brentwpeterson / magento-patches

As many Magento patches as I can find!

Magento Resources and Links

I have been looking for a good repository for all resources for Magento and I thought I will start putting them here for now. I am inspired by Alessandro Ronchi (https://twitter.com/aleron75) who has been putting out a list of resources.

• Magento 2 Docker images for extension testing - https://github.com/michielgerritsen/magento2-extension-integration-test
• MRM Commerce Magento 2 Coding Standard - https://github.com/mrm-commerce/magento-coding-standard-phpcs
• ConvertM1M2 - Convert M1 ext to M2 ext - https://github.com/unirgy/convertm1m2
• Magento Cheat sheets - https://cheatography.com/tag/magento/

Magento Patches

Welcome to the Magento Patch Exchange. This is an effort to collect all the Magento patches in one spot for both EE and CE. I have been neglectful in properly maintaining this repo but I have made some recent efforts to merge pull requests, answer issues and submit the latest EE patches.

Reference to patches here

https://docs.google.com/spreadsheets/d/1MTbU9Bq130zrrsJwLIB9d8qnGfYZnkm4jBlfNaBF19M/edit#gid=192164130

What to do?

If you have a patch that is not in this repo please open a pull request and I will merge the patch. If you see a patch that shouldn’t be there or is just plain wrong, please tell me. I will investigate it and remove it if necessary.

Issues

Please do not open a support ticket for your Magento site. The best place to get your Magento questions answered is here http://magento.stackexchange.com/

More questions?

Please contact me on twitter @brentwpeterson

magento-patches's Issues

10975 missing for ee1.12

SUPEE-10384 is out

See https://magento.com/security/patches/supee-10266

Note: SUPEE-10266 for Magento Commerce (Enterprise Edition) includes a fix for a functional issues MPERF-9685, related to checkout with a zero order amount. This fix is not included in release 1.14.3.6. However, in some cases, SUPEE-10266 can cause issues in the checkout process. Specifically, if a customer enables the Add gift options checkbox during checkout, the checkout process will not progress beyond the payments step. Magento released a fix for this issue as a new patch SUPEE-10384, that needs to be installed on top of SUPEE-10266.

Also referenced here https://magento.stackexchange.com/questions/193279/security-patch-supee-10266-possible-issues

PHP 7.2 Support Patches for Magento 1 EE

Hello!
These patches are missing:

PATCH-1.14.2.0-1.14.2.4_PHP7.2_v2
PATCH-1.14.3.0_PHP7.2_v2
PATCH-1.14.3.1-1.14.3.9_PHP7.2_v2

Is it possible to add them too?

SUPEE-6788 Site shutdown random

My site shutdown randomly. Many pages are working fine but many images and home mostly stop working.

We are still talking with magento team but still they could not figure it out.

Last response from them

He says that he noticed you have installed custom module 'Innoexts_Warehouse' that adds column 'stock_id' to several tables, some core functionality is not compatible with these changes and could bring the site down.
Disabling this module in 'app/etc/modules/Innoexts_Warehouse.xml' WILL NOT HELP, because database structure will not be reverted.
He recommends you ask support from the module vendor/supplier to revert database changes or fix that module.

My engineer recommends you disable this customization, next, remove record by id 2 from table cataloginventory_stock. Also, according to install/update scripts from directory:

app/code/local/Innoexts/Warehouse/sql/warehouse_setup/.php*
You should remove all changes which was done by custom module from magento tables.

SUPEE-8788 missing for EE1.14.3.2

I need this

Wrong patch for supee 11086 on magento 1.8.0

1.8.0 should link to the patch: PATCH_SUPEE-11086_CE_1.9.1.0_v1.sh

Not to the patch: PATCH_SUPEE-11086_CE_1.7.0.2_v1-2019-03-26-03-02-36.sh

See: https://magento.stackexchange.com/questions/268967/supee-11086-for-1-8-x/268994#268994

10570 (v1 and v2) patches missing for 1.8.1.0

SUPEE-9652 - Released on 2/7/2017

EE patches in CE folders.

The repo incorrectly has EE patches in the CE folders.

