Security and Performance Updates in The New Magento Commerce Release
MAGENTO COMMERCE AND OPEN SOURCE 2.2.5 NOW AVAILABLE
Supporting your need for secure, high performing sites, Magento 2.2.5 includes security enhancements that help close remote code execution, cross-site scripting, and cross-site request forgery issues along with performance enhancements including substantial improvements to search indexing. With these important updates we strongly recommend that you upgrade to ensure your sites maintain the highest level of security.
Other highlights from this release include:
Enhancements to Magento Shipping including support for automated batch order processing that improves operational efficiency
Updates to Vertex, Amazon Pay, Dotmailer, and Klarna integrated solutions
Resolved an issue with multi-site deployments introduced in 2.2.4
Over 150 Community contributions
Magento has also released Magento Commerce and Magento Open Source 2.1.14, Magento Commerce 184.108.40.206, and Magento Open Source 220.127.116.11 today to deliver the aforementioned security enhancements.
You can review the release notes for more information about all of the enhancements and go to the Security Center for more information about security updates included in these versions of Magento.
MAGENTO COMMERCE CLOUD
In the coming weeks Magento Commerce Cloud customers will begin to see site performance improvements as we enable Fastly Image Optimization for all customers. Image Optimization allows merchants to offload image transformation, serving images faster and decreasing page load times. Customers already enabled have seen 20 to 30 percentage point increases in sites’ Google Page Speed Scores and 60-90 percent reduction in image weight at no additional cost.
Additionally, we encourage all Magento Commerce Cloud customers to upgrade to the latest ece-tools package as soon as reasonably possible. Recent ece-tools patches deliver multiple production deployment improvements, performance enhancements, and support for local docker environments.
Upgrade instructions for 2.1.x are here and here (2 parts). Upgrade instructions for 2.2.x are here.