Magento Commerce 2.1.16 Release Notes

Release notes published November 28 and last updated on December 10,2018.

We are pleased to present Magento Commerce 2.1.16. This release includes multiple enhancements to product security plus bug fixes and enhancements. Check out the many community-contributed fixes!

Although this release includes these security enhancements, no confirmed attacks related to these issues have occurred to date. However, certain vulnerabilities can potentially be exploited to access customer information or take over administrator sessions, so we recommend that you upgrade your Magento software to the latest version as soon as possible.

See Magento Security Center for a comprehensive discussion of these issues. All exploitable security issues fixed in this release (2.1.16) have been ported to 2.2.7, 1.14.4.0, and 1.9.4.0, as appropriate.

Highlights

Magento 2.1.16 contains over 30 security fixes and enhancements. See Magento Security Center for more information.

  • Magento 2.1.16 now provides support for PHP 7.1.
  • The Magento UPS module has been updated to support new UPS API endpoints.

Fixed issues

In addition to security enhancements, this release contains the following functional fixes.

Installation, deployment, configuration

  • You can now save configuration values to the database without assigning parameters for scope ID and type when using default scope. Fix submitted by Prince Patel in pull request 17083.

Catalog

  • Magento now maintains product image roles as expected after upgrade. Previously, image roles randomly disappeared from product pages after upgrade. Fix submitted by Eduard Chitoraga in pull request 17553. GitHub-10687
  • The custom attribute group name on customer and product pages can now be translated. Fix submitted by Dmytro Cheshun in pull request 17684.
  • The setterName method is now correctly set. Fix submitted by insanityinside in pull request 17774.
  • setterName in app/code/Magento/Catalog/Model/ProductLink/Repository.php now implements SimpleDataObjectConverter::snakeCaseToUpperCamelCase. Fix submitted by insanityinside in pull request 17883.
  • You can now save a title for a product from the Product > Customizable Options page. Fix submitted by Jignesh Baldha in pull request 17609. GitHub-6305

Cleanup and minor code refactoring

  • Minor CSS issues in lib/internal/Magento/Framework/View/Test/Unit/Url/_files/sourceImport.css have been fixed. Fix submitted by Arnoud Beekman in pull request 17366.

EAV

  • The Product Attribute Repository‚Äôs incorrect return values have been replaced with values that now adhere to Magento\Catalog\Api\ProductAttributeRepositoryInterface (extends Magento\Framework\Api\MetadataServiceInterface) as expected. Fix submitted by julianvdrielen in pull request 15688. GitHub-4803

Email

Framework

  • Parent theme image height settings (specified in view.xml) no longer override the height settings assigned to individual images. Fix submitted by Tommy Quissens in pull request 17439. GitHub-12250

General

  • When editing an Admin user role, Magento now displays the Customer Groups section under the Customers section as expected. Previously, Magento displayed the Customer Groups section under the Stores > Other settings section. Fix submitted by Jignesh Baldha in pull request 17629. GitHub-16499
  • The dropdown menu of available countries that is accessible throughout both the storefront and Admin is now populated as expected. Fix submitted by Nilesh Lokhande in pull request 17194. GitHub-2146

Infrastructure

  • Magento 2.1.16 now provides support for PHP 7.1.
  • You can now use REST to add a configurable product to a shopping cart without creating a duplicate product entry. Fix submitted by Pratik Oza in pull request 17476. GitHub-15028
  • The sidebars for the wishlist on the catalog, my account, and checkout pages now render special characters correctly. Previously, the browser displayed ™ instead of rendered special characters on these pages. Fix submitted by Pratik Oza in pull request 17422.

Password

  • The password reset strength meter that Magento displays when a customer resets a password now works as expected. Fix submitted by Jignesh Baldha in pull request 17290. GitHub-13429

Reports

  • The Year-to-date dropdown accessed from Stores > Configuration > General > Reports > Dashboard now displays a numerical list that ranges from 01 to 12 as expected. Fix submitted by Ronak Patel in pull request 17496. GitHub-17289

Review

  • Magento now displays a 404 page not found error when a customer tries to navigate to a product review that is not accessible. Previously. Magento displayed a PHP error code. Fix submitted by Pratik Oza in pull request 17632. GitHub-13102

Sales

  • When you define an extension attribute for the OrderInterface with a join table, the specified attribute code value is now returned as expected in REST calls. Previously, the JSON response did not contain some_id in the extension attributes property. Fix submitted by Sam Butler Thompson in pull request 16169. GitHub-8035
  • The Magento\Sales\Block\Adminhtml\Order\Totalbar class and totalbar template files have been deprecated. These components were formerly included but never implemented in the invoice create and credit memo create layout files. Fix submitted by Danny Verkade in pull request 17413. GitHub-16653, GitHub-16655

Shipping

  • The Magento UPS module has been updated to support new UPS API endpoints.
  • Multishipping checkout now works as expected. Previously, Magento displayed the Shipping address is not set error message when checking out an order with multiple addresses. Fix submitted by Dmytro Cheshun in pull request 16783. GitHub-16555

