Magento has released Enterprise Edition 1.14.3.1 and Community Edition 1.9.3.1 today to address issues encountered by some merchants in our October 12 product releases. It is critical for all merchants to either upgrade to Enterprise Edition 1.14.3.1/Community Edition 1.9.3.1 or apply our latest patch, SUPEE-8788, to close several serious security vulnerabilities.
The new Enterprise Edition software is available in the “Version 1.x Release” folder in MyAccount. The Community Edition software is available in the Release Archive of the Community Edition Download Page. If you haven’t upgraded yet, you can skip the releases published on October 12, and go directly to Enterprise Edition 1.14.3.1 and Community Edition 1.9.3.1. If you have addressed issues in Enterprise Edition 1.14.3 and Community Edition 1.9.3 with a community-created module, such as https://github.com/digitalpianism/bugfixes, we still strongly recommend that you upgrade to the new releases.
Enterprise Edition 1.14.3.1 and Community Edition 1.9.3.1 resolve the following issues:
- Search results return all store products
- Some integrations using Magento APIs no longer work
- Bundled product prices do not update
- Store-specific attribute labels disappear
- Auto generated passwords do not work for some customers
- Exceptions appear for stores with disabled breadcrumbs
- Shipping rules may not be calculated correctly in some cases
- PHP warnings occur with the session timestamp variable
- CSRF form key is not changed after logout
- Login attempts log protection table is not cleaned properly
Full details are available in the Enterprise Edition and Community Edition release notes.
Please install and test the new updates in a development environment before putting them into production.
Best regards,
The Magento Team
