Update

Adobe has released a security update for Adobe Commerce and Magento Open Source. This update resolves critical, important and moderate vulnerabilities.  Successful exploitation could lead to arbitrary code execution, arbitrary file system read, security feature bypass and privilege escalation.

Adobe released a security patch in June 2024 which introduced some major changes to how Magento handles Content Security Policy (CSP), and these changes directly impact functionality around the checkout.

Many developers were caught unprepared because Adobe didn’t announce this big change in the release notes.

A lot of people seem to be surprised about the timing of the latest patch. Adobe publishes the dates for these releases beforehand on this page. Mark it in your agenda to prevent unpleasant surprises.

This Mage-OS update brings parity with Magento Open Source 2.4.7 and 2.4.7-p1, plus additional contributions particularly to the unit and integration testing suites.