Showing results for 
Search instead for 
Did you mean: 

New Security Patches and Releases – November 28, 2018

New Contributor

9801 Magento Commerce 2-3-600x170.jpg



On Tuesday,  November 28, Magento plans to release Magento 2.3.0  delivering new features, security updates, performance enhancements, and support for PHP 7.2. We also plan to release updates for Magento  1,  2.1, and 2.2  on the same day. These releases include important security enhancements, and it is recommended to prepare to update your Magento versions promptly.


Our commitment to security drives this release date across all release lines. As we developed and tested 2.3.0, any exposed security issues received reviews and fixes to 2.3.0 and all other applicable release lines. Releasing updates on the same schedule ensures all merchants receive timely updates and have opportunities to plan and test upgrades. We are dedicated to providing as many security fixes, features, and updates as quickly as possible to support all merchants, across all Magento versions and editions.


Planned Releases


Magento 2.3.0 includes new features and enhancements in addition to the security fixes also available in patches to earlier versions. When planning your upgrades, you may want to consider upgrading to 2.3.0 to take advantage of all security updates and latest features. To learn more, see Open Source and Commerce Release Notes, the Quick Start Guide, Availability information, and Tech Resources.


We’ll publish release notes and security patch details with the update releases for Magento Commerce and Open Source 2.2.7 and 2.1.16, Magento Open Source, and Magento Commerce


PHP Updates


We recommend reviewing the following PHP support in these releases:

  • 2.1.16 includes PHP 7.1 support
  • 2.2.7 continues to support PHP 7.1
  • 2.3.0 includes PHP 7.2 support
  • include PHP 7.2 support
  • SUPEE-10975 does not include PHP 7.2 support. A separate patch for PHP 7.2 is available for download.


Additional Information


Please  keep watching for details and check our Security Center for the latest in best practices and security notices for your Magento implementations. For additional information, see DevDocs and our Tech Resources sites. 


Want to connect? Find us on Twitter @Magento and @MagentoCommunityEngineering. To receive notifications about this and future updates, join us on the  Magento Community Engineering Slack. If you are interested in joining Slack, or a specific channel, send a request to or self sign-up.