3
votes
Patch is updated but still shown failed
Having the same issue, pretty annoying seeing these alerts in my inbox. What can be done? Site in question has all updates validated on magereport, is this a false positive like in the past?
I have ...
- 71
3
votes
How to solve "Unable to apply data patch" when upgrading?
Getting below error at the time of bin/magento setup:upgrade
Module ‘Magento_Wishlist’: Unable to apply data patch Magento\Wishlist\Setup\Patch\Data\CleanUpData for module Magento_Wishlist. Original ...
3
votes
Accepted
How to solve "Unable to apply data patch" when upgrading?
Probably happening because you have bundle products in your store.
Merchants who encounter this error after installing Magento 2.3.5 should upgrade to Magento 2.3.5-p1.
Merchants who encounter this ...
- 13.3k
3
votes
Accepted
Magento 2 - Security Vulnerability CVE-2022-35698 - Where can I find patch for 2.4.2?
The Security Vulnerability CVE-2022-35698 does not affect in Magento 2.4.2 version. This was confirmed by Nathan Smith – Adobe Commerce Application Security Engineering Manager.
You can read more ...
- 6,898
2
votes
Accepted
How to apply security patches in magento 2.3
The latest version of magento 2.3.5 is 2.3.5-p2.
To upgrade from 2.3.5-p1 to 2.3.5-p2, following the below steps:
Run command:
composer remove magento/product-community-edition --no-update && ...
- 6,898
2
votes
Magento 2 Security Updates APSB22-38 Patch
There is no patch for this security update. You have to update to the 2.4.3-p3 to apply the fix.
https://helpx.adobe.com/security/products/magento/apsb22-38.html
- 6,898
2
votes
Accepted
Problems applying security patches in Magento 2.3
I have tried to apply the following patch it works for me without any error,
Thanks & Regards,
- 461
1
vote
Magento 2.4.5 upgrade error: Could not find a magento/project package matching "magento/magento-cloud-metapackage 2.4.5"
Because you are accessing private package (Magento EE)
composer config --global http-basic.repo.magento.com <public_key> <private_key>
Image how key look like: https://i.stack.imgur.com/...
- 1,087
1
vote
Accepted
Applying Patches
This is the notification from the Magento Side. Patches are very important for your site it increase your performance and secures your site. A Magento security patch is a software release. It provides ...
- 662
1
vote
Applying Patches
The patch is a piece of the code that has some changes to fix the issues.
It's written according to the Magento version.
If you are using open-source then apply open-source patch or if you are using ...
- 522
1
vote
How to install Security Update patch APSB23-35
Apply only the security patch in your current magento. please follow the below commands.
Before you start running the command please check whether your current magento version is affected or not. : ...
- 9,073
1
vote
Accepted
Running security patch isn't working
You missing < between patch and <path_file>.
The correct command is:
patch -p1 < ACSD-47578_2.4.4_2.4.5_COMPOSER_patch.composer.patch
- 6,898
1
vote
Accepted
Magento 2.4.4: New Security patches now available
There is a security update available for Adobe Commerce - Magento | APSB22-48
Affected products and versions
Adobe Commerce on cloud infrastructure and on-premises, and Magento Open Source:
2.4.5
2.4....
- 6,898
1
vote
Accepted
In Admin: Magento Open source security patches now available
This is the notification from the Magento Side. Patches are very important for your site it increase your performance and secures your site.
A Magento security patch is a software release. It provides ...
- 662
1
vote
Accepted
cant download new patch APSB22-48
APSB22-48 does not affect Magento 2.4.2 if all applicable security hotfixes are applied. In other words, there are no patches, or hotfixes for APSB22-48 for Magento 2.4.2
You can see the full list of ...
- 6,898
1
vote
cant download new patch APSB22-48
This is not the patch. I Think this is the only security update from Adobe that you should upgrade your Magento version to enhance your Security. I already confirmed about this from Adobe also.
- 662
1
vote
Magento 2 - Security Vulnerability CVE-2022-35698 - Where can I find patch for 2.4.2?
Im guessing they will not include the patch for that version as its really outdated and not actively maintained.
- 708
1
vote
No APSB22-48 patches for Magento 2.3
Magento 2.3 is end of support, so there are no APSB22-48 patches for Magento 2.3.
Adobe will create a hotfix for all affected [supported] versions of the CVSS 10 from their last release. The hotfix ...
- 6,898
1
vote
Accepted
Magento 2.4.3-p1: Unable to apply critical security patch
There should be patch files for composer setups available here:
https://support.magento.com/hc/en-us/articles/4426353041293-Security-updates-available-for-Adobe-Commerce-APSB22-12
You can install it ...
- 2,038
1
vote
Accepted
patch -p1 < MDVA-43395_EE_2.4.3-p1_v1.composer.patch
waaaait, do You really keep vendor content in Your project Repo?
It is not really a good idea. Vendor catalog should be added to .gtignore.
You should manage packages via files compsoer.json and ...
- 1,457
1
vote
Accepted
How to fix XSS in website in url ? Magento 1
As mentioned in the comments
I can confirm that by default this doesn't happen. I can conclude that this has something to do with tour custom code. I assume that p parameter is paging for something ...
- 198k
1
vote
Accepted
Patch is updated but still shown failed
I decided to delete all the customers and scan again. No issue. I think the issue is complaining about pre existing customers have passwords that are less than a certain length
- 535
Only top scored, non community-wiki answers of a minimum length are eligible