Magento updates timeline.

SUPEE-10415, Magento Commerce 1.14.3.7 and Open Source 1.9.3.7 contain multiple security enhancements that help close cross-site request forgery (CSRF), Denial-of-Service (DoS) and authenticated Admin user remote code execution (RCE) vulnerabilities.

These releases also include a fix for a prior customers that had experienced issues patching caused by SOAP v1 interactions in WSDL.

Magento Commerce and Open Source 2.2.1, 2.1.10 and 2.0.17 contain multiple security enhancements that help close Cross-Site Scripting (XSS), Local File Inclusion (LFI), authenticated Admin user remote code execution (RCE) and Arbitrary File Delete vulnerabilities.

Merchants who have not previously downloaded a Magento 2 release should go straight to Magento Commerce or Open Source 2.2.1.

Magento Commerce (previously Enterprise) and Open Source (previously Community Edition) 2.1.9 and 2.0.16 contain multiple security enhancements.

Merchants who have not previously downloaded a Magento 2 release should go straight to Magento Commerce or Open Source 2.1.9.

This patch provides resolution of multiple critical security issues and several functional fixes. These critical security issues include remote code execution, cross-site scripting, and cross-site request forgery issues. We recommend upgrading your Magento store to this latest version.

Magento Enterprise Edition and Community Edition 2.0.14 and 2.1.7 contain multiple security enhancements.

Merchants who have not previously downloaded a Magento 2.0 release should go straight to Magento Enterprise Edition or Community Edition 2.1.7.

This patch contains multiple security updates. Risk: Critical for Magento Enterprise Edition prior to 1.14.3.3 and Community Edition prior to 1.9.3.3.

This release contains performance improvements and bug fixes including improved performance of the Category page, optimized image resizing, improved performance of layered navigation and minimized indexing operations after product import as well as more functional fixes and enhancements.

Last week over 2,700 attendees across 50 countries joined together in Las Vegas to attend Magento Imagine, a place to get inspired and educated about the Magento platform while collaborating and having fun. During Imagine, Magento took to the stage to reveal its latest product enhancements to its flagship Magento Commerce Cloud and new product launches.

Magento has released a new security patch ‘SUPEE-9652’ which, along with upgrading to Enterprise Edition 1.14.3.2 and Community Edition 1.9.3.2, addresses the possible Zend library vulnerability. Patches and upgrades are available for the following Magento versions: Enterprise Edition 1.9.0.0-1.14.3.1 and Community Edition 1.5.0.1-1.9.3.1.

The new Developer Blog is, according to Magento ‘The place for developer-focused news direct from the source’, allowing developers to quickly find and comment on a feed of information and updates. The blog is essentially a new forum located in the Magento Community where technical questions can be asked and answered by us Magento techy kind!

Back in August 2016, you might remember that Magento acquired RJMetrics with an aim to provide more metrics and business intelligence to merchants using the platform. Today, Magento has announced a rebrand – Magento Analytics is now Magento Business Intelligence. The software allows merchants to consolidate multiple data streams into a single cloud-based data warehouse.

Magento has released two software updates to its Magento 2 platform that are focussed on ‘getting the details right’ and enhancing shopping experiences. A large part of the release has been dedicated to introducing new payment functionality from PayPal and Braintree including saving PayPal accounts, ‘last payment methods’ on guest checkout and branding credit card statements with your company name. Further updates include increased storefront performance, enhanced performance in the processing of large catalogs and two new web API endpoints in the sales module that allow you to process refunds from an order or invoice. Thanks, Magento! The release also brings with it a whole host of fixes and general enhancements.

Magento’s SUPEE-8788 security patch addresses a number of different potential vulnerabilities including – Zend framework and payment vulnerabilities, adds extra security measures to the import/export functionality in Magento, ensures sessions are invalidated after a user logs out, fixes a potential bug that could lead to a customer’s wishlist being deleted.

We highly recommend that all users either install the SUPEE-7405 v1.1 patch bundle, or upgrade to Magento Enterprise Edition 1.14.2.4 or Magento Community Edition 1.9.2.4.

You must install the SUPEE-7405 v 1.0 patch before installing the SUPEE-7405 v 1.1 patch bundle if you are running a version of Magento Enterprise Edition prior to 1.14.2.3 or Magento Community Edition prior to 1.9.2.3.

Enterprise Edition 2.1 comes fully loaded with Elasticsearch, cutting edge site search technology that turns shoppers into buyers. This search engine supports 33 languages out-of-the-box and lets you set ‘stop words’, search synonyms, and attribute weighting to deliver highly relevant search results. It’s also designed to handle large catalogs and can easily scale to support enterprise and fast-growing merchants. Configuring Elasticsearch is easy, so you can start seeing results right away.

In case you missed it (we’re not sure how you would!) Magento announced the launch of Magento Marketplace, what they call ‘the next generation’ extension marketplace! The Marketplace includes over 700 extensions that have all passed through rigorous Technical, Marketing and Business value reviews by Magento to ensure they are of the highest quality offer true business benefits.

Read our blog to find out some of our favourite Magento Marketplace extensions!

We’ve waited, we’ve read about the new features, we’ve had chance to peek at the new dashboard and architecture but now… Magento 2.0 has finally been released – and trust us, it was worth the wait!

So, what’s new? Magento 2.0 is fully focused on delivering an enriched, seamless buying experience. It’s all about the customer – advanced responsive design support, faster load speeds, integrated media and an all-new customisable checkout.