Store

Testing

  • \Magento\Cms\Model\Block is now covered by unit tests. Fix submitted by Dmytro Cheshun in pull request 17682.
  • The \Magento\Catalog\Test\Unit\Cron\AvailabilityCheckerTest and \Magento\Catalog\Test\Unit\Cron\DeleteOutdatedPriceValuesTest classes are now covered by unit tests. Fix submitted by Jignesh Baldha in pull request 17606.
  • The \Magento\Search\Model\SynonymAnalyzer and \Magento\Search\Model\SynonymAnalyzer classes are now covered by unit tests. Fix submitted by Zebra in pull request 17839.
  • \Magento\Sales\Model\Validator is now covered by unit tests. Fix submitted by Dmytro Cheshun in pull request 17940.

Theme

  • Magento now displays the wishlist icon on the shopping cart in mobile view. Fix submitted by Hitesh in pull request 17912. GitHub-17851

UI

  • The JavaScript validation rule used to validate AM/PM time settings now works as expected when JavaScript is minified. Fix submitted by Dmytro Cheshun in pull request 17689. GitHub-17648
  • The message list component message type now has a message type of success. Previously, this type was always error when the parameters property was specified. Fix submitted by Dmytro Cheshun in pull request 17702. GitHub-17700
  • .png images from the GD2 image library that have transparent backgrounds now retain their transparent backgrounds after upload. Previously, these transparent backgrounds were rendered black when you displayed these images after upload. Fix submitted by Eduard Chitoraga in pull request 17855. GitHub-14248

Community contributions

We are grateful to the wider Magento community and would like to acknowledge their contributions to this release.

Individual contributor contributions

The following table identifies contributions from our community members. This table lists the community member who contributed the pull request, the external pull request, and the GitHub issue number associated with the pull request (if available).

Contributing community member Related GitHub Issues Pull Requests
dverkade #16653 magento/magento2#17413
dverkade #16655 magento/magento2#17413
samtay #4803 magento/magento2#15688
quisse #12250 magento/magento2#17439
zukovasmartynas #13429 magento/magento2#17290
yspeedwicked #15028 magento/magento2#17476
JoshuaFlood #17289 magento/magento2#17496
p-bystritsky #16555 magento/magento2#16783
gnanasekaranl #14056 magento/magento2#16782
bachlee89 #6305 magento/magento2#17609
adampmoss #16273 magento/magento2#16310
emiprotech #16499 magento/magento2#17629
ruthger92 #13102 magento/magento2#17632
markoshust #17648 magento/magento2#17689
dmytro-ch #17700 magento/magento2#17702
jb-dg #14248 magento/magento2#17855
hitesh-wagento #17851 magento/magento2#17912
boxyman #10687 magento/magento2#17553
sterfpaul #8035 magento/magento2#16169
SilvanLaroo #2146 magento/magento2#17194
amingilani #4547 magento/magento2#11576

Partner contributions

The following table highlights contributions made by Partners. This table lists the Partner who contributed the pull request, the external pull request, and the GitHub issue number associated with it (if available).

Contributing community member Related GitHub Issues Pull Requests
dverkade #16653 magento/magento2#17413
dverkade #16655 magento/magento2#17413
samtay #4803 magento/magento2#15688
quisse #12250 magento/magento2#17439
zukovasmartynas #13429 magento/magento2#17290
yspeedwicked #15028 magento/magento2#17476
JoshuaFlood #17289 magento/magento2#17496
p-bystritsky #16555 magento/magento2#16783
gnanasekaranl #14056 magento/magento2#16782
bachlee89 #6305 magento/magento2#17609
adampmoss #16273 magento/magento2#16310
emiprotech #16499 magento/magento2#17629
ruthger92 #13102 magento/magento2#17632
markoshust #17648 magento/magento2#17689
dmytro-ch #17700 magento/magento2#17702
jb-dg #14248 magento/magento2#17855
hitesh-wagento #17851 magento/magento2#17912
boxyman #10687 magento/magento2#17553
sterfpaul #8035 magento/magento2#16169
SilvanLaroo #2146 magento/magento2#17194
amingilani #4547 magento/magento2#11576

System requirements

Our technology stack is built on PHP and MySQL. For more information, see System Requirements.

Installation

See How to get the Magento software for comprehensive information about Magento 2.1.x installation and setup.

Migration toolkits

The Magento Data Migration Tool helps transfer existing Magento 1.x store data to Magento 2.x. This command-line interface includes verification, progress tracking, logging, and testing functions. For installation instructions, see Install Data Migration Tool. Consider exploring or contributing to the Magento Data Migration repository.

An updated version of this toolkit is typically available several days after the patch release.

The Code Migration Toolkit helps transfer existing Magento 1.x store extensions and customizations to Magento 2.0.x. The command-line interface includes scripts for converting Magento 1.x modules and layouts.

Credits

Dear community members, thank you for your suggestions, bug reports, and code contributions.