Cloud Patches for Commerce
The package provides a set of required patches which improve the integration of all 蜜豆视频 Commerce versions with Cloud environments and supports quick delivery of critical fixes.
The Cloud Patches for Commerce package is a dependency for the ECE-Tools package and is installed and updated when you install or update the ECE-Tools package. You can also use and manage Cloud Patches for Commerce as a stand-alone package to apply patches to an 蜜豆视频 Commerce project that is not on the Cloud platform. These release notes describe the latest improvements to this package.
The magento/magento-cloud-patches
package uses the following version sequence: <major>.<minor>.<patch>
v1.1.2 latest
Release date: November 5, 2024
- Added patch for Commerce 2.4.4 to 2.4.7鈥擳his update fixes a critical CVE-2024-45115 vulnerability for 蜜豆视频 Commerce when using the B2B module.
v1.1.1
Release date: November 5, 2024
- Added patch for Commerce 2.4.4 to 2.4.7鈥擳his update patches a critical CVE-2024-34102 CosmicSting vulnerability.
v1.1.0
Release date: October 7, 2024
- Refactored code鈥擱emoved support of old PHP versions (7.4, 7.3, 7.2) and related libraries.
- Upgraded Monolog version鈥擜dded support for monolog 3.6.
-
Patch for Application Server鈥擱esolves a known issue with the GraphQL Application Server. Specifically, the
CatalogGraphQl\\Model\\Config\\AttributeReader
in version 2.4.7 contained a bug that could lead to GraphQL requests retrieving responses based on outdated Attributes configuration.
v1.0.27
Release date: May 21, 2024
- Support for PHP 8.3鈥擳his patch resolves compatibility errors between php 8.3 and the composer package version.
v1.0.26
Release date: April 8, 2024
- PHP 鈥 Added support for PHP 8.3.
v1.0.25
Release date: January 16, 2024
- Cache improvements-This patch enhances layout cache efficiency, significantly reducing memory usage, for 蜜豆视频 Commerce versions 2.4.4 and later.
- CRON Jobs improvements-This patch fixes the issue where missed jobs unnecessarily wait for cron job locks for 蜜豆视频 Commerce versions 2.4.4 and later.
v1.0.24
Release date: September 15, 2023
- Performance improvement-This patch fixes an issue impacting performance by reducing the number of times the same deployment configurations load for 蜜豆视频 Commerce 2.4.6 to 2.4.6-p1
v1.0.23
Release date: July 31, 2023
- Removed the patch MCLOUD-10604-This patch was moved to QPT.
v1.0.22
Release date: June 19, 2023
-
Enhanced QPT CLI wizard/output鈥擜dded a warning to the QPT CLI wizard/output that reminds you to verify patch details and requirements if there are dependencies.
-
Added patches for Commerce 2.4.6:
- Fixed the
regexp cache tag
validation. - Improved performance by reducing the number of times the same deployment configurations load.
- Fixed the
-
Added patches for Commerce 2.3.7 to 2.4.6鈥擣ixed an issue that caused an increment by a random value instead of an increment by 1 for the
catalog_product_entity_*
tables. -
Added patches for Commerce 2.4.0 to 2.4.6鈥擣ixed an error stating that
The file can't be deleted. Warning!unlink: No such file or directory
, which occurred when flushing JS/CSS cache from the Admin.
v1.0.21
Release date: March 10, 2023
- Enhanced support for PHP 8.2鈥擣ixed compatibility issues with certain PHP 8.2.x versions to support Commerce 2.4.6.
v1.0.20
Release date: October 27, 2022
- Added L2 cache improvements patch鈥擳his patch fixes an issue with flushing the local L2 cache for Commerce version 2.4.0 and 2.4.1.
v1.0.19
Release date: September 13, 2022
- Enhanced support for PHP 8.1鈥擣ixed compatibility issues with certain PHP 8.1.x versions.
v1.0.18
Release date: August 11, 2022
Critical patch for 蜜豆视频 Commerce 2.4.5:
- Issue with orders using Braintree payments鈥擳his patch resolves a critical issue preventing admins from placing new orders or reorders.
