DocumentationCommerceRelease information

Adobe Commerce 2.4.5-p4 release notes

Last update: Fri Sep 29 2023 00:00:00 GMT+0000 (Coordinated Universal Time)

CREATED FOR:

  • Experienced
  • Admin
  • Developer

Adobe Commerce 2.4.5-p4 is a security release that provides three security fixes that enhance your Adobe Commerce 2.4.5 or Magento Open Source 2.4.5 deployment. It provides fixes for vulnerabilities that have been identified in previous releases.

NOTE
Adobe Commerce releases may contain backward-incompatible changes (BICs). To review backward-incompatible changes, see BIC reference. Major backward-incompatible issues are described in BIC highlights. Not all releases introduce major BICs.

Apply patch to resolve security vulnerability CVE-2022-31160 in jQuery-UI library

jQuery-UI library version 1.13.1 has a known security vulnerability (CVE-2022-31160) that affects multiple versions of Adobe Commerce and Magento Open Source. This library is a dependency of Adobe Commerce and Magento Open Source 2.4.4, 2.4.5, and 2.4.6. Merchants running affected deployments should apply the patch specified in the jQuery UI security vulnerability CVE-2022-31160 fix for 2.4.4, 2.4.5, and 2.4.6 releases Knowledge Base article.

What’s in this release?

Security enhancements for this release improve compliance with the latest security best practices. These improvements include three security fixes.

Security fixes

This patch includes three security fixes. See Adobe Security Bulletin for the latest discussion of these fixed issues.

Installation and upgrade instructions

For instructions on downloading and applying security patches (including patch 2.4.5-p4), see Quick start install.

More information?

For general information about security patches, see Introducing the New Security Patch Release.

recommendation-more-help
1d4eef6c-fef1-4e61-85eb-b58d7b9ac29f