Hello to Amasty blog readers!

A couple of weeks before Magento 2.2.3 version was released. Here’s a quick run-through of the new things that were added to this platform update.

Magento 2 Security Additions

As you may know, Magento 1 security issues were addressed via security patches. Magento 2 doesn’t release the patches, instead the updates are coming with a new version of the platform.

LEARN ABOUT SUPEE-8788 AND MAGENTO PATCHES IN GENERAL

Magento patches are distributed in the form of files with .sh extension. They are different from usual patches because they have the installation scenario added. It implements atomicity of patch installation and deninstallation actions.

This release is all about security. Magento says that 35 security enhancements were added to 2.2.3 version.

Enhancements that help close cross-site request forgery (CSRF), unauthorized data leaks, and authenticated Admin user remote code execution vulnerabilities were implemented into the release. 

You can see the list of enhancements here. Basically, you don’t have to do anything special about it – just install the freshest version to make your Magento 2 store safer.

Other things

  • Elasticsearch 5.x support appeared in Magento 2.2.3.

Elasticsearch is a distributed, JSON-based search and analytics engine designed for horizontal scalability, maximum reliability, and easy management.

Elasticsearch 5.x, if compared to 2.x versions, received an impressive number of updates and new features, but they are mostly behind-the-scenes, such as 25-80% indexing performance improvements, security improvements and some developer rocket science. See more about new stuff in Elasticsearch 5.x here.

  • Changes to Magento Admin to support recent USPS shipping changes were applied.

On February 23, 2018, USPS removed APIs supporting the creation of shipping labels without postage. Thus, the functionality was removed from the admin area. In Magento 2.2.3, you cannot create and print shipping labels that do not have postage applied. If you still need this functionality, Magento suggests having a look at Magento Shipping software or exploring shipping extensions on Magento Marketplace. Here’s what USPS tells us about why they’re removing the option from Web Tools APIs:

In order to provide the very best API offering, we need to periodically update our processes. The removal of the No Postage option will allow the Postal Service to provide better service for domestic and international shipping labels that are being printed through Web Tools APIs without compromising customer experience and revenue assurance.

Source

  • New control layers for cache management tasks managed through the Magento Admin were implemented.

Now the platform has finer permissions for cache management tasks such as flushing cache storage, flushing the Magento cache, and refreshing cache types.

Same changes are present in the Magento Commerce 2.2.3 version. For more information, read official Magento release notes here.

Have a productive week!