Merge pull request magento#292 from magento/2.1.2_releasenotes

2.1.2 releasenotes
martinssu · Oct 12, 2016 · 7393114 · 7393114
2 parents b5713e8 + 375613f
commit 7393114
Show file tree

Hide file tree

Showing 3 changed files with 530 additions and 1 deletion.
diff --git a/guides/v2.1/release-notes/ReleaseNotes2.1.2CE.md b/guides/v2.1/release-notes/ReleaseNotes2.1.2CE.md
@@ -0,0 +1,259 @@
+---
+layout: default
+group: release-notes
+subgroup: 02_ReleaseNotes
+title: Magento CE 2.1.2 Release Notes
+menu_title: Magento CE 2.1.2 Release Notes
+menu_order: 7
+version: 2.1
+github_link: release-notes/ReleaseNotes2.1.2CE.md
+---
+
+*	TOC
+{:toc}
+
+
+## Magento Community Edition 2.1.2
+We are pleased to present Magento Community Edition 2.1.2. This release includes security enhancements and several functional fixes.
+
+
+Backward-incompatible changes are documented in [Magento 2.1 backward incompatible changes]({{ page.baseurl }}release-notes/backward-incompatible-changes-2.1.html).
+
+## Highlights
+
+Magento 2.1.2 contains multiple bug fixes and enhancements, including
+
+* Support for <i>PHP 7.0.4 and 5.6.5</i>. (This release supports PHP 5.6.5 and above instead of 5.6.x.)
+
+
+* Compatible with <i>MySQL 5.7</i>.
+
+
+* <i>Two new web APIs (or service contracts) for the Sales module</i> that incorporate functionality into the Sales API that is currently available in the Admin interface. After you install this patch, you’ll be able to use the Sales API `ShipOrder` and `InvoiceOrder` methods to capture payment and ship product. See <a href="{{ page.baseurl }}mrg/intro.html" target="_blank">Module Reference Guide</a> for information on using the `ShipOrder` and `InvoiceOrder` interfaces.
+
+### Why are we adding new APIs in a patch release?
+{:.no_toc} 
+
+<i>These new interfaces will not break any existing customizations or extensions.</i>  See <a href="https://alankent.me/category/magento/" target="_blank">Alan Kent’s blog about Magento</a> for more information about these features and Magento’s use of semantic versioning. 
+
+## Security enhancements
+This release includes enhancements to improve the security of your Magento software. While there are no confirmed attacks related to these issues to date, certain vulnerabilities can potentially be exploited to access customer information or take over administrator sessions. We recommend that you upgrade your existing Magento software to the latest version as soon as possible.
+
+The following list provides an overview of the security issues fixed in this release. We describe each issue in greater detail in the <a href="https://magento.com/security/patches/magento-2010-and-212-security-update" target="_blank">Magento Security Center</a>.
+
+
+
+### General security 
+{:.no_toc} 
+
+
+
+<!--- 56912/1488-->*  Fixed issue with using the Magento Enterprise Edition invitations feature to insert malicious JavaScript and subsequently execute it in the Admin context.  
+
+
+<!--- 57565-->* You can no longer change or fake a product price from the Magento storefront and then complete an order with that faked price. 
+
+
+
+<!--- 56852/1484-->*  Fixed issue with arbitrary PHP code execution during checkout. 
+
+
+<!--- 56594/1490-->*  Fixed issue with retrieving potentially sensitive information through the use of backend media.
+
+
+<!--- 53971-->*  Fixed issue with running `cron` jobs less frequently than specified by the application `cron` setting. 
+
+
+<!--- 57965-->*  Sessions now expire as expected after logout.
+
+
+
+
+
+<!--- 57463-->* Removed potential for exploitation of guest order view feature to harvest order information.  
+
+
+<!--- 56940-->* Kount and 3D Secure now work as expected for Braintree Vault. 
+
+
+<!--- 57812/1539, 1543-->* You can no longer delete a currently logged-in user. 
+
+<!--- 56901/1492-->*  A user with lesser privileges can no longer force an Admin user to add his private or public key using a JSON call. 
+
+
+
+
+
+### Denial-of-service (DoS) attacks and brute force attacks
+{:.no_toc} 
+
+<!--- 46026/57463-->* The Guest order view protection code is no longer vulnerable to brute force attacks.
+
+<!--- 57302/1338-->*  You can no longer manipulate the full page cache to store incorrect pages under regular page URL entries.
+
+
+
+
+### Cross-Site Request Forgery  (CSRF)
+{:.no_toc} 
+
+
+<!--- 57362-->*  Fixed issue with potential storage of malicious XSS code in the body of an email template. (A malicious user could use this this script to steal user information and cookies, or to bypass cross-site request forgery protection.) 
+
+<!--- 57804/1539-->* Fixed issue with cross-site scripting reflected in loading section of request.
+
+
+
+
+### SQL injection
+{:.no_toc} 
+
+<!--- 56540/1480-->*  Fixed issue with potential SQL injection through the Zend framework through ordering or grouping parameters. 
+
+
+
+## Functional fixes and enhancements
+We address the following functional issues in this release.
+
+
+
+### Sales API enhancements
+{:.no_toc} 
+
+
+
+<!--- 56429 -->*  We've added the ability to change the status of a shipment through the web API.  The new `ShipOrder` interface supports tasks you can already do through the Admin dashboard, including the ability to:  
+
+	* create a shipment document (full or partial)
+
+	* add details about shipped items into an order
+
+	* change status and state of an order according to performed actions
+
+	* notify customer about new shipment document
+
+
