Magento 2.0.6 Update Released

May 17, 2016

Magento 2.0.6 – Important Security & Functional Updates Today, Magento released Enterprise Edition and Community Edition 2.0...

Magento 2.0.6 – Important Security & Functional Updates

Today, Magento released Enterprise Edition and Community Edition 2.0.6, which contains important functional improvements. You can now use Redis for session storage and a file permission issue has been fixed by providing a more flexible way to set file ownership. Full details on the functional enhancements are included in the release notes for Enterprise Edition and Community Edition.

Additionally, the release has several security improvements, including:

Stopping unauthenticated users from using REST or SOAP API calls to remotely execute malicious code on the server.
Preventing a site from being remotely triggered to reinstall itself so that the attacker can potentially take control of it.
No longer allowing authenticated customers to change other customers’ account information using SOAP or REST API calls.
Fully resolving a previous vulnerability with cross-site scripting in the Authorize.net payment module.

More information regarding the security updates is available on the Magento Security Center.

ACCESSING THE RELEASE

You are advised to deploy this new release right away. It can be accessed from the following locations:

Enterprise Edition

Enterprise Edition 2.0.6 (New .zip file installations)My Account > Downloads > Magento Enterprise Edition 2.X > Magento Enterprise Edition 2.x Release > Version 2.0.6Enterprise Edition 2.0.6 (New composer installations)http://devdocs.magento.com/guides/v2.0/install-gde/prereq/integrator_install.htmlEnterprise Edition 2.0.6 (Composer upgrades)http://devdocs.magento.com/guides/v2.0/comp-mgr/bk-compman-upgrade-guide.html

Community Edition

Community Edition 2.0.6 (New .zip file installations)Community Edition Download Page > Download Tab

Community Edition 2.0.6 (New composer installations)http://devdocs.magento.com/guides/v2.0/install-gde/prereq/integrator_install.htmlCommunity Edition 2.0.6 (Composer upgrades)http://devdocs.magento.com/guides/v2.0/comp-mgr/bk-compman-upgrade-guide.htmlCommunity Edition 2.0.6 (Developers contributing to the CE code base)http://devdocs.magento.com/guides/v2.0/install-gde/install/cli/dev_options.html

Partners

Enterprise Edition 2.0.6 (New .zip file installations)Partner Portal > Downloads > Magento Enterprise Edition 2.X > Magento Enterprise Edition 2.x Release > Version 2.0.6Enterprise Edition 2.0.6 (New composer installations)http://devdocs.magento.com/guides/v2.0/install-gde/prereq/integrator_install.htmlEnterprise Edition 2.0.6 (Composer upgrades)http://devdocs.magento.com/guides/v2.0/comp-mgr/bk-compman-upgrade-guide.html

If you need help upgrading Magento 2, get in touch with Full English today.

Lorem ipsum dolor sit amet, consectetur adipiscing elit sed do eiusmod tempor incididunt.

Sed ut perspiciatis unde omnis iste natus error sit voluptatem accusantium doloremque laudantium, totam rem aperiam

Da jedoch überall nur Menschen am Werk sind, können Fehler nicht zu 100 % ausgeschlossen werden. Um dennoch ein höchstmögliches Mass an Sicherheit bieten zu können, sind unsere Berater/innen verpflichtet, für jeden getätigten Abschluss direkt im Anschluss an die Beratung gemeinsam mit dem Kunden ein Beratungsprotokoll zu erstellen. Dieses wird dann sowohl vom Kunden, als auch vom Berater unterzeichnet.