magento security patches. (FTP with no SSH access)

The Magento security patches look like they are .sh files, how would someone apply these patches without SSH access to their Magento installations? Also, are these patches cumulative? IE: Will they ...
45
votes
16answers
11k views

Security Patch SUPEE-10570 - Possible issues?

Magento has released a new security patch for M1, and updates for M1 and M2. What issues should I look out for when upgrading or applying this patch? SUPEE-10570 SUPEE-10570, Magento Commerce 1....
43
votes
3answers
14k views

APPSEC-1057 How to add variables or blocks to the white list tables

APPSEC-1057 (part of SUPEE-6788) states Magento now includes a whitelist of allowed blocks or directives. If a module or anyone uses variables like {{config path=”web/unsecure/base_url”}} and {{...
42
votes
4answers
47k views

How to check the latest patch version applied to magento?

I just applied the security patch PATCH_SUPEE-5344_CE_1.8.0.0_v1-2015-02-10-08-10-38.sh Since I have no SSH access to the web server, the provider did the work for me. How can I check by myself if ...
37
votes
9answers
15k views

Security Patch SUPEE-10415 - Possible Issues?

New Magento 1 patch has been released, SUPEE-10415. This patch provides protection against several types of security-related issues Info page: https://magento.com/security/patches/supee-10415 ...
35
votes
11answers
11k views

Security Patch SUPEE-10266 - Possible issues?

A new security patch is out for Magento 1, addressing 13 APPSEC issues https://magento.com/security/patches/supee-10266 What common issues do you have to watch out for when applying this patch? ...
35
votes
2answers
9k views

Error after successfull patch SUPEE-5994: Class 'Mage_Install_Controller_Router_Install' not found

I successfully installed the SUPEE-5994 patch : [root@x]# sh PATCH_SUPEE-5994_EE_1.14.1.0_v1-2015-05-14-05-05-02.sh Checking if patch can be applied/reverted successfully... Patch was applied/...
29
votes
4answers
2k views

New patch supee-6788 how to apply patch

After weeks of waiting for the patch today (27.10.2015) it was released: SUPEE-6788 A lot of things were patched and also is encouraged to review installed modules for possible vulnerabilities. I ...
27
votes
6answers
7k views

Magento security patch SUPEE-6482, What is patched?

Today 04.08.2015 there was a new security patch released, some colleagues and I were checking the patch, and is always nice to have some discussion about what changed, also does anyone know what are ...
24
votes
6answers
14k views

SUPEE-6285 patch, what has been changed?

OK, somebody has to ask this: today, 7/7/2015 a new security patch for Magento < 1.9.2 has been released. update your shops ASAP! But what has been changed? Are there known exploits of the ...
23
votes
17answers
4k views

Security Patch SUPEE-11086 - Possible issues?

Magento has released a new security patch for M1, and updates for M1 and M2. These releases include critical security fixes. "We strongly recommend that all merchants upgrade as soon as possible." ...
21
votes
5answers
6k views

Watermark get black background when transparent

I've installed PATCH SUPEE 9767 on my magento 1.9.2.4 shop. Now i've uploaded a new Watermark but the background changes to black. Is this a problem since the new update? On a other magento 1.9.2.4 ...
21
votes
5answers
2k views

How to get information about Magento security patches?

Today a friend alerted me about a critical security update for Magento - SUPEE-5344. I didn't see any articles about this patch on major IT websites. Even if I google for this update, I see SE pages ...
21
votes
5answers
15k views

Why does PATCH_SUPEE-6788 appear to have no effect on a 1.7.0.2 installation?

Note: This issue appears to apply to all versions of Magento which received the SUPEE-6788 patch. You'll see in my answer that both .htaccess and .htaccess.sample need to be restored for the patch ...
20
votes
16answers
6k views

Security Patch SUPEE-10888 - Possible issues?