A quick grep in CE1.9 shows

$ grep -o 'Enterprise' *
grep: customize: Is a directory
PATCH_SUPEE-10570_CE_v1.9.0.1_v1-2018-02-23-06-18-06.sh:Enterprise
PATCH_SUPEE-10570_CE_v1.9.0.1_v1-2018-02-23-06-18-06.sh:Enterprise
PATCH_SUPEE-10570_CE_v1.9.0.1_v1-2018-02-23-06-18-06.sh:Enterprise
PATCH_SUPEE-10570_CE_v1.9.0.1_v1-2018-02-23-06-18-06.sh:Enterprise
PATCH_SUPEE-10570_CE_v1.9.1.1_v1-2018-02-23-06-16-20.sh:Enterprise
PATCH_SUPEE-10570_CE_v1.9.1.1_v1-2018-02-23-06-16-20.sh:Enterprise
PATCH_SUPEE-10570_CE_v1.9.1.1_v1-2018-02-23-06-16-20.sh:Enterprise
PATCH_SUPEE-10570_CE_v1.9.1.1_v1-2018-02-23-06-16-20.sh:Enterprise
PATCH_SUPEE-10570_CE_v1.9.2.2_v1-2018-02-23-06-12-55.sh:Enterprise
PATCH_SUPEE-10570_CE_v1.9.2.2_v1-2018-02-23-06-12-55.sh:Enterprise
PATCH_SUPEE-10570_CE_v1.9.2.2_v1-2018-02-23-06-12-55.sh:Enterprise
PATCH_SUPEE-10570_CE_v1.9.2.2_v1-2018-02-23-06-12-55.sh:Enterprise
PATCH_SUPEE-10570_CE_v1.9.2.4_v1-2018-02-23-06-04-15.sh:Enterprise
PATCH_SUPEE-10570_CE_v1.9.2.4_v1-2018-02-23-06-04-15.sh:Enterprise
PATCH_SUPEE-10570_CE_v1.9.2.4_v1-2018-02-23-06-04-15.sh:Enterprise
PATCH_SUPEE-10570_CE_v1.9.2.4_v1-2018-02-23-06-04-15.sh:Enterprise
PATCH_SUPEE-10570_CE_v1.9.3.1_v1-2018-02-23-06-02-52.sh:Enterprise
PATCH_SUPEE-10570_CE_v1.9.3.1_v1-2018-02-23-06-02-52.sh:Enterprise
PATCH_SUPEE-10570_CE_v1.9.3.1_v1-2018-02-23-06-02-52.sh:Enterprise
PATCH_SUPEE-10570_CE_v1.9.3.1_v1-2018-02-23-06-02-52.sh:Enterprise
PATCH_SUPEE-10570_CE_v1.9.3.7_v1-2018-02-23-06-01-40.sh:Enterprise
PATCH_SUPEE-10570_CE_v1.9.3.7_v1-2018-02-23-06-01-40.sh:Enterprise
PATCH_SUPEE-10570_CE_v1.9.3.7_v1-2018-02-23-06-01-40.sh:Enterprise
PATCH_SUPEE-10570_CE_v1.9.3.7_v1-2018-02-23-06-01-40.sh:Enterprise
Binary file PATCH_SUPEE-8788_CE_1.9.0.0_v1-2016-10-11-06-55-32.sh matches
PATCH_SUPEE-8788_CE_1.9.0.0_v2-2016-10-14-09-35-54.sh:Enterprise
PATCH_SUPEE-8788_CE_1.9.0.0_v2-2016-10-14-09-35-54.sh:Enterprise
Binary file PATCH_SUPEE-8788_CE_1.9.0.1_v1-2016-10-11-06-57-03.sh matches
PATCH_SUPEE-8788_CE_1.9.0.1_v2-2016-10-14-09-37-14.sh:Enterprise
PATCH_SUPEE-8788_CE_1.9.0.1_v2-2016-10-14-09-37-14.sh:Enterprise
Binary file PATCH_SUPEE-8788_CE_1.9.1.0_v1-2016-10-11-06-57-54.sh matches
Binary file PATCH_SUPEE-8788_CE_1.9.1.1_v1-2016-10-11-06-58-57.sh matches
Binary file PATCH_SUPEE-8788_CE_1.9.1.1_v2-2016-10-14-09-39-13.sh matches
Binary file PATCH_SUPEE-8788_CE_1.9.2.0_v1-2016-10-11-06-59-47.sh matches
Binary file PATCH_SUPEE-8788_CE_1.9.2.0_v2-2016-10-14-09-39-55.sh matches
Binary file PATCH_SUPEE-8788_CE_1.9.2.1_v1-2016-10-11-07-00-43.sh matches
Binary file PATCH_SUPEE-8788_CE_1.9.2.1_v2-2016-10-14-09-40-36.sh matches
Binary file PATCH_SUPEE-8788_CE_1.9.2.2_v1-2016-10-11-07-01-37.sh matches
Binary file PATCH_SUPEE-8788_CE_1.9.2.2_v2-2016-10-14-09-41-22.sh matches
Binary file PATCH_SUPEE-8788_CE_1.9.2.3_v1-2016-10-11-07-02-22.sh matches
Binary file PATCH_SUPEE-8788_CE_1.9.2.3_v2-2016-10-14-09-42-08.sh matches
Binary file PATCH_SUPEE-8788_CE_1.9.2.4_v1-2016-10-11-07-03-46.sh matches
Binary file PATCH_SUPEE-8788_CE_1.9.2.4_v2-2016-10-14-09-42-47.sh matches
PATCH_SUPEE-9767_CE_1.9.3.2_v1-2017-05-25-09-03-28.sh:Enterprise
PATCH_SUPEE-9767_CE_1.9.3.2_v1-2017-05-25-09-03-28.sh:Enterprise
PATCH_SUPEE-9767_CE_1.9.3.2_v1-2017-05-25-09-03-28.sh:Enterprise
PATCH_SUPEE-9767_CE_1.9.3.2_v1-2017-05-25-09-03-28.sh:Enterprise
PATCH_SUPEE-9767_CE_1.9.3.2_v1-2017-05-25-09-03-28.sh:Enterprise
PATCH_SUPEE-9767_CE_1.9.3.2_v1-2017-05-25-09-03-28.sh:Enterprise
PATCH_SUPEE-9767_CE_1.9.3.2_v1-2017-05-25-09-03-28.sh:Enterprise
PATCH_SUPEE-9767_CE_1.9.3.2_v1-2017-05-25-09-03-28.sh:Enterprise

