On June 27, 2018, Magento released several new versions, including SUPEE 10752 to patch earlier Magento 1.x versions, Magento Open Source and Commerce 2.2.5, Magento Open Source and Commerce 2.1.14, Magento Open Source 1.9.3.9, and Magento Commerce 1.14.3.9. These releases provide lots of security enhancements that help close remote code execution, cross-site scripting, and cross-site request forgery. No confirmed attacks related to these issues have occurred to date. However, certain vulnerabilities can potentially be exploited to access customer information or take over administrator sessions, so Magento highly recommends its users to upgrade soon.
In this Magento tutorial, we will show you how to install the latest Magento SUPEE by two methods: with or without SSH, step-by-step.
Importance:
- You have to discard SUPEE 10570 v1 and install SUPEE 10570 v2 before installing the new SUPEE 10752 to avoid conflicts.
- For stores applying Magento Commerce (from 1.9.0.0 to 1.14.3.9), they should install SUPEE-10752 or upgrade their site to Magento Commerce 1.14.3.9.
- For stores utilizing Magento Open Source (from 1.5.0.0 to 1.9.3.9). they can either install SUPEE-10752 or upgrade their site to Magento Open Source 1.9.3.9.
Related Stories:
Magento 2.2.5 Release – Sooner Than Expected [June 27, 2018]
Install SUPEE 10752 Without SSH
In case that you don’t have SSH access to apply the patch, let’s do it via FTP/ sFTP upload.
Step 1: Disabling Magento Compiler and Clearing the Compiler Cache
Go to your Admin Panel => Choose System => Configuration => Tools => Compilation
Step 2: Reviewing your code Magento files
In fact, applying Magento patches mean replacing some of the existing files. It’s worth noting that if all changes made to the core Magento files will disappear after applying the patch. Therefore, you have better revise the code and take note of any changes so as to apply those again once the new SUPEE 10752 is applied.
The following list combines all of the files that would be altered by Magento SUPEE-10752:
Step 3: Applying the patch via FTP/sFTP or FileManager/ File Upload
Firstly, you have to choose a proper patch bundle archive according to your current Magento version:
For Magento CE 1.5.0.1 to 1.5.1.0
For Magento CE 1.6.0.0 to 1.6.2.0
For Magento CE 1.7.0.0 to 1.7.0.2
For Magento CE 1.8.0.0 to 1.8.1.0
For Magento CE 1.9.0.0 to 1.9.0.1
For Magento CE 1.9.1.0 to 1.9.1.1
For Magento CE 1.9.2.0 to 1.9.2.4
For Magento CE 1.9.3.0 to 1.9.3.8
Secondly, you must upload all files and folders of the archive to your Magento root directory and make the replacement for necessary files.
Step 4: Flushing PHP opcode cache
Last but not least, don’t forget to check your store in order to make sure that it still is working well.
Also, you have to flush the PHP opcode caches (APC/ XCache/ eAccelerator) after applying the patch or restarting your web server. Otherwise, the code will continue running from the caches.
Install With SSH
The second method for installation is using SSH access.
Step 1: Disabling Magento Compiler & Clearing Compiled Cache
(similar to Step 1 of the first method)
Step 2: Verifying Your Current Magento Version
$ grep -A6 'static function getVersionInfo' app/Mage.php public static function getVersionInfo() { return array( 'major' => '1', 'minor' => '9', 'revision' => '2', 'patch' => '4',
In the above example, we found that the existing version is Magento 1.9.2.4.
Step 3: Downloading The Corresponding Patch For Your Magento Version
SUPEE 10752 for Magento CE 1.5.0.0
SUPEE 10752 for Magento CE 1.5.0.1 to 1.5.1.0
SUPEE 10752 for Magento CE 1.6.0.0 to 1.6.2.0
SUPEE 10752 for Magento CE 1.7.0.0 to 1.7.0.2
SUPEE 10752 for Magento CE 1.8.0.0 to 1.8.1.0
SUPEE 10752 for Magento CE 1.9.0.0 to 1.9.0.1
SUPEE 10752 for Magento CE 1.9.1.0 to 1.9.1.1
SUPEE 10752 for Magento CE 1.9.2.0 to 1.9.2.4
SUPEE 10752 for Magento CE 1.9.3.0 to 1.9.3.8
Step 4: Uploading The Downloaded Folder To Your Magento Root Directory
$ ls -1 . PATCH_SUPEE-10752_CE_v1.9.2.4_v1-2018-06-11-04-33-22.sh app cron.php downloader errors favicon.ico index.php js lib mage media pkginfo robots.txt shell skin var
Step 5: Running The Patch
$ bash ./PATCH_SUPEE-10752_CE_v1.9.2.4_v1-2018-06-11-04-33-22.sh Checking if patch can be applied/reverted successfully... Patch was applied/reverted successfully.
Step 6: Flushing PHP opcode cache
(Similar to Step 4 of the first method)
Download
For Magento Open Source (Community)
For Magento Commerce (Enterprise)
We have shown you two simple solutions for SUPEE-10752 installation (with and without SSH). If you have any difficulties when following these steps, leave a comment below then we can help. See you in the next Magento tutorial!