3 ms·

This is hardly unique to Magento. Lots of applications do this. It's not ideal, but it's not SO bad if the application nags you to patch on start up. I don't us

by ebbv 12y ago

This is hardly unique to Magento. Lots of applications do this. It's not ideal, but it's not SO bad if the application nags you to patch on start up. I don't use Magento, so I'm not sure if it does.

smt88 12y ago
What's bad is that it's so easy to fix. It's the distribution platform for software. Shouldn't there be lots of interested people that could take 20 minutes and write some software to fix this problem?
- toxican 12y ago
  But they did, didn't they? There's a security patch and they're nagging people to install it. What are they failing to do?
  - onli 12y ago
    Normally, if you have a security patch you release a new version containing that patch. 1.9.0 -> 1.9.1.
    - Navarr 12y ago
      No see 1.9.1 has the Configurable Swatches in it. Joking aside, they are going to release 1.9.2 soon. For Magento 1 they're still doing feature releases, and they do patches for everything else because store owners do not like going through the upgrade process. The only problem arises when people download fresh versions.
NietTim 12y ago
It does, and looks like this, a screen filling alert view when you login into the backend. http://i.imgur.com/yeBKQIM.png http://i.imgur.com/yeBKQIM.png
- ErrantX 12y ago
  It's the wordpress problem; Magento has made e-commerce accessible to anyone with a shared webspace and the minimum of knowledge (speaking as someone who's company integrates with small businesses who use Magento). So it's very easy for things to get out of date. (or even worse; one-click installers on some shared web host... so they can't update it even if they wish!)
- DCoder 12y ago
  That alert is shown because Magento issued a notification message, not because the system detected some security patches. Those two security patches were published on 2015 February 09 and 2014 October 03. In fact, Magento issued two notification messages, on Friday and on Monday, so even if you applied the patch after seeing the first message, you still saw the second message and experienced that brief moment of panic.
brianmwaters_hn 12y ago
Yes. Among them, Vim, Bash, and OpenBSD, the latter of which supposedly has a very good reputation on security.

by ebbv 12y ago

This is hardly unique to Magento. Lots of applications do this. It's not ideal, but it's not SO bad if the application nags you to patch on start up. I don't use Magento, so I'm not sure if it does.

smt88 12y ago

What's bad is that it's so easy to fix. It's the distribution platform for software. Shouldn't there be lots of interested people that could take 20 minutes and write some software to fix this problem?

toxican 12y ago
But they did, didn't they? There's a security patch and they're nagging people to install it. What are they failing to do?
- onli 12y ago
  Normally, if you have a security patch you release a new version containing that patch. 1.9.0 -> 1.9.1.
  - Navarr 12y ago
    No see 1.9.1 has the Configurable Swatches in it. Joking aside, they are going to release 1.9.2 soon. For Magento 1 they're still doing feature releases, and they do patches for everything else because store owners do not like going through the upgrade process. The only problem arises when people download fresh versions.

NietTim 12y ago

It does, and looks like this, a screen filling alert view when you login into the backend. http://i.imgur.com/yeBKQIM.png http://i.imgur.com/yeBKQIM.png

ErrantX 12y ago
It's the wordpress problem; Magento has made e-commerce accessible to anyone with a shared webspace and the minimum of knowledge (speaking as someone who's company integrates with small businesses who use Magento). So it's very easy for things to get out of date. (or even worse; one-click installers on some shared web host... so they can't update it even if they wish!)
DCoder 12y ago
That alert is shown because Magento issued a notification message, not because the system detected some security patches. Those two security patches were published on 2015 February 09 and 2014 October 03. In fact, Magento issued two notification messages, on Friday and on Monday, so even if you applied the patch after seeing the first message, you still saw the second message and experienced that brief moment of panic.

brianmwaters_hn 12y ago

Yes. Among them, Vim, Bash, and OpenBSD, the latter of which supposedly has a very good reputation on security.