Skip to content

Magento 2 Patches

RabbitMQ patches

All RabbitMQ patches for Magento 2 are located in the Webscale STRATUS Patch Repo.

Magento2-Import-Export-RabbitMQ:

Convert consumers broker from MySQL to RabbitMQ for:

  • exportProcessor

Magento2-Catalog-RabbitMQ:

Convert consumers broker from MySQL to RabbitMQ for:

  • product_action_attribute.update
  • product_action_attribute.website.update

Magento2-Media-RabbitMQ:

Convert consumers broker from MySQL to RabbitMQ for:

  • media.content.synchronization
  • media.storage.catalog.image.resize
  • media.gallery.synchronization
  • media.gallery.renditions.update

Magento2-Inventory-RabbitMQ:

Convert consumers broker from MySQL to RabbitMQ for:

  • inventory.source.items.cleanup
  • inventory.mass.update
  • inventory.reservations.cleanup
  • inventory.reservations.update
  • inventory.reservations.updateSalabilityStatus
  • inventory.indexer.sourceItem
  • inventory.indexer.stock

Patches Affecting Multiple Versions

2.3.3-p1-2.3.7-p2 and 2.4.0-2.4.3-p1

This patch resolve a vulnerability rated critical. Successful exploitation could lead to arbitrary code execution. Read more about this vulnerability at Adobe & Sansec. Located in the MageMojo Patch Repo under Magento2-MDVA-43395-Security-Patch and Magento2-MDVA-43443-Security-Patch

2.4.x

Patch to fix PDO Adapter when MySQL 8.0 is used for Temporary tables using LIKE SQL query. Located in the MageMojo Patch Repo under Magento2-Framework-PDO-Adapter-MySQL8

2.3.6, 2.4.1

"Create an Account" button on the Create New Account page remains disabled if a shopper has entered invalid data. This prevents shoppers from re-attempting to create an account after making an error. Located in Magento Patch Downloads under MC-38509 Create New Customer Account patch

2.1.x, 2.2.x, 2.3.x

Fix disclosure of URL location of a Magento Admin panel. https://magento.com/security/security-update-potential-vulnerability-magento-admin-url-location Located in Magento Patch Downloads under PRODSECBUG-2432

2.3.1, 2.3.2

Async/Bulk REST APIs only support the default store view scope patch. Located in Magento Patch Downloads under Scope parameter for Async/Bulk API patch

Single Version Patches

2.4.0

Can not access the Braintree Settlement Report page patch. Located in Magento Patch Downloads under BUNDLE-2683 Braintree Settlement Report patch

Magento throws an error when opening "Sales > Braintree Virtual Terminal patch. Located in Magento Patch Downloads under BUNDLE-2670 Braintree Virtual Terminal patch

2.3.3

Catalog pagination issue on Elasticsearch 6.x patch. No results after page 1. Located in Magento Patch Downloads under Catalog pagination issue on Elasticsearch 6.x patch

2.2.5

Performance optimization for retrieving product attributes patch. Located in Magento Patch Downloads under MAGETWO-93083

2.2.4

Magento multi-store installations don't use store view-specific values from the store configuration settings. Instead uses default regardless of settings. Located in Magento Patch Downloads under MAGETWO-92926

2.1+

Patch to fix magento/framework/Stdlib/Cookie/PhpCookieManager.php and raise MAX_NUM_COOKIES from 50 to 300. Located in the MageMojo Patch Repo under Magento2-Framework-Stdlib-Cookie-PhpCookieManager