cancel
Showing results for 
Search instead for 
Did you mean: 

Patch or Upgrade Today

Highlighted
Community Manager

Patch or Upgrade Today

Magento is releasing new versions of Magento Commerce and Open Source to improve product security and functionality:

 

  • Magento Open Source and Commerce 2.2.1
  • Magento Open Source and Commerce 2.1.10
  • Magento Open Source and Commerce 2.0.17

 

These releases contain almost 15 security changes that help close cross-site request forgery (CSRF), unauthorized data leak, and authenticated Admin user remote code execution vulnerabilities. Magento Commerce and Open Source 2.2.1, 2.1.10, and 2.0.17 also contain over 40 functional fixes, too, including significant contributions from community members.

 

We strongly recommend that all merchants upgrade to these versions as soon as is reasonably possible.

 

Download and install the Commerce updates by logging into My Account and navigating to the version you want to download. Magento Open Source software available from the  Open Source download page. (See How to get the Magento software for a discussion of Magento 2.x installation procedures.)

 

More information about the security changes is available on the Magento Security Center.

Full details are available in the Magento Commerce and Open Source release notes:

 

 

--

Community Manager, Magento
Problem solved? Click Accept as Solution!
Still stuck? Check out our documentation: https://magento.com/resources/technical