Does a new install of v1.3.8a need a patch?

I recently did a fresh install of "zen-cart-v1.3.8a-full-fileset-12112007". When I log into my admin page the following message in bold red type is displayed near the top of the page:

New PATCH Available: v1.3.8a - patch: [1] :: Recommended upgrade.
Download Here

I apologize if I'm being obtuse, but does this alert imply that patch #1 is available for v1.3.8a?

Yes, you'll need to apply the patches that have been published since v1.3.8a was released. They are listed here: http://www.zen-cart.com/forum/showthread.php?t=131115

The next version currently in development will have them all rolled into it when it is released. ETA not yet determined.

Thank you for the reply. I navigated to the link which you provided and started patching my v1.3.8a by changing the name of my admin directory and also creating the file "/includes/extra_configures/pci_patch_v13x_search.php" related to PCI scans. So, that would be two out of the following (from your link):

1.3.8 / v1.3.8a
http://www.zen-cart.com/forum/showthread.php?t=102802
http://www.zen-cart.com/forum/showthread.php?t=108428
http://www.zen-cart.com/forum/showthread.php?t=130161
http://www.zen-cart.com/forum/showthread.php?t=130701
List of popular bugfixes for v1.3.8: http://www.zen-cart.com/forum/showthread.php?t=82619

Other Patches
Additionally, if any of the following are posing problems for you, the applicable patch may help:

PCI Scan patch:
http://www.zen-cart.com/forum/showthread.php?t=130701

USPS Patch May 2008:
http://www.zen-cart.com/forum/showthread.php?t=97461

Discourage Hackers
https://www.zen-cart.com/tutorials/index.php?article=320

But before I continue making these changes, can you tell me how they relate to the link that I was offered in my admin home page?
(It links to: security_patch_v138_20090619.zip)
I would like to patch and harden my installation in a systematic fashion. I am self-hosted with root privileges.

If you look carefully at the list, the 3rd link takes you to the zip file you mentioned.

Thank you. I applied all of the patches and suggestions and then tested my site with a client browser and also through the admin portal. Everything worked well.
However, after additional operations in the admin section, I now have a problem: my server produces a blank page when navigating to "mywebsite.com/catalog/index.php" This has occured immediately following changes via Configuration>>Website Maintenance

Current settings include:
Down for Maintenance: ON/OFF false
Down for Maintenance: filename down_for_maintenance

Please tell me whether there is an obvious fix or where to start a new thread.

Thank you.

Here is an update. . .
I am having difficulty with PHP error logging on my server, so I installed the Debug Error Logging Utility. When I attempt to browse to the catalog index, I get a blank page and the following error log:

[26-Sep-2009 17:39:16] PHP Fatal error: Cannot redeclare zen_js_zone_list() (previously declared in /var/www/catalog/includes/functions/functions_general.php:1418) in /var/www/catalog/includes/functions/html_output.php on line 195

I'm new to PHP and haven't a clue.

That's a classic symptom of mis-applying the June 2009 security patch. Note that the patch specifically states that all its files are admin-related, and specifically names /admin/ in all the paths of the files to be updated, including the html_output.php file. You've incorrectly replaced the non-admin version of that file with the admin version, which has not only broken your storefront, but also leaves your admin unprotected. You'll need to put back the original /includes/functions/html_output.php file, and then patch the /(renamed-admin/includes/functions/html_output.php file.

Your suggestions restored nearly all of the functionality of my store template (demo data?). However, a few of the links are not working, including the ones under the headings:* Record Companies, Music, Genres, Sponsors,* and* Have you seen. . .* A few of these produce blank tabs and the rest blank pages. Also, all of the add this to my cart and* write a review* links produce blank pages to the client browser.

Incidentally, my server is configured to serve only https/SSL.

Thanks for staying with me on this one.

Here's an update from the log utility:

[27-Sep-2009 07:22:44] PHP Warning: session_start() [<a href='function.session-start'>function.session-start</a>]: Cannot send session cookie - headers already sent by (output started at /var/www/catalog/includes/extra_configures/pci_patch_v13x_search.php:2) in /var/www/catalog/includes/functions/sessions.php on line 108
[27-Sep-2009 07:22:44] PHP Warning: session_start() [<a href='function.session-start'>function.session-start</a>]: Cannot send session cache limiter - headers already sent (output started at /var/www/catalog/includes/extra_configures/pci_patch_v13x_search.php:2) in /var/www/catalog/includes/functions/sessions.php on line 108
[27-Sep-2009 07:22:44] PHP Warning: Cannot modify header information - headers already sent by (output started at /var/www/catalog/includes/extra_configures/pci_patch_v13x_search.php:2) in /var/www/catalog/includes/init_includes/init_templates.php on line 78
[27-Sep-2009 07:22:44] PHP Warning: Cannot modify header information - headers already sent by (output started at /var/www/catalog/includes/extra_configures/pci_patch_v13x_search.php:2) in /var/www/catalog/includes/functions/functions_general.php on line 44

yessir:

PHP Warning: session_start() [function.session-start]: Cannot send session cookie - headers already sent by (output started at /var/www/catalog/includes/extra_configures/pci_patch_v13x_search.php:2) in...

You've got something wrong on line 2 of the file specified in the error message.
Related FAQ, found by searching for "headers already sent": https://www.zen-cart.com/tutorials/index.php?article=87

I took care of the most recently stated concern and, following your methodology of searching the forums (sorry I didn't apply more effort in that earlier), I fixed a few other problems. My site seems to be 100 percent functional. I have one last concern: when I navigate to my admin pages I am still getting the message which prompted me to start this thread:

New PATCH Available: v1.3.8a - patch: [1] :: Recommended upgrade.
Download Here

When you did the June admin security patch, there were 5 files involved. ALL of them belong in their respective folders under your (renamed) admin folder. If you've mistakenly not placed some of those files in the right place, you'll see that new-patch message.

My Zen Cart installation is now up-to-date, secure and running flawlessly! DrByte--Thank you.:smile: