Magento Open Source – Security Update APSB22-12 Version Information

patchesSecurityupgrade

I need to run the new security patches on Magento Open Source 2.4.3 – 2.4.3-p1 but Adobe don't actually elaborate on how to choose the correct version. My guess would be the COMPOSER version, but I would like to understand this, so could someone please explain how you know which one to use?

https://support.magento.com/hc/en-us/articles/4426353041293-Security-updates-available-for-Adobe-Commerce-APSB22-12-

https://helpx.adobe.com/security/products/magento/apsb22-12.html

My open source instance was originally from an archive.

Best Answer

Magento 2 can be installed in two ways :

Github installation or Composer based Installation

A Github installation is usually used by developers who are contributing to the Magento codebase and is a clone of the Magento 2 github repo.

Production installations should use the composer based installation which downloads released packages of Magento 2 from the Magento composer repo.

A composer installation has the Magento core code located in /vendor/magento the github installation has the Magento core code located in /app/code

Use the composer patch for your Magento 2 composer based installation.

Attempting to use a github patch will fail as the patched files will not be found.

Related Topic