Message from Magento
Updated versions of this release are now available. The updates add support for PHP 5.3 and address issues with upload file permissions, merging carts, and SOAP APIs experienced with the original release. They DO NOT address any new security issues.
We highly recommend that all users either install the SUPEE-7405 v1.1 patch bundle, or upgrade to Magento Enterprise Edition 18.104.22.168 or Magento Community Edition 22.214.171.124.
You must install the SUPEE-7405 v 1.0 patch before installing the SUPEE-7405 v 1.1 patch bundle if you are running a version of Magento Enterprise Edition prior to 126.96.36.199 or Magento Community Edition prior to 188.8.131.52.
You do not need to install the SUPEE-7405 v 1.0 patch if you are running Magento Enterprise Edition 184.108.40.206, Magento Community Edition 220.127.116.11, or have previously installed the SUPEE-7405 v 1.0 patch on an earlier version of Magento Community Edition.
The SUPEE-7405 v 1.1 patch bundle includes the following:
Cart Merge Patch (SUPEE-7978)
Carts with identical items now merge correctly. Previously, when a cart with one item was merged with another cart that contained the same item, Magento did not merge the cart totals correctly. The cart now includes only one item, and the total is correct.
SOAP API Patch (SUPEE-7822)
The Magento SOAP API now works as expected. Previously after installing the SUPEE-7405 v1.0 patch, an API request would cause a 500 error, and Magento would log an exception.
PHP 5.3 Compatibility (SUPEE-7882)
The patch was not compatible with PHP 5.3 for earlier versions of Magento that were still supporting this version. Merchants experiencing this issue were unable to view sales information in the Admin.
The patch restores less restrictive file permissions (0666 for files and 0777 for directories) as more strict permissions introduced by the original SUPEE-7405 patch caused many merchants not to be able to view uploaded product images, depending on hosting provider configuration.