Magento patch SUPEE-8967 is out

Mastercard 2 Series BIN: Bank Identification Numbers Range Update
(Uploaded: 5/2/2017 4:02 AM)

SUPEE-8967 for EE 1.9.0.0-1.14.2.4

PATCH_SUPEE-8967_EE_1.13.1.0_v1-2017-05-02-06-07-20.sh

SUPEE-8967: This patch provides Magento support for MasterCard’s updated range of BIN (card) numbers. It applies only to Magento versions prior to EE 1.14.3.0. This fix is already included in Magento EE 1.14.3.0 and later releases.
For EE 1.9.0.0, please install patch PATCH_SUPEE-2725_EE_1.9.0.0_v1.sh before installing PATCH_SUPEE-8967_EE_1.13.1.0_v1.sh.
For EE 1.9.1.0 - EE 1.11.2.0, please install PATCH_SUPEE-2725_EE_1.9.1.1-EE_1.11.2.0_v2.sh before installing PATCH_SUPEE-8967_EE_1.13.1.0_v1.sh.
For EE 1.12.0.0 - EE 1.13.1.0, please install patch PATCH_SUPEE-1049_EE_1.12.0.2_v2.sh before installing PATCH_SUPEE-8967_EE_1.13.1.0_v1.sh.
For EE 1.14.0.0 - EE 1.14.2.4, you just need to install this patch 8967_EE_1.13.1.0_v1.sh.

SUPEE-11346 is missing

Hi, I've stumbled upon your repo when I was searching for M1 patches, and now I couldn't find the latest patch SUPEE-11346 - neither for CE, nor for EE. The patch is mentioned there: https://helpx.adobe.com/security/products/magento/apsb20-41.html

Do you have any plans to add SUPEE-11346 patch to the repo?

Zend Security Upgrade patch for EE?

Great resource you've put together Brent!

Curious if there's a Zend Security Upgrade patch available for EE versions at all? The top grid in the readme file mentions it on the right-most column.

Thanks :)

Missing SUPEE-11155 for EE

Missing SUPEE-11155 for EE

Add Patch 1868 and 6237

Can you please add patches SUPEE-1868 and SUPEE-6237 for Magento CE 1.7.0.2?
Thank you!

