Update Feed

Magento 2.1.17

27 March 2019

Magento version 2.1.17 is now available (security release).

Upgrading to Magento 2.1.17

Magento 2.1.17 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply Magento updates as new versions are released, or use Installatron's Clone feature to duplicate an existing Magento install to test the 2.1.17 upgrade prior to applying it live. Get started managing your Magento installations with Installatron

What's New in Magento 2.1.17

Magento Open Source 2.1.17 addresses critical security issues that include cross-site scripting, arbitrary code execution, and sensitive data disclosure vulnerabilities. We strongly recommend that all merchants upgrade as soon as possible.

Security

patch PRODSECBUG-2198 to address critical SQL injection vulnerability

Notes

Magento’s implementation of the Authorize.Net Direct Post payment method currently uses MD5-based hash for all M1 and M2 installations. As of June 28, 2019, Authorize.Net will stop supporting MD5-based hash usage.