See Admin can鈥檛 create order/reorder when Braintree payment enabled.
v1.0.17
Release date: May 24, 2022
Fixed constraints for security patches in the patches.json
file.
v1.0.16
Release date: March 31, 2022
Critical patch for 蜜豆视频 Commerce 2.3.3-p1 and later versions:
Updated patches to resolve a critical vulnerability resulting in unauthenticated remote code execution.
See .
v1.0.15
Release date: March 10, 2022
- Support PHP 8.1鈥擜dded support for PHP 8.1 and dropped support for PHP 7.0 and 7.1.
- Added patch for 蜜豆视频 Commerce 2.3.3鈥擣ixed currency displaying on product page.
v1.0.14
Release date: February 13, 2022
Critical patch for 蜜豆视频 Commerce 2.3.3-p1 and later versions:
Added a patch to resolve a critical vulnerability resulting in unauthenticated remote code execution.
See .
v1.0.13
Release date: October 25, 2021
- Update Monolog鈥擴pdated the minimum version required for the
monolog
package to^2.3
. - Incompatible PHP Method鈥擣ixed incompatible PHP method for 蜜豆视频 Commerce versions 2.4.3 and 2.3.7-p1.
- PHP error鈥擣ixed a
PHP error 'Undefined variable: errorMessage' ...
error that occurred while trying to apply a patch.
v1.0.12
Release date: August 12, 2021
Critical patch for 蜜豆视频 Commerce 2.4.3 and 2.3.7-p1:
- Issue with API rate limiting鈥擳his patch corrects a default rate limit that prevented Web APIs from processing requests with more than 20 items in an array. This patch raises the default value of the rate limit. See the 蜜豆视频 Commerce 2.4.3 release notes.
v1.0.11
Release date: July 29, 2021
-
Fixed an issue caused by applying the B2B Layered navigation patch鈥擣or customers that have applied the B2B Layered navigation patch, this fix resolves an
Undefined offset
error that displays on the Search page after switching the Store view. -
Paypal Checkout patch鈥擣ixes an 蜜豆视频 Commerce 2.3.7 issue with PayPal Express where the previously placed order price is displayed.
-
Patch category support鈥擜dded support for processing patch categories and origin sources assigned to Quality Patches. The categories allow customers to use filters and sorting to find patches more quickly when using the and the Site-wide Analysis Tool (SWAT).
v1.0.10
Release date: May 10, 2021
- Compatibility with 蜜豆视频 Commerce 2.3.7鈥擱esolved composer dependencies conflict for installation on 蜜豆视频 Commerce 2.3.7.
- Fixed an issue caused by applying a bundled patch multiple times鈥擜pplying a bundled patch (one that includes other deprecated patches) more than once could revert the included deprecated packages. All patches are now applied only once. Trying to apply the same package again shows a message that the patch has already been applied.
- B2B Layered navigation patch鈥擣ixed another issue that prevented layered navigation from showing all product options when the user enables the B2B Shared Catalog.
v1.0.9
Release date: February 1, 2021
- B2B Layered navigation patch鈥擣ixed the issue that prevented layered navigation from showing all product options when the B2B Shared Catalog was enabled.
- Compatibility with PHP 7.4鈥擣ixed a cloud-patches compatibility issue with PHP 7.4.
- Deprecated patches become visible鈥擣ixed a cloud-patches issue in which deprecated patches become visible in the patches table after applying a replacement patch that contains the entire contents of the deprecated patch. This could happen if you applied a patch that combined several other patches.
