cancel
Showing results for 
Search instead for 
Did you mean: 

How to check if the security patches are installed successfully?

How to check if the security patches are installed successfully?

I got the notification "It is critical for you to download and install 2 previously-released security patches (SUPEE-5344 and SUPEE-1533) from the Magento Community Edition download page (https://www.magentocommerce.com/products/downloads/magento/). Please do this immediately, as Check Point Software Technologies has published a technical description of how they discovered the issue, which we feel might serve as a tutorial for implementing an attack against your website.".

 

Actually I have installed them last week.
Can I ignore the notificaiton?
And how can I check if I installed successfully?

If I have installed successfully, will I still get the relative notifications?
Thanks.

11 REPLIES

Re: How to check if the security patches are installed successfully?

Hi @anita01021989, as @chiefair mentioned this has been discussed at great lengths in those threads. That being said, you can check your site at http://magento.com/security-patch to see if your site is vulnerable and also to read signs of a compromised site. The admin notifications can be cleared by reading them. They are there to tell you about the patch, but they are not based on whether or not you have already patched.

--

Community Manager, Magento
Problem solved? Click Accept as Solution!
Still stuck? Check out our documentation: https://magento.com/resources/technical

Re: How to check if the security patches are installed successfully?

Hey @sherrie 

So if my site passes the "bug check" dose that mean i do not have to worry about the patch?

Re: How to check if the security patches are installed successfully?

Hi @dangousa! If the site shows you're not vulnerable then you should be good, but unless you're on 1.9.1.1 or 1.14.2 you should've needed to apply the patch. Double check the list of signs of a compromised site at magento.com/security-patch to be safe.

--

Community Manager, Magento
Problem solved? Click Accept as Solution!
Still stuck? Check out our documentation: https://magento.com/resources/technical

Re: How to check if the security patches are installed successfully?

Thank you for your help! it was much appreciated!

 

I have another question, is the new (supee 6285) patch required for the Version 1.9.0.1?

Re: How to check if the security patches are installed successfully?

Re: How to check if the security patches are installed successfully?

Hi @dangousa, yes 6285 is needed for anything prior to 1.9.2. Glad to hear you were able to figure out your original question!

--

Community Manager, Magento
Problem solved? Click Accept as Solution!
Still stuck? Check out our documentation: https://magento.com/resources/technical

Re: How to check if the security patches are installed successfully?

THanks for the info @sherrie is, do you know if there is a site to do a vulnerablity check for this update? similar to the one for the shoplift bug?

Re: How to check if the security patches are installed successfully?

There is not.

 

You can check applied.patches.list in the app/etc/ directory to see which patches have been successfully applied. Alternatively @philwinkle has built a free extension to display all applied patches in the admin: https://github.com/philwinkle/Philwinkle_AppliedPatches

--

Community Manager, Magento
Problem solved? Click Accept as Solution!
Still stuck? Check out our documentation: https://magento.com/resources/technical