Security threat for Easy Banners & Argento users for Magento 1 and Magento 2

We have urgent information regarding the Easy Banners extension.

We draw your attention that all Argento users both for Magento 1 and Magento 2 as well as customers who use our Easy Banners module, do need to heed our advice.

See, the thing is that we have detected a security threat in this module. It's imperative to apply the patches or upgrade to the recent release immediately.

We accept our responsibility to ensure that your website is fully protected from any security threats and vulnerabilities. That's why:

We do offer the access and free upgrade to the recent version of Easy Banners for all our customers even if a support period is over. Recent extension version is available at download area of all our sites.
Our team will also assist you in applying the patch or upgrading within your active support period.
New Argento release is ready to be used both on Magento 1 and Magento 2 sites.
New Easy Banners release is accessible to Magento 1 and Magento 2.

Hope you'll make the right decisions being face-to-face with security threats. Do the following:

TM customers. Please go to your TM Account page or submit a ticket.
Argento users. Navigate to your Downloads folder or add a ticket.
SwissUpLabs customers. Go to your Account page or submit a ticket.

Categories: Magento

Posted On: September 29 2017

Posted By: Roman B.

11 Comments

Ahmed Hussain

September 29 2017 at 9:42 am

Please help to upgrade the security patches.

Reply ↓
1. Roman B.
  
  September 29 2017 at 9:43 am
  
  Please open ticket and our support team will help you.
  
  Reply ↓
Sam

September 29 2017 at 1:10 pm

your patch for Argento is not a patch file. is this is a joke? It's a complete bunch of directories and files, including core updates. A patch file simply changes certain lines of code to make it more secure. Where is the patch to just patch the problematic parts of the code in Easy Banner? How can you announce a security threat and not release a real patch?

Reply ↓
1. Roman B.
  
  September 29 2017 at 2:51 pm
  
  Hi, we have also .diff file that you can apply. Please contact our support for more details. Upgrading extension to recent release is just more easy and also bring additional features. Also our developers can help you with that task if you have problem with that.
  
  Reply ↓
Grey

September 29 2017 at 3:24 pm

For the person who complained about the Argento "patch"...I just installed the new EasyBanner extension onto my existing Argento installation. Done in five minutes. Maybe you can post that for me. Thanks for getting this issue addressed quickly! ~~

Reply ↓
schoi

September 29 2017 at 6:05 pm

does this apply to Templates Master Easyslide? I don't think it is the same as Easybanner.

Reply ↓
1. Roman B.
  
  September 29 2017 at 7:15 pm
  
  No, only to Easy banner module.
  
  Reply ↓
Chad

September 29 2017 at 10:18 pm

Is the download labeled M1_SEC_BANNERS? If so the date is incorrect showing as January of 2013? I do not see anywhere in your messages or documentation referencing the name of the update download link... and there are MANY when you have been a customer for a long time. Allowing to sort downloads by date would be nice by the way on your site in our "My downloadable products" section.

Reply ↓
1. Roman B.
  
  October 3 2017 at 3:02 pm
  
  Yes that is correct filename. Date is set to the past so every our customer was able to download it. You can get more detailed information from our support.
  
  Reply ↓
Nik

October 20 2017 at 5:12 am

Does this apply to TM Easy Catalog Image as well? It's the only module we use from TM, Argento or SwissUpLabs but we have received the message in our inbox too.

Reply ↓
1. Roman B.
  
  October 20 2017 at 8:29 am
  
  No this issue doesn't affect Easy Catalog Image extension.
  
  Reply ↓