SUPEE-10888 is a new security patch for Magento 1 which addresses 12 security issues. https://magento.com/security/patches/supee-10888 SUPEE-10888, Magento Commerce 1.14.3.10 and Open Source 1.9.3....
18
votes
6answers
13k views

SUPEE-9767 Patch/CE 1.9.3.3 - One Page Checkout - Customer Registration issue

On a clean, vanilla install of Magento 1.9.2.4, patched with SUPEE-8788, SUPEE-9652 and SUPEE-9767, and with the new 'Enable Form Key Validation On Checkout' setting turned on, following a successful ...
18
votes
1answer
2k views

Patch 5994 is causing module Adminhtml 404 Status Error

I applied the Patch 5994 the other day and it has caused the admin section of a module I build to throw a 404. Has anyone else had this. The module is fine on the frontend though. It's Magento 1.8.1....
17
votes
4answers
4k views

SUPEE-9767, modman and symlinks

I would like to patch a Magento shop with SUPEE-9767. The documentation for SUPEE-9767 tells me to disable Symlinks setting before applying the patch: Before applying the patch or upgrading to the ...
16
votes
4answers
4k views

SecurityPatch 9652: Possible problems after SUPEE-9652 applied

Magento has released its security patch SUPEE-9652, for Magento 1.x CE and EE I just want to know what are the possible problems after applying this security patch and What are the new changes in ...
16
votes
3answers
3k views

When is Magento CE 1.9.2 going to be released?

What is the release date for Magento Community Edition 1.9.2? In Magento's official post they say it will be released in "the next few weeks", which is kind of vague. Does anyone know a (unofficial) ...
15
votes
14answers
5k views

SUPEE-10975 Potential Issues

SUPEE-10975 has been released, it would be great to know if anyone runs into any issues while trying to apply this, will this conflict with the most recent patch that adds 7.2 support? So far these ...
15
votes
2answers
6k views

Magento hacked even after applied patch

Some days before my Magento community edition 1.8.1 site is hacked, because we are late to apply the patch. we found certain files were changed those are index.php [hackers added some code to it]. ...
15
votes
2answers
4k views

Applying Magento CE Patches

Per the Magento download page, under the patches section Please upload the patch into your Magento root directory and run the appropriate SSH command: For patch files with the file extension `....
14
votes
15answers
8k views

Security Patch SUPEE-10752 - Possible issues?

A new security patch is out for Magento 1, addressing 25 APPSEC issues https://magento.com/security/patches/supee-10752 What common issues do you have to watch out for when applying this patch? ...
14
votes
6answers
1k views

Patch or Core Hack

When I'm on a system upgrade project, one of the things I do is diff a client's system against a fresh Magento installation. I'm looking for core hacks or additional files that aren't part of ...
12
votes
3answers
2k views

Should I upgrade or patch Magento?

I am currently patching Magento with the latest patches and wondered whether it is worth applying the patches or upgrading to the latest version? As far as I can tell the only changes seem to be the ...
12
votes
1answer
572 views

Security reminders keep rolling in… (SUPEE-5344 & SUPEE-1533)

I have several Magento installations, that I manage on behalf of our clients. We already patched the vulnerabilities, but the warnings keep rolling in. We just received the third warning on all sites. ...
11
votes
1answer
3k views

Security Patch SUPEE-7405, issue with api/v2_soap/?wsdl [duplicate]

I get the following error when going to api/v2_soap/?wsdl: Argument 2 passed to Mage_Core_Model_Config::_makeEventsLowerCase() must be an instance of Mage_Core_Model_Config_Base, instance of ...
9
votes
4answers
10k views

Issue in Admin Panel after SUPEE Patch 8788 installation

I have Magento CE 1.9.2.4 installed along with patches (5377,1533,4788 etc. almost all patches). This question also reveals issues that may/surely occur in any custom module involving Image uploads ...
9
votes
2answers
7k views

Error! Some required system tools when trying to apply Magento patches via SSH

I have been trying to apply some Magento patches via SSH (SUPEE-5344 and SUPEE-1533) from the Magento Community Edition download page (https://www.magentocommerce.com/products/downloads/magento/) I ...
9
votes
3answers
1k views