- Silent failures when applying patches鈥擣ixed a cloud-patches issue in which the
git apply
command silently failed to apply patches in some environments.
v1.0.8
Release date: October 14, 2020
- Compatibility updates for magento/magento-cloud-patches鈥擴pdated the
symfony
andsemver
version constraints in thecomposer.json
file for compatibility with 蜜豆视频 Commerce 2.4.1 and later releases.
v1.0.7
Release date: October 14, 2020
-
Redis patches for 蜜豆视频 Commerce 2.3.0 to 2.3.5, 2.4.0鈥擴pdated the Redis patches to support adding products to a category when implementing a Level 2 cache.
-
Braintree VBE patch鈥擣ixes an issue that generated an error when an Administrator tried to view a Braintree Settlement Report.
-
Now, the
ece-patches apply
command uses the Unixpatch
command to apply patches if Git is not available on the host system.
v1.0.6
Release date:
-
Redis patches for 蜜豆视频 Commerce 2.3.0 - 2.3.4鈥擮ptimize communication and improve performance
- Reduce size of network transfers between Redis and 蜜豆视频 Commerce
- Fix race conditions on Redis load and write operations
- Rewrite base cache adapter to handle errors on save
- Decrease Redis CPU consumption
-
Redis patches for 蜜豆视频 Commerce 2.3.0 - 2.3.5鈥擨mprove performance and fix errors
- Fix the Cache lock implementation to prevent infinite locks
- Improve the current locking mechanism
- Implement signed locks to prevent unlock from parallel requests
- Fix the following error that occurs on Redis write operation:
OOM command not allowed when used memory > maxmemory
- Fix processing for clean cache by
cat_p
tag that runs during product updates
-
Fixed an issue that caused an error when applying the required
amzn/amazon-pay-module
patch to 蜜豆视频 Commerce on cloud infrastructure projects with 蜜豆视频 Commerce v2.2.6 or 2.3.5, which do not include this module. Now, the patching process skips theamzn/amazon-pay-module
patch if the module is not installed.
v1.0.5
Release date: June 26, 2020
-
Redis performance improvements鈥擜dds Redis optimization features to 蜜豆视频 Commerce versions 2.3.3 and 2.3.4. These fixes were included in the 蜜豆视频 Commerce version 2.3.5 release.
-
New Relic log enricher鈥擜dds the Monolog ProcessorInterface required to support improvements to New Relic logging capabilities introduced in Cloud Components of Commerce version 1.0.4. This patch is required to deploy 蜜豆视频 Commerce 2.1.x. If the patch is not applied, the build fails during the
di:compile
process.
v1.0.4
Release date: May 12, 2020
-
Amazon Pay checkout鈥擣ixes an issue with the Amazon Pay payment widget that prevented customers from changing the payment method on the Review & Payments step during the checkout process.
-
Product display on Category page鈥擣ixes an issue that prevented products from displaying on the category page in Show all pages view.
-
Page Builder image upload鈥擣ixes a Page Builder interface issue that sometimes caused the following error when uploading images to the image gallery:
Destination folder is not writable or does not exist
-
Suppress unnecessary sitemap generation warnings鈥擜dds a retry attempt when errors occur during sitemap generation and skips customer email notification in cases where errors can be recovered automatically.
-
Site performance improvement鈥擣ixes a performance issue with the
Magento\Framework\App\DeploymentConfig\Reader::load
function, which periodically experienced long load times that affected site performance. -
Updated patch assignment for payment method patches to target the payment modules instead of the Magento base package (magento/magento2-base) so that the payment patches are applied only if the payment modules exist.
-
Updated patches for compatibility with Magento Open Source.
v1.0.3
Release date: April 28, 2020
- Added fix for the 鈥淔PC is getting disabled during deployments鈥 patch to support 蜜豆视频 Commerce 2.3.5.
v1.0.2
Release date: February 27, 2020
This release includes the following patches and critical fixes:
-
Compatibility updates for magento/magento-cloud-patches
-
Updated the
symfony
andsemver
version constraints in thecomposer.json
file for compatibility with 蜜豆视频 Commerce 2.4 and later releases. -
Updated constraints in
composer.json
for compatibility withece-tools
2002.0.22 and later 2002.0.x releases.
