Questions related to Magento community version

Magento Open Source Release Notes

This patch addresses both security and functional issues discovered when using the SUPEE-9767 patch. We recommend upgrading your Magento store to this latest version. Here are your upgrade options:

  • Upgrade to Magento Open Source You don’t need to revert any patches or install SUPEE-9767 version 2 as version 2 is already included in the Open Source release.
  • If you’ve already installed SUPEE-9767 version 1, you can either:
    • Upgrade to Magento Open Source, or
    • revert SUPEE-9767 version 1, then install SUPEE-9767 version 2.
  • If you haven’t installed SUPEE-9767 version 1, you can either:
    • Upgrade to Magento Open Source, or
    • install SUPEE-9767 version 2.

See Magento Security Center for a comprehensive discussion of these security issues.

This release also provides support for the following functional issues:

General fixes

  • We’ve restored missing strip_tags functionality in the checkout JavaScript.
  • We’ve changed how Magento validates form keys during the generic five-step checkout process. Previously, customer registration failed during standard checkout processing if form key authentication was enabled.
  • Magento now displays the Allow_symlinks message in the Admin message area as expected.
  • Magento now preserves the background transparency of uploaded images as expected. Previously, transparency was lost after the image was uploaded, resulting in an unusable image.
  • You can now use Checkout with Multiple Addresses when checkout form validation is enabled.


  • The Allow symlinks option is now disabled during installation or upgrade processes. Previously, when you changed the Allow symlinks setting to true in the database before upgrading and then installing the patch, this option remained enabled, but you could no longer access it from the Admin panel.

This patch is available from Magento Tech Resources.

Related tags:

history | excerpt history