Update Feed

Magento 1.9.3.9

14 August 2018

Magento version 1.9.3.9 is now available (security release).

Upgrading to Magento 1.9.3.9

Magento 1.9.3.9 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply Magento updates as new versions are released, or use Installatron's Clone feature to duplicate an existing Magento install to test the 1.9.3.9 upgrade prior to applying it live. Get started managing your Magento installations with Installatron

What's New in Magento 1.9.3.9

Magento 1.9.3.9 provides resolution of multiple critical security issues. These critical security issues include remote code execution, cross-site scripting, and cross-site request forgery issues. We recommend upgrading your Magento store to this latest version. See Magento Security Center for a comprehensive discussion of these issues.

Highlights

Magento no longer performs unnecessary write operations on the core_url_rewrite table.
Customers can now successfully register during checkout without being unexpectedly logged out.
Incorrect escaping in the cron.sh file no longer prevents cron jobs from running in parallel as expected.
Magento now cleans session data as expected after a customer logs out.

Known Issues

If your custom code or extension is using Zend/Filter/PregReplace.php with the modifier e, it will now return an error due to possible RCE issues.