+<!--- 56428 -->*  We've added the ability to change the status of an invoice through the web API.  The new `InvoiceOrder` interface supports tasks you can already do through the Admin dashboard, including the ability to:  
+
+	* create an invoice document (full or partial)
+
+	* capture money placed with order payment
+
+	* notify a customer about document creation
+
+	* change order status and state
+
+
+For more information on these API enhancements, see <a href="{{ page.baseurl }}mrg/ce/Sales/services.html" target="_blank">Magento Sales API</a>.
+
+
+
+<!--- 55126-->* We've fixed an issue with using the REST API to link simple products to configurable ones. <a href="https://github.com/magento/magento2/issues/5243" target="_blank">(GITHUB-5243)</a>
+
+
+<!--- 58401-->* You can now use the REST API to create a configurable product with a linked child product. <a href="https://github.com/magento/magento2/issues/5243" target="_blank">(GITHUB-5243)</a>
+
+
+
+
+
+
+
+### Cart and checkout
+{:.no_toc} 
+
+<!--- 56431, 56426-->* Magento now updates order status as expected after a shipment or invoice has been created through the API.
+
+
+<!--- 54964-->* Magento now updates the mini cart as expected when you reorder an item. Previously, Magento added the reordered items to the shopping cart, but the mini cart did not update its item count. <a href="https://github.com/magento/magento2/issues/6121" target="_blank">(GITHUB-6121)</a> 
+
+
+### Tracking and shipping
+{:.no_toc}  
+
+<!--- 57460-->* Magento no longer throws an exception if you enter an invalid FedEx shipment tracking number.
+
+
+<!--- 57097-->* Changing the city field of an order now affects the shipping rate as expected. Previously, the shipping rate did not update when you changed the city field. 	
+
+### Upgrade
+{:.no_toc} 
+
+<!--- 59505-->* You can now save simple products created in 2.0.x environments after upgrading to environments running Magento 2.1.x. Previously, you could not successfully save the opened product after upgrading. 
+
+
+### General fixes
+{:.no_toc} 
+
+<!--- 54737, 55116-->* Magento 2.1.2 now supports PHP 7.0.4. 
+
+
+<!--- 57003-->* The Product page scope selector now displays all related websites associated with a restricted user. 
+
+<!--- 56952-->* We've resolved an issue with the get active payment methods (`getActiveMethods`). <a href="https://github.com/magento/magento2/issues/5413" target="_blank">(GITHUB-5413)</a>
+
+
+<!--- 58568-->* Magento now correctly renders HTML tags on the Sales Order page price field.
+
+
+<!--- 57032-->* Visual swatches are now displayed in search results.
+
+<!--- 57049-->* Magento now factors in the Weight attribute as expected when you use advanced search on grouped products.
+
+
+
+
+<!--- DELETED:  (won't fix) 57578, CLONE: 58123, 58111, 57049, OMIT: 58667, 57878, 58473, 58421, 58402, 58313 (releasenotes),57845, 55862, 57294, 58166, 58204, (internal) 58929, 58875, 58700, 58606, 58590, 58474, 56425 -->
+
+
+
+## Known issues
+
+
+* **Issue**: Error creating configurable products in 2.1.1 <a href="https://github.com/magento/magento2/issues/6424" target="_blank">(GITHUB-6424)</a>. **Workaround**: Clear your browser cache after upgrading. 
+<!--- 58017-->
+
+
+
+
+* **Issue**: When you edit a configurable product and add options to a simple product, Magento does not save these options. **Workaround**: None.
+<!--- 58034-->
+
+
+
+* **Issue**: Logo for transactional emails cannot be uploaded successfully <a href="https://github.com/magento/magento2/issues/6275" target="_blank">(GITHUB-6275)</a>. **Workaround:** None.
+
+<!--- 57291-->
+
+
+
+* **Issue**: The `catalogProductRepository` API (REST) returns an unexpected attribute type. Certain `attribute_code` values (for example,  `category_ids`) return an array instead of the expected string. **Workaround**: As needed, adjust your code so that it handles the response as an array.  
+
+<!--- 56853-->
+
+
+
+
+* **Issue**:  Magento does not correctly display Product > Catalog table after upgrade from 2.0.1 to 2.1.0 on systems running Varnish. **Workaround**: Restart Varnish after upgrading. For more information, see <a href="http://devdocs.magento.com/guides/v2.0/comp-mgr/upgrader/upgrade.html" target="_blank">Component Manager and System Upgrade Guide: Step 4</a>.
+<!--- 54618-->
+
+
+
+## System requirements
+Our technology stack is built on PHP and MySQL. For more information, see
+<a href="{{ page.baseurl }}install-gde/system-requirements.html" target="_blank">System Requirements</a>.
+
+<div class="bs-callout bs-callout-info" id="info">
+  <p>Magento 2.1.2 requirements have changed slightly from 2.1.1. This release supports PHP 5.6.5 and above instead of 5.6.x.</p>
+</div>
+
+
+
+{% include install/releasenotes/ce_install_21.md %}
+
+
+
+## Migration toolkits
+The <a href="{{ page.baseurl }}migration/migration-migrate.html" target="_blank">Data Migration Tool</a> helps transfer existing Magento 1.x store data to Magento 2.x. This command-line interface includes verification, progress tracking, logging, and testing functions. For installation instructions, see  <a href="{{ page.baseurl }}migration/migration-tool-install.html" target="_blank">Install the Data Migration Tool</a>. Consider exploring or contributing to the <a href="https://github.com/magento/data-migration-tool" target="_blank"> Magento Data Migration repository</a>.
+
+The <a href="https://github.com/magento/code-migration" target="_blank">Code Migration Toolkit</a> helps transfer existing Magento 1.x store extensions and customizations to Magento 2.0.x. The command-line interface includes scripts for converting Magento 1.x modules and layouts.