Contents
Are there any security patches available for Magento?
To help prevent against potential attacks, Magento has released patches for this issue. For complete details, install instructions, and recommendations, see: https://magento.com/security/security-update-potential-vulnerability-magento-admin-url-location
Is there a Content Security Policy for Magento?
Magento is making Content Security Policy available for Magento Open Source and Commerce v2.3.5-p1. The release of Magento 2.3.5-p1 marks the first phase of our implementation and makes CSP available in report-only mode by default. Magento has released updates for Magento Commerce and Open Source editions.
Which is the best security tool for Magento?
Magento Security Scan Tool Monitor your sites for security risks, update malware patches, and detect unauthorized access with Magento Security Scan, the latest FREE tool from Magento Commerce. Magento has released updates for Magento Commerce and Open Source editions.
Which is the latest release of Magento open source?
Magento Open Source 2.2.10 includes 75 critical security enhancements, 147 core code fixes and improvements, and community-submitted fixes to 56 GitHub issues. This release provides support for PHP 7.2.x. It also introduces PSD2 compliance for core payment methods and the deprecation of the non-PSD2-compliant Cybersource and eWay payment modules.
Is there a vulnerability in Magento store locator?
A critical vulnerability exists in the Magestore Store Locator extension version 1.0.2 (and earlier versions) that could result in unauthorized access to sensitive information. Magento urges customers running this extension to immediately disable this extension or block requests.
Which is the affected version of Magento Commerce?
Affected Magento versions: Magento Commerce and Open Source v2.3.4 (on prem and cloud). See Applying patches for specific instructions on downloading and applying Magento patches. This patch resolves issues that users of Magento 2.3.3 experience in deployments where Elasticsearch 6.x is used as the catalog search engine.
Which is the latest version of Magento for PHP?
Patch MDVA-84 for Magento Community Edition – MDVA-84.zip, .tar.gz, and .tar.bz2, Apply this patch if you are running Magento CE 2.0.1 and your Magento server runs 7.0.1 or PHP 7.0.2. It adds support for PHP 7.0.2 to the updater application. See technical bulletin Issues upgrading to 2.0.1 (Jan. 28, 2016) for more information.