Skip to content

Releases: OpenMage/magento-lts

v20.1.0-rc1

17 Feb 15:25
@fballiano fballiano
v20.1.0-rc1
9fb190f
Compare
Choose a tag to compare
v20.1.0-rc1 Pre-release
Pre-release

Highlights

This is a big release, that's why we decided to move away from the 20.0.x versioning and go to 20.1.x. Since a lot of changes could have some impact on current installations we decided to release some "rc" versions before the official 20.1.0. Tests are more than welcome now but be extra careful with production environment.

What's most important is the removal of all the 3rd party libraries (phpseclib, mcrypt_compat, Cm_RedisSession, Cm_Cache_Backend_Redis and Pelago_Emogrifier and Zend Framework) form our repository, they are now imported via composer. This was an important step to clean up and modernise our code.

Also:

  • the M1 legacy themes have been moved to an external repository since it's old (and mostly unused) code.
  • a great improvement to EAV config cache has been added to v20.

Don't worry though, if you've always installed OpenMage extracting the zip file, starting from this release you'll find a new zip file attached to the release itself, we build this zip adding all of the old 3rd party libraries so that you will not have to migrate to composer or use composer at all.

Changelog

New Contributors

Full Changelog: v20.0.18...v20.1.0-rc1

Contributors

davidhiendl and justinbeaty
Assets 3
Loading
14 Join discussion

v19.5.0-rc1

17 Feb 15:18
@fballiano fballiano
v19.5.0-rc1
112f5a0
Compare
Choose a tag to compare
v19.5.0-rc1 Pre-release
Pre-release

Highlights

This is a big release, that's why we decided to move away from the 19.4.x versioning and go to 19.5.x. Since a lot of changes could have some impact on current installations we decided to release some "rc" versions before the official 19.5.0. Tests are more than welcome now but be extra careful with production environment.

What's most important is the removal of all the 3rd party libraries (phpseclib, mcrypt_compat, Cm_RedisSession, Cm_Cache_Backend_Redis and Pelago_Emogrifier and Zend Framework) form our repository, they are now imported via composer. This was an important step to clean up and modernise our code.

Also the M1 legacy themes have been moved to an external repository since it's old (and mostly unused) code.

Don't worry though, if you've always installed OpenMage extracting the zip file, starting from this release you'll find a new zip file attached to the release itself, we build this zip adding all of the old 3rd party libraries so that you will not have to migrate to composer or use composer at all.

Changelog

Read more

Contributors

rjocoleman, Flyingmana, and 19 other contributors
Assets 3
Loading
26 Join discussion

v20.0.20

02 Feb 15:02
@fballiano fballiano
v20.0.20
5ae9419
Compare
Choose a tag to compare
v20.0.20

This is a security update with a single fix regarding CVE-2020-27511, ReDos (Regular Expression Denial of Service) vulnerability in prototypejs (#3003).

Assets 2
Loading

v19.4.23

02 Feb 15:01
@fballiano fballiano
v19.4.23
a3ee71b
Compare
Choose a tag to compare
v19.4.23

This is a security update with a single fix regarding CVE-2020-27511, ReDos (Regular Expression Denial of Service) vulnerability in prototypejs (#3003).

Assets 2
Loading

v20.0.19

26 Jan 13:58
@fballiano fballiano
v20.0.19
e527e81
Compare
Choose a tag to compare
v20.0.19

This is an important security update release, it includes six security patches:

All of these updates should be totally backward compatible, except one, CVE-2021-21395 - GHSA-r3c9-9j5q-pwv4 - Reset Password not protected against well-timed CSRF in fact is a breaking change and you will need to take action after upgrading to this version of OpenMage.

Specifically, you will have to modify the customer/form/resetforgottenpassword.phtml file of your custom theme (in case you have customized it) and add this code <input name="form_key" type="hidden" value="<?php echo $this->getFormKey(); ?>" /> after the <form open tag. Please refer to this link in case you want to see how the patch works and copy/paste the simple solution.

In case your custom theme does not have the customer/form/resetforgottenpassword.phtml or in case you are not using a custom theme then you will not have to do the aforementioned procedure.

Assets 2
Loading

v19.4.22

26 Jan 13:55
@fballiano fballiano
v19.4.22
d28003f
Compare
Choose a tag to compare
v19.4.22

This is an important security update release, it includes six security patches:

All of these updates should be totally backward compatible, except one, CVE-2021-21395 - GHSA-r3c9-9j5q-pwv4 - Reset Password not protected against well-timed CSRF in fact is a breaking change and you will need to take action after upgrading to this version of OpenMage.

Specifically, you will have to modify the customer/form/resetforgottenpassword.phtml file of your custom theme (in case you have customized it) and add this code <input name="form_key" type="hidden" value="<?php echo $this->getFormKey(); ?>" /> after the <form open tag. Please refer to this link in case you want to see how the patch works and copy/paste the simple solution.

In case your custom theme does not have the customer/form/resetforgottenpassword.phtml or in case you are not using a custom theme then you will not have to do the aforementioned procedure.

Assets 2
Loading

v19.4.21

23 Dec 07:44
@fballiano fballiano
v19.4.21
ef8d060
Compare
Choose a tag to compare
v19.4.21

This is a hotfix release, it includes only the solution to a single bug that was released in 19.4.20: #2793.

Said bug doesn't seem to be present on 20.0.18 and that's why you'll not find the matching hotfix release for our v20 branch.

Assets 2
Loading

v19.4.20

01 Dec 17:16
@fballiano fballiano
v19.4.20
689c749
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
v19.4.20

Overview

This is mainly a bugfix release with a couple of optimizations.
Most importantly we've fixed bugs regarding:

  • fixer.io currency exchange rate provider
  • CSS merge
  • indexes

Upgrading is highly suggested, but always backup and test before doing it.

What's Changed

Full Changelog: v19.4.19...v19.4.20

Contributors

fballiano, kiatng, and 5 other contributors
Assets 2
Loading
5 Join discussion

v20.0.18

01 Dec 17:17
@fballiano fballiano
v20.0.18
77dd049
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
v20.0.18

Overview

This is mainly a bugfix release with a couple of optimizations.
Most importantly we've fixed bugs regarding:

  • fixer.io currency exchange rate provider
  • CSS merge
  • indexes

Upgrading is highly suggested, but always backup and test before doing it.

What's Changed

Full Changelog: v20.0.17...v20.0.18

Contributors

luigifab
Assets 2
Loading
0 Join discussion

v20.0.17

08 Nov 12:24
@fballiano fballiano
v20.0.17
82e5168
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
v20.0.17

Overview

This is a maintanance release with small bugfixes, code cleanup, documentation improvements and a better overall PHPStan coverage.
We're also bumping the minimum required PHP version to 7.3 with intl extension enabled.
Our source code finally has a much better "copyright" section, to thank all the team that is contributing to this beautiful project.

Important things you should check before upgrading

This release requires PHP 7.3 with intl extension, do not upgrade if your system doesn't match this requirement.

What's Changed

Full Changelog: v20.0.16...v20.0.17

Contributors

midlan
Assets 2
Loading
0 Join discussion