Magento has just released a new version of Magento Commerce and Magento Open Source. This update increases security and functionality.
- Magento Open Source and Commerce 2.2.3
- Magnto Open Source and Comerce 2.1.12
- Magento Open Source and Commerce 2.0.18
- Magento Open Source 1.9.3.8
- Magento Commerce 1.14.3.8
- SUPEE-10570 for Magento 1.x versions
These versions contain nearly 50 security changes, which serve to address CSRF-related security issues, unauthorized data leaks, and vulnerabilities related to admin authentication.
These versions also support the API changes recently implemented by USPS. In addition, Magento Commerce and Open Source 2.2.3 introduce more precise permissions for cache management activities. This improvement allows qualified administrators to assign permissions for cache management activities such as emptying cache memory and updating cache types.
We strongly recommend upgrading as soon as possible.
You then need to download and install Magento Commerce updates by going to the My Account section
From here, just select the version you want to download. Magent Open Source is available in the Open Source Magento download page. (It may also be of interest to view the How to get the Magento Software page to view installation procedures related to Magento 2.)
More information on security updates, is available at:
Magento 1.x and SUPEE-10570 Security Updates
All details regarding Magento Open Source, are available in the notes:
Magento Open Source 2.2.3
Magento Open Source 2.1.12
Magento Open Source 2.0.18
Magento Open Source 1.9.3.8
All details regarding Magento Commerce, are available in the notes:
Magento Commerce 2.2.3
Magento Commerce 2.1.12
Magento Commerce 2.0.18
Magento Commerce 1.14.3.8
It is very important to keep Magento updated at all times to avoid security-related vulnerabilities. You should update your E-Commerce versions as soon as possible and install released patches.
If you want to know how to install security patches, read our article.
Test the security of your store here.
If you need support in installing and maintaining your Magento site, we at Magentiamo can help you with our MageHelp service.
For information contact us