Magento Open Source 2.0.12 Release Notes
We are pleased to present Magento Open Source (formerly Community Edition) 2.0.12.
Magento 2.0.12 contains more than 20 functional fixes and enhancements, and one security enhancement. Look for the following highlights in this release:
Removal of vulnerability with the Zend framework
Zend_Maillibrary. For more information, see New Zend Framework 1 Security Vulnerability.
Updates to the catalog, payment, and sales modules
This release includes an important enhancement to the security of your Magento software. While there are no confirmed attacks related to the Zend framework
Zend_Mail library vulnerability to date, certain vulnerabilities can potentially be exploited to access customer information or take over administrator sessions. We recommend that you upgrade your existing Magento software to the latest version as soon as possible.
We address the following functional issues in this release.
- You can now directly add a configurable product (with all possible options defined) to your shopping cart from the category page. Previously, you had to review a product on the product page before completing the process of adding it to your shopping cart. (GITHUB-2574), (GITHUB-5850), (GITHUB-5882), (GITHUB-6572), (GITHUB-5558)
- Admin users can no longer create an empty URL key for a category. Previously, Magento let Admin users create an empty URL key, which lead to category-related errors.
- Magento now successfully saves a product even when you include an empty Custom Options row (Products > Catalog > Custom Options). Previously, under these conditions, Magento displayed the
Invalid option valueerror message, and did not save the product.
- The Use Default Checkboxes for Custom Options option now works as expected. Previously, the checkboxes under the option title and value title were not rendered correctly, and the feature did not work.
- Magento now displays the Thank you for your purchase! message after a customer successfully checks out. Previously, Magento did not display this message, even though the HTML code was present. (GITHUB-6968)
- Magento can now import
additional_imagesthat are tagged with labels that contain a comma separator.
- Magento no longer deletes a product after you select the Replace option while importing a product. Previously, Magento deleted the product rather than replacing it.
- You can now use Extension Manager to uninstall extensions that were installed using Composer.
- Magento now redirects you to the Setup page as expected when you specify a particular port when installing the application using Nginx. Previously, Magento did not redirect you to the Setup page, and instead displayed this message in
You cannot install Magento using the Setup Wizard because the Magento setup directory cannot be accessed.
- Requests to Edge Side Includes (ESI) now return data. Previously, requests to ESI did not return data because the requested block was absent in the layout.
- Admin users now need view permission to the store to which the customers belong in order to see information about those customers. Previously, an Admin user could see information about customers that belonged to websites or stores for which the user did not have explicit permission to view.
- You can now change a category’s display mode to Static Block Only when the flat indexer is on. Previously, Magento experienced a fatal error under these conditions.
You can now use Composer to install Magento 2.0.x with sample data, and use
deploy:mode:set production, without incurring an error. Previously, Magento displayed this error when you tried to use
deploy:mode:set productionunder these conditions:
Start compilation Command returned non-zero exit code: `php -f /var/www/html/20ce/bin/magento setup:di:compile-multi-tenant 2>&1`
- You can now ship items to a country from which you have not authorized payment. Previously, when a customer tried to ship an order to a country from which the store was not authorized to receive payment, Magento displayed this message, No Payment method available.
- Magento now displays an error message as expected when a user tries to add less than the specified minimum quantity of a product to his shopping cart.
- The Free Shipping method now shows up as an available option when you create an order from the Magento Admin. (GITHUB-2939)
- Magento no longer assigns all orders a status of Suspected Fraud in multi-currency store configurations. (GITHUB-4263)
- An Admin user with restricted permissions no longer has access to all orders.
- We’ve fixed a fatal issue that occurred if you ran Travis builds on
imagettfbbox 2.1.2. Previously, you’d receive this error:
PHP Fatal error: Call to undefined function Magento\Framework\Image\Adapter\imagettfbbox() in /home/travis/build/magento/magento2/lib/internal/Magento/Framework/Image/Adapter/Gd2.php.
