⭐ If you would like to buy me a coffee, well thank you very much that is mega kind! : https://www.buymeacoffee.com/honeyvig Hire a web Developer and Designer to upgrade and boost your online presence with cutting edge Technologies

Wednesday, October 4, 2023

How to Install Magento SUPEE 5994 With or Without SSH

 

Magento releases Security Patches and Version upgrades frequently to provide new features and safety to Magento stores. It is necessary for the store owners to keep an eye on this releases and implement them on their online stores in order to continue smooth and secure functioning of their store.

Magento released Security Patch SUPEE 5994  on May 14, 2015 to ensure the safety of Magento stores from security attacks.

The issues addressed in the Security Patch Magento SUPEE 5994 are :

  • Exposing the login path
  • Retrieve address information
  • Output of server paths
  • Code injection via spreadsheet
  • Cross-site scripting via Authorize.net
  • Malware via shop extensions

With nearing of Magento 1 end of life, it is strongly recommended to migrate to the latest Magento 2.4.8 rather than installing Magento SUPEE-5994.

Methods to Install Magento SUPEE 5994

There are two methods, i.e., Install Magento SUPEE 5994 with or without SSH, available for the installation, as discussed below:

Method 1: Install Magento SUPEE 5994 using SSH

Contact your hosting provider if you don’t know how to set up SSH. Download SUPEE 5994 Patches files for your Magento Version from here.

Upload the patch into your Magento root directory and run the appropriate SSH command:

For .sh file extension:

sh patch_file_name.sh

Example:

sh PATCH_SUPEE-5994_CE_v1.9.3.2-1.9.3.7_v1-2018-02-23-06-01-40.sh

For .patch file extension:

patch —p0 < patch_file_name.patch

Note: Once execute the command, refresh the cache in the Admin under “System > Cache Management” so that the changes can be reflected. We strongly recommend that you test all patches in a test environment before taking them live.

Method 2: Install Magento SUPEE 5994 with PrePatched Files

Download the zip file for your Magento Version for the patch installation. You can also download these Pre Patched files from GitHub. After downloading the files, just upload it to your Magento root folder.

Magento VersionSUPEE 5994
Magento 1.9.1.0-Magento 1.9.1.1CE-1.9.1.0-CE-1.9.1.1
Magento 1.9.0.1CE-1.9.0.1
Magento 1.8.1.0CE-1.8.1.0
Magento 1.7.0.2CE-1.7.0.2
Magento 1.6.1.0-1.6.2.0CE-1.6.1.0-CE-1.6.2.0
Magento 1.5.1.0CE-1.5.1.0
Magento 1.4.2.0CE-1.4.2.0
Magento 1.4.1.0-Magento 1.4.1.1CE-1.4.1.0-CE-1.4.1.1

Follow any of the above methods to get Magento SUPEE 5994 installed in your Magento store easily.

How to check if Magento SUPEE 5994 has been installed correctly?

The easiest way to check if the Security Patch SUPEE 5994 has been installed correctly is with magereport.com.

We are happy to help you with the installation process. Also visit Magento Security Patches Installation Service.

Even if you can patch, it is strongly recommended that you upgrade Magento to1.9.2.0 for better security and new features.

Posted by H at 2:45 AM 0 comments
Labels: ,

How to Install Magento SUPEE 10415 With or Without SSH

 

Magento keeps on releasing various SUPEE patches and version upgrades in order to provide new features and security upgrades. After the launch of Magento 2, Magento has stopped introducing new features but still, it keeps on releasing patches to safeguard stores against potential threats and security attacks.

Magento has come up with new security patch SUPEE 10415 which is the solution for many vulnerable issues like remote code execution, cross-site scripting, and cross-site request forgery issues. Here, we have come up with patch files to install in your Magento and safeguard your store against potential security threats and vulnerabilities.

Take a note here: 
If you have previously applied Magento SUPEE 10266, you can simply upload SUPEE 10415 files on top of it to apply this new version of patch. This will auto-replace all related files.

With nearing of Magento 1 end of life, it is strongly recommended to migrate to the latest Magento 2.4.8  rather than installing Magento SUPEE-10415.

Magento SUPEE 10415 Installation process:

There are two ways you can install Magento SUPEE 10415: with SSH or without SSH. Both methods are mentioned below:

Install Magento SUPEE 10415 using SSH:

You will need SSH, if you don’t know how to set up SSH, contact your hosting provider.
Upload the patch files in the root,
In ssh console, run the command as follows.
For .sh file extension:

Sh PATCH_SUPEE-10415.sh

For .patch file extension:

patch —p0 < patch_file_name.patch

Install Magento SUPEE 10415 with PrePatched Files:

Download the zip file for the patch installation. You can also download these Pre Patched files from GitHub. After downloading the files, just upload it to your Magento root folder.

Magento versionSUPEE-10415 Version
Magento 1.7.0.2SUPEE_10415_Magento_1.7.0.2
Magento 1.8.1.0SUPEE_10415_Magento_1.8.1.0
Magento 1.9.1.0SUPEE_10415_Magento_1.9.1.0
Magento 1.9.2.4SUPEE_10415_Magento_1.9.2.4
Magento 1.9.3.0SUPEE_10415_Magento_1.9.3.0
Magento 1.9.3.1SUPEE_10415_Magento_1.9.3.1
Magento 1.9.3.2SUPEE_10415_Magento_1.9.3.2
Magento 1.9.3.3SUPEE_10415_Magento_1.9.3.3
Magento 1.9.3.4SUPEE_10415_Magento_1.9.3.4
Magento 1.9.3.6SUPEE_10415_Magento_1.9.3.6

Possible Issues You might face while Installing SUPEE 10415:

  1. After patching Magento SUPEE 10415, saving products in backend causes an error “Unsupported data type N”
    Solution:
    The cause of this issue is not having SUPEE-8788 V2 installed.
    To fix this, download Magento 1.9.3.7 and copy
    • lib/Unserialize/Parser.php
    • lib/Unserialize/Reader/Arr.php
    • lib/Unserialize/Reader/ArrValue.php
    • lib/Unserialize/Reader/Null.php
    files to your website. Check if there are any changes between the files & overwrite them if there are.
  2. “404: Page Not Found” errors from the errors directory
    Solution:
    This only happens if your store has certain third-party extensions.
    To fix this, Check & Fix if there are any PHP warning generated by the extensions installed or customizations has been done.
  3. Double check if your Promotions still work. The deserialisation changes in Rule/Model/Abstract.php can break add to cart actions. (Source)
  4. Magento has removed Standard PHP Unserialize Method due to Remote Code Execution Vulnerability. Alternative Unserialize Method introduced by Magento is used as shown here:
    Mage::helper(‘core/string’)->unserialize($sting).
    This will affect all third-party customizations. Serialized EAV Attributes and Price Rules Conditions will be updated with the New Unserialize Method Call.

Do let us know via Comments if you are facing any other error while installing Magento SUPEE 10415. We will help you out fixing them.

We recommend upgrading to Magento version 1.9.3.7 which includes all the security patches including SUPEE 10415. If you need any help regarding Magento version Upgrade, Checkout

Posted by H at 2:26 AM 0 comments
Labels: ,
Subscribe to: Posts (Atom)