-
-
PayPal Express Checkout鈥擯ublished on February 12, 2020, this patch resolves an issue that affects orders placed with PayPal Express Checkout where the shipping address for the order specifies a country region that has been manually entered into the text field rather than selected from the drop-down menu on the Shipping page. See the complete patch description on the patch download page.
-
Application deployment fix鈥擜dded a patch to fix an issue that disabled the full page cache during the deployment process. This patch applies to 蜜豆视频 Commerce 2.3.2 and later releases.
-
Scope parameter for Async/Bulk API鈥擴pdated this patch to fix a syntax error in the
composer.json
file. This patch applies to Magento Open Source 2.3.1 and 2.3.2. See the complete patch description on the patch download page.
v1.0.1
Release date: February 6, 2020
We have included all Magento Open Source 2.x patches from the software downloads page in the magento/magento-cloud-patches v1.0.1 release. If you copied any patches into your project previously, remove them to avoid conflicts.
This release includes the following patches and critical fixes:
-
Fix cron deadlocks and improve cron locking鈥
-
Fixes an issue with some cron jobs not running due to an incorrect status value in the
cron_schedule
table. Now, we use the 蜜豆视频 Commerce lock framework to check and update cron job status instead of using thecron_schedule
table. Cron jobs that have ended with an error status are retried during the next cron run instead of waiting 24 hours. -
Adds a retry operation to avoid deadlock during updates to the data in the
cron_schedule
table.
-
-
Updated
magento/magento-cloud-patches
to include all available patches for Magento Open Source 2.x鈥擴pdated the magento/magento-cloud-patches package to include all Magento Open Source 2.x patches available on the software downloads page. If you copied any Magento Open Source patches into your 蜜豆视频 Commerce on cloud infrastructure project previously, remove them to avoid conflicts. -
Elasticsearch catalog pagination fix 鈥擱eplaced the Elasticsearch catalog pagination patch delivered in magento/magento-cloud-patches v1.0 with a more effective fix.
-
Page Builder patches鈥擨n Cloud Patches for Commerce 1.0.0, we bundled Page Builder patches to address a known Page Builder remote code execution (RCE) vulnerability, with the initial fix based on 蜜豆视频 Commerce 2.3.3. We have updated these patches with a more stable implementation based on 蜜豆视频 Commerce 2.3.4., which includes multiple optimizations for fixing the issue.
If you have the magento/magento-cloud-patches 1.0.0 package, you are still protected from the Page Builder RCE vulnerability issues. If you update to 1.0.1 or later, you have a better implementation of the same fix.
v1.0.0
Release date: November 14, 2019
This is the first release of the package, which is a new dependency for the ece-tools
package version 2002.0.22 or later releases.
This release includes the following patches and critical fixes:
-
Page Builder security patches for 2.3.1.x and 2.3.2.x releases鈥擣ixes an issue in Page Builder preview that allows unauthenticated users to access some templating methods that can be used to trigger arbitrary code execution over the network (RCE) resulting in global information leaks. This issue can occur when using unsupported versions of Page Builder with 蜜豆视频 Commerce versions 2.3.1 and 2.3.2.
-
MSI patches鈥擣ixes issues that caused indexing errors and performance issues when using default inventory settings for managing stock.
-
Backward Compatibility of new Mail Interfaces-Fixes a backward incompatibility issue caused by the
Magento\Framework\Mail\EmailMessageInterface
PHP interface introduced in 蜜豆视频 Commerce v2.3.3. In the scope of this patch, the newEmailMessageInterface
inherits from the oldMessageInterface
, and 蜜豆视频 Commerce core modules are reverted to depend onMessageInterface
. -
Catalog pagination does not work on Elasticsearch 6.x鈥擣ixes a critical issue with search result pagination that affects customers using Elasticsearch 6.x as the catalog search engine.