Download Magento 2.2.3

Magento is an open source content management platform that focuses on e-commerce. Magento runs on an environment with Linux, Apache, MySQL and PHP. The package is available in two flavors, namely Magento Open Source and Magento Commerce, which were previously known as Community Edition and Enterprise Edition. For more information about this platform, please refer to this page, where the architecture is discussed. Version 2.2.3 has been available for a few days now and was announced as follows:

Magento Open Source 2.2.3 Release Notes

We are pleased to present Magento Commerce 2.2.3. This release includes 35 enhancements to product security, a change to the Magento Admin to support recent USPS shipping changes, and a copyright update. And thanks to our community members, it also includes enhancements to ACL control for cache management through Magento Admin.

Look for the following highlights in this release:

• Enhancements that help close cross-site request forgery (CSRF), unauthorized data leaks, and authenticated Admin user remote code execution vulnerabilities. see Magento Security Center for more information.
• Support for Elasticsearch 5.x. see Install and configure Elasticsearch for more information about using Elasticsearch with Magento.
• Change to Magento Admin to support recent USPS shipping changes. On February 23, 2018, USPS removed APIs that support the creation of shipping labels without postage. In response, we’ve removed this functionality from the Magento Admin. As a result, you cannot create and print shipping labels that do not have postage applied. If you require USPS postage printing capabilities, please visit Magento Shipping to learn more, and explore various shipping extensions on Magento Marketplace.
• New layers of control for cache management tasks managed through the Magento Admin. This release introduces finer permissions for cache management tasks such as flushing cache storage, flushing the Magento cache, and refreshing cache types.
• Updated copyright to 2018.

Security enhancements

Magento 2.2.3 includes multiple security enhancements. Although this release includes these enhancements, no confirmed attacks related to these issues have occurred to date. However, certain vulnerabilities can potentially be exploited to access customer information or take over administrator sessions, so we recommend that you upgrade your Magento software to the latest version as soon as possible. see Magento Security Center for more information.