8778 Questions and Issues

Hello,

I was hoping that some advice could be given for installing the new 8788 patches. I understand the two steps:

• Install SUPEE-3941 (if not installed yet) - that one makes sense
• Revert SUPEE-1533 (if installed) - this is such an old patch why does this need to be reverted?
• Revert SUPEE-8788 v1 - has already been installed. But as we use version control there would be no reason to keep the patch file in the repository we remove the file once it has been patched. Then commit those changes. But I have noticed that it says to revert v1. So what would the process to revert the patch.
• Install SUPEE-8788 v2 - this once makes sense. Is there likely to be any updates or surprises, say a version 3 in the coming weeks? Also what is the current process with Enterprise Edition.

Thanks,

Rob

There is also syntax errors: sh PATCH_SUPEE-8788_CE_1.9.0.1_v1-2016-10-11-06-57-03.sh
PATCH_SUPEE-8788_CE_1.9.0.1_v1-2016-10-11-06-57-03.sh: 6: PATCH_SUPEE-8788_CE_1.9.0.1_v1-2016-10-11-06-57-03.sh: Syntax error: newline unexpected

Missing 10888 for ee1.14.3.6

Missing 10888 for ee1.14.3.6

Probably Incomplete Sections

Hello, my name is Samuel
I've checked that the lines below are probably incomplete
This can probable cause magento errors

magento-patches/CE1.8/PATCH_SUPEE-10266_CE_1.8.1.0_v1-2017-09-13-06-28-08.sh

Line 214 in 31fd79b

@@ -96,7 +96,10 @@ class Mage_Adminhtml_Block_Widget_Form_Container extends Mage_Adminhtml_Block_Wi

@@ -96,7 +96,10 @@ class Mage_Adminhtml_Block_Widget_Form_Container extends Mage_Adminhtml_Block_Widget_Container

magento-patches/CE1.8/PATCH_SUPEE-10266_CE_1.8.1.0_v1-2017-09-13-06-28-08.sh

Line 230 in 31fd79b

@@ -51,6 +51,13 @@ class Mage_Adminhtml_Controller_Action extends Mage_Core_Controller_Varien_Actio

@@ -51,6 +51,13 @@ class Mage_Adminhtml_Controller_Action extends Mage_Core_Controller_Varien_Action

magento-patches/CE1.8/PATCH_SUPEE-10266_CE_1.8.1.0_v1-2017-09-13-06-28-08.sh

Line 244 in 31fd79b

@@ -162,7 +169,7 @@ class Mage_Adminhtml_Controller_Action extends Mage_Core_Controller_Varien_Actio

@@ -162,7 +169,7 @@ class Mage_Adminhtml_Controller_Action extends Mage_Core_Controller_Varien_Action

magento-patches/CE1.8/PATCH_SUPEE-10266_CE_1.8.1.0_v1-2017-09-13-06-28-08.sh

Line 374 in 31fd79b

@@ -64,6 +64,10 @@ class Mage_Adminhtml_Newsletter_QueueController extends Mage_Adminhtml_Controlle

@@ -64,6 +64,10 @@ class Mage_Adminhtml_Newsletter_QueueController extends Mage_Adminhtml_Controller_Action

magento-patches/CE1.8/PATCH_SUPEE-10266_CE_1.8.1.0_v1-2017-09-13-06-28-08.sh

Line 389 in 31fd79b

@@ -142,6 +142,10 @@ class Mage_Adminhtml_Newsletter_TemplateController extends Mage_Adminhtml_Contro

@@ -142,6 +142,10 @@ class Mage_Adminhtml_Newsletter_TemplateController extends Mage_Adminhtml_Controller_Action

magento-patches/CE1.8/PATCH_SUPEE-10266_CE_1.8.1.0_v1-2017-09-13-06-28-08.sh

Line 541 in 31fd79b

@@ -152,4 +152,20 @@ class Mage_Sales_Model_Resource_Order_Item_Collection extends Mage_Sales_Model_R

@@ -152,4 +152,20 @@ class Mage_Sales_Model_Resource_Order_Item_Collection extends Mage_Sales_Model_Resource_Order_Collection_Abstract

Thank you for your attention.

Request: SUPEE 11314 v2

Magento has released v2 of this patch which resolves a massive security issue that v1 introduced:

• https://magentary.com/kb/magento-new-admin-users-with-empty-data/
• https://magento.stackexchange.com/a/312524/335