Magento Open Source 2.0.12 Release Notes

We are pleased to present Magento Open Source (formerly Community Edition) 2.0.12.

Highlights

Magento 2.0.12 contains more than 20 functional fixes and enhancements, and one security enhancement. Look for the following highlights in this release:

• Removal of vulnerability with the Zend framework Zend_Mail library. For more information, see New Zend Framework 1 Security Vulnerability.

• Updates to the catalog, payment, and sales modules

Security enhancement

This release includes an important enhancement to the security of your Magento software. While there are no confirmed attacks related to the Zend framework Zend_Mail library vulnerability to date, certain vulnerabilities can potentially be exploited to access customer information or take over administrator sessions. We recommend that you upgrade your existing Magento software to the latest version as soon as possible.

Functional fixes

We address the following functional issues in this release.

Catalog

• You can now directly add a configurable product (with all possible options defined) to your shopping cart from the category page. Previously, you had to review a product on the product page before completing the process of adding it to your shopping cart. (GITHUB-2574), (GITHUB-5850), (GITHUB-5882), (GITHUB-6572), (GITHUB-5558)

• Admin users can no longer create an empty URL key for a category. Previously, Magento let Admin users create an empty URL key, which lead to category-related errors.

• Magento now successfully saves a product even when you include an empty Custom Options row (Products > Catalog > Custom Options). Previously, under these conditions, Magento displayed the Invalid option value error message, and did not save the product.

Checkout

• The Use Default Checkboxes for Custom Options option now works as expected. Previously, the checkboxes under the option title and value title were not rendered correctly, and the feature did not work.

• Magento now displays the Thank you for your purchase! message after a customer successfully checks out. Previously, Magento did not display this message, even though the HTML code was present. (GITHUB-6968)

• You can now create a new order from the Magento Admin. (GITHUB-5533), (GITHUB-6855)

Import/export

• Magento can now import additional_images that are tagged with labels that contain a comma separator.

• Magento no longer deletes a product after you select the Replace option while importing a product. Previously, Magento deleted the product rather than replacing it.

• You can now use Extension Manager to uninstall extensions that were installed using Composer.

Miscellaneous

• Magento now redirects you to the Setup page as expected when you specify a particular port when installing the application using Nginx. Previously, Magento did not redirect you to the Setup page, and instead displayed this message in var/report: You cannot install Magento using the Setup Wizard because the Magento setup directory cannot be accessed.

• Requests to Edge Side Includes (ESI) now return data. Previously, requests to ESI did not return data because the requested block was absent in the layout.

• Admin users now need view permission to the store to which the customers belong in order to see information about those customers. Previously, an Admin user could see information about customers that belonged to websites or stores for which the user did not have explicit permission to view.

• You can now change a category’s display mode to Static Block Only when the flat indexer is on. Previously, Magento experienced a fatal error under these conditions.

• You can now use Composer to install Magento 2.0.x with sample data, and use deploy:mode:set production, without incurring an error. Previously, Magento displayed this error when you tried to use deploy:mode:set production under these conditions:

    Start compilation
    Command returned non-zero exit code:
    `php -f /var/www/html/20ce/bin/magento setup:di:compile-multi-tenant 2>&1`
  

Payment methods

• You can now ship items to a country from which you have not authorized payment. Previously, when a customer tried to ship an order to a country from which the store was not authorized to receive payment, Magento displayed this message, No Payment method available.

Sales

• Magento now displays an error message as expected when a user tries to add less than the specified minimum quantity of a product to his shopping cart.

• The Free Shipping method now shows up as an available option when you create an order from the Magento Admin. (GITHUB-2939)

• Magento no longer assigns all orders a status of Suspected Fraud in multi-currency store configurations. (GITHUB-4263)

• An Admin user with restricted permissions no longer has access to all orders.

Travis builds

• We’ve fixed a fatal issue that occurred if you ran Travis builds on imagettfbbox 2.1.2. Previously, you’d receive this error: PHP Fatal error: Call to undefined function Magento\Framework\Image\Adapter\imagettfbbox() in /home/travis/build/magento/magento2/lib/internal/Magento/Framework/Image/Adapter/Gd2.php.

Known issues

• Issue: Customers cannot view all images that are associated with a configurable product. (The gallery does not show all the images that are associated with a configurable option.) (GITHUB-6195), (GITHUB-4101)

• Issue: You cannot use the Web Setup wizard to uninstall a module.

• Issue: Magento does not save a configurable product with specific attribute options under the following conditions:

  • the configurable product price is derived from its children
  • the children have been previously created and are in stock

• Issue: After you’ve removed all variations of a configurable product (Admin > Configuration > Remove Product), the Add Products Manually link is not available. Workaround: Retain at least one variation or use the Choose a different product option option.

• Issue: Magento saves images and videos as global values, not per store view. This can potentially result in the unwanted duplication of product images across store views.

• Issue: Magento does not consistently save video information for a product after you edit the information.

• Issue: Client-side LESS compilation is not working properly. Consequently, page load performance is not optimal.

• Issue: You encounter an error when you try to install Magento with the magento/module-cms-sample-data 100.0.5 sample data set: Error in update!

• Issue: Magento does not always display the accurate price for a configurable product when running Magento in an environment that contains multiple store views and websites.

• Issue: You cannot successfully create and save a dropdown attribute using Stores > Attributes > Product > Add New Attribute. Workaround: Save the attribute with values required set to no first, before re-saving it with values required set to yes.

• Issue: Magento experiences a fatal error when you try to get a refund on an invoice. (Specifically, a fatal error occurs when calling LocalizedException in CreditmemoService.)

• Issue: Search synonyms are not working as expected. Typically, Magento redirects users to the URL set in the search term. Currently, Magento ignores the synonym, and searches for the term that the customer enters.

• Issue: Magento does not enforce the value that specifies the minimum quantity of a product that a customer can add to the shopping cart. Instead of displaying a message that prompts the user to enter the required minimum, Magento permits a customer to order as few items as they’d like.

• Issue: When editing a product description, you cannot delete a product image across multiple stores. When you try to save your edits, Magento displays this message: The image cannot be removed as it has been assigned to the other image role.

System requirements

Our technology stack is built on PHP and MySQL. For more information, see System Requirements.

composer create-project --repository-url=https://repo.magento.com/ magento/project-community-edition=<version> <installation directory name>

composer create-project --repository-url=https://repo.magento.com/ magento/project-community-edition=2.0.10 magento2