Adobe Commerce cloud deployment failed - APSB25-08 isolated patch can’t be applied

Last update: May 12, 2025

If you can’t apply the APSB25-08 isolated patch, you don’t need to apply the patch separately. It’s already included in Cloud Patches for Commerce 1.1.8. Confirm the version of Cloud Patches for Commerce that you’re on. If you find that you’re on version 1.1.8 or later, don’t apply the vuln-28982-2-4* patch.

Description

Environments

Adobe Commerce on cloud infrastructure 2.4.4 - 2.4.7

Issue

You’re trying to apply the APSB25-08 isolated security patch on the Adobe Commerce on cloud infrastructure environment, but receive an error such as:

Error: patch /app/m2-hotfixes/vuln-28982-2-4-6x-v2-composer.patch can't be applied
Start of rollback

Cause

Part of this isolated patch is included with the Cloud Patches for Commerce version 1.1.8.

Resolution

You don’t need to apply the patch separately. It’s already included in Cloud Patches for Commerce 1.1.8.

To confirm the version of Cloud Patches for Commerce that you’re on, run this command:

composer show magento/magento-cloud-patches

If this shows that you’re on version 1.1.8 or later, don’t apply the vuln-28982-2-4* patch.

recommendation-more-help