Zen Cart Logo
Forums / Upgrading from 1.3.x to 1.3.9 / Does the current version in D/Ls have all the latest security fixes?

Does the current version in D/Ls have all the latest security fixes?

Locked

Views: 1,738

Results 1 to 3 of 3
This thread is locked. New replies are disabled.
28 Sep 2009, 3:24 AM
#1
rwoody avatar

rwoody

Totally Zenned

Join Date:
Aug 2004
Location:
Fountain Hills, AZ
Posts:
476
Plugin Contributions:
0

Does the current version in D/Ls have all the latest security fixes?

I'm about to build another site, and it dawned on me that over the last year or so I've updated several sites, and I wondered if the latest version in the downloads had all the latest security patches applied or do I need to go back and apply them.

The two that are most prominent to me is the patch released in 9/2008 for Sql injection and the more recent admin security patch.

Ruth

28 Sep 2009, 3:39 AM
#2
tino_schlegel avatar

tino_schlegel

Totally Zenned

Join Date:
Nov 2007
Location:
Melbourne, Australia
Posts:
532
Plugin Contributions:
0

Re: Does the current version in D/Ls have all the latest security fixes?

No. The distro is dated 12/11/2007

See this thread

28 Sep 2009, 10:34 AM
#3
swguy avatar

swguy

Administrator

Join Date:
Feb 2006
Location:
Tampa Bay, Florida
Posts:
10,699
Plugin Contributions:
56

Re: Does the current version in D/Ls have all the latest security fixes?

A list of all the required patches for 1.3.8 (and other versions) is posted here:

http://www.zen-cart.com/forum/showthread.php?t=131115

You must install these patches yourself by hand until there is a 1.3.9.