Blog¶

August 27, 2021
in Releases v19, Releases v20, Security
1 min read

New Release 19.4.15 and 20.0.13

With the release of OpenMage 19.4.15 ¹ and 20.0.13 ², the system is now fully compatible with PHP 8.

June 25, 2021
in Releases v19, Releases v20
1 min read

New Release 19.4.14 and 20.0.12

Placeholder for the change ¹ ²

April 20, 2021
in Releases v19, Releases v20, Security
1 min read

New Release 19.4.13 and 20.0.10

Placeholder for the change ¹ ²

CVE-2021-21426 ³- Fixing a bug in Zend Framework’s Stream HTTP Wrapper
CVE-2021-21427 ⁴ - Security Update for SQLi for Magento 2 (a backport of CVE-2021-3007 of laminas-http)

April 6, 2021
in Releases v19, Releases v20
1 min read

New Release 19.4.12 and 20.0.8

Placeholder for the change ¹ ²

February 14, 2021
in Releases v19, Releases v20
1 min read

New Release 19.4.11 and 20.0.7

Placeholder for the change ¹ ²

January 19, 2021
in Releases v19, Releases v20, Security
1 min read

New Release 19.4.10 and 20.0.6

Placeholder for the change ¹ ²

CVE-2020-15244 ³ CMS Editor code execution
CVE-2020-26285 ⁴ Widget instances allows a hacker to inject an executable file on the server
CVE-2020-26252 ⁵ Layout XML RCE Vulnerability

December 29, 2020
in Releases v19, Releases v20
1 min read

New Release 19.4.9 and 20.0.5

Increase composer.json php version range to include 8.0 ¹ ²

October 20, 2020
in Releases v19, Releases v20, Security
1 min read

New Release 19.4.8 and 20.0.4

CVE-2020-15244 ³ is our second OpenMage CVE and our first CVE that is wholly independent of Adobe! ¹ ²

September 15, 2020
in Releases v19, Releases v20
1 min read

New Release 19.4.7 and 20.0.3

Placeholder for the change ¹ ²

August 18, 2020
in Releases v19, Releases v20, Security
1 min read

Our Release Today marks a new and Important Milestone for the OpenMage Project. Not even 2 Months since the end of life for Magento 1, we are now shipping the first Security Patch, which is not included in the official Magento 1 Release.