Magento Security Announcement and GoMage Extensions Update

Magento has detected significant vulnerabilities in the current versions of Magento system and because of this a new Security Patch SUPEE-6788 as well as Enterprise Edition 1.14.2.2 and Community Edition 1.9.2.2 have been released. GoMage team urgently released the new versions of some extensions, and they are available in personal accounts on www.gomage.com now.

Magento has found serious vulnerabilities in the existing versions of Magento system. This means that any Magento online store can be damaged and harmed if certain protective actions are not implemented as soon as possible. In order to assist the merchants protect their online stores, Magento has released a new Security Patch SUPEE-6788. The installation of this patch is one of the measures that need to be taken to protect Magento system. It should be noted that the Patch SUPEE-6788 is fundamentally different from previous patches because it corrects over 10 security damages and makes structural changes in the CMS. These modifications significantly affect the functionality of Magento online store and can break the operation of some Magento extensions. All the owners of Magento online stores need to understand that correct operation of the patch is only possible if all previous security patches are installed.

Another measure that allows solving the issue is upgrading Magento to the latest version. Enterprise Edition 1.14.2.2 and Community Edition 1.9.2.2 have been released and are now available on http://magento.com/.

The installation of the Security Patch SUPEE-6788 or Magento upgrade to the latest version is mandatory for all Magento online stores.

Out of those 10 security vulnerabilities mentioned above, 4 were critical, allowing information exposure, allowing attackers to bypass intended access restrictions and obtain access to private information via template processing method. Taking into account the seriousness of circumstances, GoMage team carefully analyzed all GoMage extensions for possible problems related to the new Security Patch or Magento upgrade.

Such GoMage extensions as Feed Pro, Advanced Navigation, Sales and Deals, SEO Booster and Banner Slider will stop working after installation of the patch SUPEE-6788 and therefore, they need to be updated. That is why, GoMage team urgently released the new versions of these extensions, and they are available in your accounts on www.gomage.com now.

In the case of upgrading Magento system to the latest version the update of all GoMage extensions listed above is desirable but not mandatory, since all revealed problems have been fixed in Magento Enterprise Edition 1.14.2.2 and Community Edition 1.9.2.2.

As Magento expert, GoMage is ready to support all customers in regards to implementation of the necessary changes and perform all technical works. For professional support or consultations related to Magento online store check for vulnerabilities or technical issues, please e-mail to support@gomage.com.

Sincerely yours,

GoMage Team

Share: