In order to keep Magento 1 stores secure against potential threats and vulnerabilities, Magento keeps releasing security patches at regular intervals. Owing to this, Magento released Magento SUPEE 11295 on 28 January 2020 along with the Magento 1.9.4.4 version which provides resolution to multiple critical security issues. These security enhancements help safeguard your Magento stores from cross-site scripting, arbitrary code execution, and sensitive data disclosure vulnerabilities, and other security issues.
We recommend all the Magento 1.x users to upgrade to the Magento 1.9.4.4 or install the patch Magento security patch 11295 to secure your Magento stores from potential threats.
Issues Fixed: The Disable button present when you run the compiler from Admin > System > Tools > Compiler is now enabled as expected. Previously, when you click the Disable button, it did not change state.
Methods to Install Magento SUPEE 11295:
- Using SSH
- Without using SSH
Each method in detail,
Method 1: Install Magento SUPEE 11295 with SSH
Contact your hosting provider for help with setting up SSH.
Download Magento SUPEE 11295 Patches files for your Magento Version from here.
Upload the patch into your Magento root directory and run the appropriate SSH command:
For .sh file extension:
sh patch_file_name.shExample:
sh PATCH_SUPEE-11295_CE_1.9.4.1_v2-2020-01-28-04-20-33.shFor .patch file extension:
patch —p0 < patch_file_name.patchFor Linux OS or Ubuntu derived machines:
On Linux OS or Ubuntu derived machines, using sh will throw an error as sh is supposed to be used only with purely POSIX compliant scripts and Magento scripts are not 100% POSIX compliant. Instead, on Ubuntu and derived OSes such as Linux Mint, you should use
bash patch.shNote: Once executed the command, refresh the cache in the Admin under “System > Cache Management” so that the changes can be reflected. We strongly recommend that you test all patches in a test environment before taking them live.
Method 2: Install Magento SUPEE 11295 without SSH
Download the zip file for your Magento version. You can also download these PrePatched files from Github. Once you download these files, just upload it to your Magento root folder.
| Magento version | SUPEE 11295 |
|---|---|
| Magento 1.9.4.3 | Download CE-1.9.4.3 |
| Magento 1.9.4.2 | Download CE-1.9.4.2 |
| Magento 1.9.4.1 | Download CE-1.9.4.1 |
| Magento 1.9.4.0 | Download CE-1.9.4.0 |
| Magento 1.9.3.10 | Download CE-1.9.3.10 |
| Magento 1.9.3.9 | Download CE-1.9.3.9 |
| Magento 1.9.3.8 | Download CE-1.9.3.8 |
| Magento 1.9.3.7 | Download CE-1.9.3.7 |
| Magento 1.9.3.6 | Download CE-1.9.3.6 |
| Magento 1.9.3.4 | Download CE-1.9.3.4 |
| Magento 1.9.3.2 | Download CE-1.9.3.2 |
| Magento 1.9.3.1 | Download CE-1.9.3.1 |
| Magento 1.9.3.0 | Download CE-1.9.3.0 |
| Magento 1.9.2.4 | Download CE-1.9.2.4 |
| Magento 1.9.2.3 | Download CE-1.9.2.3 |
| Magento 1.9.2.2 | Download CE-1.9.2.2 |
| Magento 1.9.2.0 | Download CE-1.9.2.0 |
| Magento 1.9.1.1 | Download CE-1.9.1.1 |
| Magento 1.9.0.1 | Download CE-1.9.0.1 |
| Magento 1.9.0.0 | Download CE-1.9.0.0 |
| Magento 1.9.0.0 | Download CE-1.9.0.0 |
| Magento 1.8.1.0 | Download CE-1.8.1.0 |
| Magento 1.8.0.0 | Download CE-1.8.0.0 |
| Magento 1.7.0.2 | Download CE-1.7.0.2 |
| Magento 1.7.0.1 | Download CE-1.7.0.1 |
| Magento 1.7.0.0 | Download CE-1.7.0.0 |
How to check if Magento SUPEE 11295 has been installed correctly?
Check if the steps to install Magento SUPEE 11295 has been implemented correctly or not using magereport.com
Another way to check for the patches installed is, using SSH. Every installed patch can be found in your store content specifically logged in to app/etc/applied.patches.list.
So you can use the ‘grep’ command to access the list:
grep ‘|' app/etc/applied.patches.listYou’ll get output like this:
SUPEE-11295_CE_1.9.4.1 | CE_1.9.4.1 | v2 | e6190d22a7bbf3d17e3cf723cbc5e0172085c71b | Wed Jan 29 10:21:14 2020 +0300 | ce-1.9.4.1-devHow to revert a patch if you are facing any issue?
Run the following SSH Command to revert your patch.
sh patch-file-name.sh -RFollow Magento StackExchange to find the possible issues related to Magento SUPEE 11295 and their solutions.
We highly recommend upgrading your Magento to the latest version Magento 1.9.4.5 which includes all the security patches including SUPEE 11295. If you need any help regarding Magento Version Upgrade, Checkout our Magento Upgrade Service.
We can also help you install Magento SUPEE 11295 professionally, visit our Magento Security Patches Installation Service.
With nearing of Magento 1 end of life, we recommend you to migrate your older Magento 1.x stores to the latest Magento 2.4.8 version and enjoy the latest features such as Page Builder, PWA Studio, and much more. If you are not much a Magento 2 guy, have a look at our Magento 2 Migration Service to get our professional help for the Magento 1 to Magento 2 migration.
