SUPEE-9767 V2 – A New Version of SUPEE-9767 is Out for Magento 1!

Yesterday, Magento released SUPEE-9767 V2, which fixes several security and functional issues reported in its initial patch i.e. SUPEE-9767. SUPEE-9767 V2 is an updated version of original SUPEE-9767 (explained in our previous blog on SUPEE-9767 on June 1st).

So if you have already applied first version of this patch, you are suggested to revert and then apply its second version. However, if you’re still planning to install SUPEE-9767, please stop as it has certain issues and just apply its recent second version.

General Issues with SUPEE-9767 V1 – That are Now Fixed…!

• strip_tags functionality in the checkout JavaScript was missing in initial patch – Fixed Now in SUPEE-9767 V2.
• Failure of customer registration during a standard checkout and when the form key authentication was enabled – Fixed Now.
• Issue with Allow-symlinks disabling option – Fixed Now (Allow symlinks option is now disabled at the time of installation or upgrade and Magento now shows Allow-symlinks message in the Admin message section as needed.)
• Background transparency of uploaded images was missing – Fixed Now.
• Issue with Multiple addresses checkout when checkout form validation was enabled – Fixed Now.

SUPEE-9767 V2 Secures Your Magento 1 Store Against:

• Remote Code Execution
• Information Leaks
• Cross-site Scripting

Installation Process:

• Revert SUPEE-9767 V1 if you have already applied it.
• Just Deploy SUPEE-9767 V2 if V1 hasn’t already been applied.

Where to Download:

It is best to download SUPEE-9767 V2 from Magento Tech Resources Download Section (https://magento.com/tech-resources/download#download2034) – however, you can also take help from our Magento Certified Developers.

If you need a helping hand to assist you with this security patch update or having any queries, our Magento Certified Solution Specialist & Certified Developers are here for you! They have successfully installed, such Magento security patches for over 80+ stores earlier and are experienced to ensure your store security. Feel free to contact us at sales@envisionecommerce.com or connect with our Magento services to do it fast & safe for you.