Magento 2.1.1
This update after the big 2.1 update contains functional fixes and no security related fixes.
Fixes issues:
- The installation with magento setup:upgrade –keep-generated works now and you can also upgrade now with sample data to 2.1.1.
- The Category page now displays current, rather than outdated, product prices.
- ier pricing now works correctly with full page cache.
- Cart Price rules are now applied as expected to payment method conditions.
- Magento now implements the minicart maximum display recently added item setting to your shopping cart.
- The speed of static asset deployment and storefront performance was improved.
- Magento now displays configurable products as expected after creation.
- You can now save a product with images multiple times.
- Magento now correctly displays customer address during account creation.
- You can now use Braintree as a payment method when applying reward points or store credit to an order.
- and a few more.
Magento 2.1.2
The security update 2.1.2 of Magento contains security and functional fixes and also support for the latest PHP and MySQL versions.
Security Fixes:
- Fixed issue which allowed to insert malicious JavaScript,
- You can no longer change or fake a product price from the Magento storefront and then complete an order with that faked price.
- Fixed issue with PHP code execution during checkout.
- Fixed issue with retrieving potentially sensitive information through the use of backend media.
- Sessions now expire as expected after logout.
- Kount and 3D Secure now work as expected for Braintree Vault.
- You can no longer delete a currently logged-in user.
- The Guest order view protection code is no longer vulnerable to brute force attacks.
- You can no longer manipulate the full page cache to store incorrect pages under regular page URL entries.
- Fixed issue with potential storage of malicious XSS code in the body of an email template.
- Fixed issue with potential SQL injection through the Zend framework through ordering or grouping parameters.
Functional fixes:
- The Sales API was improved and has now the ability to change the status of shipment an of an invoice.
- Magento now updates the mini cart as expected when you reorder an item.
- Changing the city field of an order now affects the shipping rate as expected.
- Magento now correctly renders HTML tags on the Sales Order page price field.
- Visual swatches are now displayed in search results.
For more information about the security fixes visit the Magento Security Center. The release notes you can find here.
Remember to create a full backup of all your files and your database before updating.
Schreibe einen Kommentar