Magento - Archiv (Seite 1/24)

On October 10, 2023 Adobe published various security releases for Adobe Commerce and Magento Open Source. Security highlights All 3 releases introduce a new full page cache configuration setting that helps to mitigate the risks associated with the {BASE-URL}/page_cache/block/esi HTTP endpoint. This endpoint supports unrestricted, dynamically loaded content fragments from Commerce layout handles and block structures. The

On August 7, 2023 Adobe released 3 new versions of Magento 2.4. jQuery-UI library version 1.13.1 has a known security vulnerability (CVE-2022-31160) that affects multiple versions of Adobe Commerce and Magento Open Source. This library is a dependency of Adobe Commerce and Magento Open Source 2.4.4, 2.4.5, and 2.4.6. Merchants running affected deployments should apply

Yesterday, on June 13, 2023 Adobe released 3 new versions of Magento 2.4. Magento 2.4.6-p1 Adobe Commerce 2.4.6-p1 is a security release that provides three security fixes that enhance your Adobe Commerce 2.4.6 or Magento Open Source 2.4.6 deployment. It provides fixes for vulnerabilities that have been identified in previous releases. See full release notes

On March 14, 2023 Adobe released 3 new versions of Magento 2.4. Magento 2.4.5-p2 Adobe Commerce 2.4.5-p2 is a security release that provides three security fixes that enhance your Adobe Commerce 2.4.5 or Magento Open Source 2.4.5 deployment. It provides fixes for vulnerabilities that have been identified in previous releases. See Adobe Security Bulletin for the latest

OpenMage 19.4.22 and 20.0.19 On January 26, 2023 versions 19.4.22 and 20.0.19 were released including 6 security fixes: All of these updates should be totally backward compatible, except one, CVE-2021-21395 – GHSA-r3c9-9j5q-pwv4 – Reset Password not protected against well-timed CSRF in fact is a breaking change and you will need to take action after upgrading

In December 2022, the OpenMage project released 3 minor updates in their mission to provide continued long-term support (LTS) for Magento 1. It is recommended for all Magento 1 merchants to upgrade to OpenMage 19.x or 20.x to benefit from regular security patches and performance optimizations. For the full change logs, click the following banner.

These are maintanance releases with small bugfixes, code cleanup, documentation improvements and a better overall PHPStan coverage. The minimum required PHP version was also bumped to 7.3 with intl extension enabled. The source code also finally has a much better «copyright» section, to thank all the team members who are contributing to the OpenMage project.

On October 11, 2022 Adobe released a security update for Adobe Commerce and Magento Open Source. This update resolves a critical and medium vulnerability.  Successful exploitation could lead to arbitrary code execution and security feature bypass. Affected Versions Product Version Platform Adobe Commerce 2.4.4-p1 and earlier versions 2.4.5 and earlier versions  All Magento Open Source 2.4.4-p1 and earlier versions2.4.5