- Issue: Customers cannot view all images that are associated with a configurable product. (The gallery does not show all the images that are associated with a configurable option.) (GITHUB-6195), (GITHUB-4101)
- Issue: You cannot use the Web Setup wizard to uninstall a module.
Issue: Magento does not save a configurable product with specific attribute options under the following conditions:
- the configurable product price is derived from its children
- the children have been previously created and are in stock
- Issue: After you’ve removed all variations of a configurable product (Admin > Configuration > Remove Product), the Add Products Manually link is not available. Workaround: Retain at least one variation or use the Choose a different product option option.
- Issue: Magento saves images and videos as global values, not per store view. This can potentially result in the unwanted duplication of product images across store views.
- Issue: Magento does not consistently save video information for a product after you edit the information.
- Issue: Client-side LESS compilation is not working properly. Consequently, page load performance is not optimal.
- Issue: You encounter an error when you try to install Magento with the
magento/module-cms-sample-data 100.0.5sample data set: Error in update!
- Issue: Magento does not always display the accurate price for a configurable product when running Magento in an environment that contains multiple store views and websites.
- Issue: You cannot successfully create and save a dropdown attribute using Stores > Attributes > Product > Add New Attribute. Workaround: Save the attribute with values required set to no first, before re-saving it with values required set to yes.
- Issue: Magento experiences a fatal error when you try to get a refund on an invoice. (Specifically, a fatal error occurs when calling
- Issue: Search synonyms are not working as expected. Typically, Magento redirects users to the URL set in the search term. Currently, Magento ignores the synonym, and searches for the term that the customer enters.
- Issue: Magento does not enforce the value that specifies the minimum quantity of a product that a customer can add to the shopping cart. Instead of displaying a message that prompts the user to enter the required minimum, Magento permits a customer to order as few items as they’d like.
- Issue: When editing a product description, you cannot delete a product image across multiple stores. When you try to save your edits, Magento displays this message: The image cannot be removed as it has been assigned to the other image role.
Our technology stack is built on PHP and MySQL. For more information, see System Requirements.
Install the Magento software
See one of the following sections:
- Get Magento Open Source using Composer
- Get Magento Open Source using a compressed archive
- Complete the installation
Get the Magento Open Source software using Composer
This software is available from
repo.magento.com. Before installing the Open Source software using Composer, familiarize yourself with the Composer metapackage prerequisites, then run
composer create-project --repository-url=https://repo.magento.com/ magento/project-community-edition=<version> <installation directory name>
<version> matches the version you want (for example,
For example, to install Magento CE 2.0.10 in the
composer create-project --repository-url=https://repo.magento.com/ magento/project-community-edition=2.0.10 magento2
Get Magento Open Source using a compressed archive
The following table discusses where to get the Magento software. We provide the following downloads:
- Magento Open Source software only
- Magento Open Source software with sample data (designed to help you learn Magento faster)
These packages are easy to get and install. You don’t need to use Composer, all you need to do is to upload a package to your Magento server or hosted platform, unpack it, and run the web-based Setup Wizard.
Archives are available in the following formats:
To get the Magento Open Source software archive:
- Go to http://magento.com/download.
Choose either the software or the software and sample data:
Magento-CE-<version>.*(without sample data)
Magento-CE-<version>+Samples.*(with sample data)
<version>is the three-digit release number (for example,
2.1.0, and so on).
Complete the installation
After you get the Open Source software:
- Set file system ownership and permissions.
Install the Magento software:
Upgrade from an earlier version
To upgrade to version 2.0.x from an earlier version:
The Data Migration Tool helps transfer existing Magento 1.x store data to Magento 2.x. This command-line interface includes verification, progress tracking, logging, and testing functions. For installation instructions, see Install the Data Migration Tool. Consider exploring or contributing to the Magento Data Migration repository.
The Code Migration Toolkit helps transfer existing Magento 1.x store extensions and customizations to Magento 2.0.x. The command-line interface includes scripts for converting Magento 1.x modules and layouts.
Dear community members, thank you for your suggestions and bug reports.