Magento has released its latest security patch, SUPEE-6788. Alongside it, Magento Enterprise Edition 1.14.2.2 and Community Edition 1.9.2.2 are now available, and both include this patch along with other updates. SUPEE-6788 addresses more than 10 security issues identified through the Magento security program. None of these vulnerabilities are being actively exploited yet, but it’s still important to apply the patch to your Magento implementation as soon as possible to close them.
Keep in mind that this patch introduces several changes that aren’t backward compatible with earlier versions of Magento. They may affect extensions and customizations in your Magento implementation, and some third-party modules may stop working correctly. The new functionality is disabled by default after installation, but to stay fully protected, Magento strongly urges you to update your modules, extensions, and customizations as soon as possible so your Magento admin panel is secured against automated attacks.
The patch is available for Magento Enterprise Edition 1.7 and later, and for Magento Community Edition 1.4 and later. You can also upgrade to the latest version of Magento, Enterprise Edition 1.14.2.2 or Community Edition 1.9.2.2, which already include the patch.
Have questions about the patch or need help rolling it out? Get in touch and we’ll be happy to help.