Cannot edit widgets in WYSIWYG editor anymore

Recently, editing widgets in the WYSIWYG editor does not work anymore. The browser console shows the following error when I click on a widget: Uncaught DOMException: Failed to execute '...
9
votes
1answer
4k views

ERROR: “/app/etc/” must exist for proper tool work magento 1.9

I am trying to install the newly release security patch for magento 1.9. I am working on window system. and I am getting the following error. D:\xampp\htdocs\magento>sh PATCH_SUPEE-1533_EE_1.13....
8
votes
6answers
5k views

Magento 1.9.2.1 SUPEE-7405 admin not working

I installed the new patch today - SUPEE-7405 via FTP from this site. https://magentary.com/kb/install-supee-7405-without-ssh/ Now, it looks like my front end store is still working, however when I ...
8
votes
6answers
5k views

How to check if Magento patch has been installed?

So I just installed recent critical patches SUPEE-5994 + SUPEE-5344 + SUPEE-1533 - through SSH on my server. I did the following steps for installing each patch: Downloaded the patches from: https://...
8
votes
1answer
198 views

Some Security patches Shows Error executing check in magereport

I have checked my URL in mage report for security patch but it has shown Error executing check message in some security patch. so I want to know why this type of message comes from magerepot and how ...
8
votes
2answers
2k views

How to check applied patches in magento 2

Is there a way in Magento 2 to check the applied patch status? Just like we can check the patch status in Magereport in Magento 1?
7
votes
5answers
6k views

Check my Magento security status

I just had trouble to install the SUPEE-1533 and SUPEE-5344 on CE 1.7.0.0. I did it through the FTP method from Magentary. Question is then : how can I make sure that my Magento install got all ...
7
votes
2answers
996 views

Applied PATCH_SUPEE-6285 - Do I need to do anything else?

After being prompted to install the new patch I went ahead and did so straight away. But now I've gone back and looked at the .sh file I noticed there is changes being made to template files. I had ...
7
votes
5answers
8k views

How to apply the Magento 2 patches?

I'm using the Magento 2.1.6 and I want to apply the patch CE-MAGETWO-67805.patch. How can I apply the *.patch files?
7
votes
2answers
17k views

Admin menu path to: Enable Form Key Validation On Checkout

After installing patch SUPEE-9767 the "Enable Form Key Validation On Checkout" warning appeared and from the link provided in that warning I was able to enable Form Key Validation. But, after having ...
7
votes
7answers
10k views

Image Upload issue after PATCH 8788 install on 1.9.2.4 [duplicate]

After installing Patch 8788 on 1.9.2.4, product image upload says the upload is complete but it not show on the front end. I checked the media directory but image not uploaded.
7
votes
1answer
2k views

Patch SUPEE-7405 v1.1 release, is it same as we had 7405 earlier?

It's not been long since I had applied SUPEE-7405 and magento says there is another one available. I am not sure if this is the same as before. Today, we are distributing updates that improve our ...
7
votes
1answer
7k views

How to check what suppee patches have been installed on Magento [duplicate]

I'm about to start working on a Magento website and with the two security patches released yesterday (SUPEE-7405 & SUPEE-7616) I would like to ensure that all other security patches were installed ...
7
votes
1answer
962 views

How PHP 5.4 support patch for Magento helps?

I've installed Magento 1.8 Community Edition and PHP version - 5.5.8 Operating System: CentOS 6.4 I have installed and configured nginx 1.0.15 and Redis for caching. And it seems Magento 1.8 works ...
7
votes
2answers
811 views

What's the “NEW ZEND FRAMEWORK 1 SECURITY VULNERABILITY”?

Today we learned that Magento has a new vulnerability. They call it NEW ZEND FRAMEWORK 1 SECURITY VULNERABILITY. It's described as follow here: To protect your site from this vulnerability, you ...