Adobe Commerce 2.4.7 Released: What You Need to Know

Adobe Commerce, eCommerce technology’s continuous evolution aims to refine user experience and enhance security features. Adobe Commerce 2.4.7 exemplifies this progression, embodying significant enhancements that fortify security, improve performance, and extend functionality across various sectors of the digital commerce landscape. This article dives deep into the nuances of the Adobe Commerce 2.4.7 release, detailing the pivotal updates and features introduced.

Enhanced Security Measures

Adobe Commerce 2.4.7 has introduced a variety of security improvements that align with the industry’s best practices for safeguarding online commerce environments:

• Enhanced Security Fixes: Mirroring the security updates of the previous versions (2.4.6-p5, 2.4.5-p7, 2.4.4-p8), this release consolidates all crucial security fixes to further stabilize the security framework Adobe Security Bulletin.
• Robust Admin Protection Strategies: To counteract potential exploitation vulnerabilities that could lead to unauthorized data access or administrative control, Adobe Commerce emphasizes the execution of rigorous measures:
• IP allowlisting
• Mandatory two-factor authentication
• Encouraged use of VPNs
• Custom Admin paths
• Strong password policies
• Improvement in Cache Key Management: Introducing a change in how non-generated cache keys for blocks are managed, ensuring better differentiation from automatically generated keys.
• Coupon Code Generation Limit: The platform now imposes limitations on the automatic generation of coupon codes, enhancing system performance and preventing abuse with a new set maximum of 250,000 auto-generated codes.

What about security enhancements?

Adobe Commerce 2.4.7 includes several security enhancements designed to improve the overall security posture and compliance of the platform, ensuring that it remains robust against emerging security threats. Here are the detailed security updates incorporated in this release:

1. Continuation of Previous Security Fixes: This version integrates critical security fixes that have been part of the recent updates (2.4.6-p5, 2.4.5-p7, 2.4.4-p8), thus maintaining a strong defense system against known vulnerabilities Adobe Security Bulletin.
2. Improved Administrative Safeguards:
   • IP Allowlisting: This feature restricts access to the admin panel by allowing only recognized IP addresses, which significantly reduces the risk of unauthorized access.
   • Mandatory Two-Factor Authentication: This adds an additional layer of security, requiring a second form of identification beyond just the password.
   • Encouraged Use of VPNs: This is recommended to secure the connection and data transfer involved in the administration of the online store.
   • Customizable Admin URL: By customizing the admin URL to a unique path, it reduces the chances of targeted attacks.
   • Enhanced Password Policies: Ensuring that users create strong passwords is essential for defending against brute force attacks.
3. Cache Key Management Innovations:
   • Adjustments to the way non-generated cache keys for blocks are managed helps in differentiating them from automatically generated keys, ensuring better security and performance.
4. Restrictions on Coupon Code Generation:
   • Limiting the automatic generation of coupon codes to a maximum of 250,000 to prevent abuse and potential performance degradations. This also includes settings to control this threshold via the admin interface.
5. Subresource Integrity (SRI) Support:
   • SRI enhances security by ensuring that resources hosted on third-party servers have not been tampered with. This version implements SRI, fulfilling PCI 4.0 requirements especially on pages that handle payments, thereby ensuring the integrity of scripts and stylesheets.

What are the critical fixes? in Adobe Commerce 2.4.7

Adobe Commerce 2.4.7 incorporates several critical fixes aimed at bolstering the stability, performance, and security of the platform. These fixes address various aspects from functional bugs to security vulnerabilities. Here is a detailed overview of some of the critical fixes included in the release:

1. Security Enhancements:
   • Adobe Commerce 2.4.7 integrates critical security patches that have been carried over from previous versions such as 2.4.6-p5, 2.4.5-p7, and 2.4.4-p8, enhancing the platform’s resilience against potential security threats Adobe Security Bulletin.
2. API and Backend Fixes:
   • Asynchronous API Operations: Fixes were applied to bulk REST API operations, particularly concerning updates of products with tier prices and different attribute sets, ensuring they now complete successfully.
   • Enhanced Error Reporting: The POST /V1/products/tier-prices endpoint now returns more informative error messages when there is an issue, such as using an invalid customer group name during the creation of tier prices.
   • Bulk API Customer Creation: The issue where customer group IDs were reset to default values during bulk API operations has been resolved.
3. Wishlist Functionality:
   • Repetitive addition to wishlists has been addressed, where previously the system erroneously increased the quantity in the wishlist for the same item added multiple times. This has been corrected to properly acknowledge duplicates.
4. Checkout and Pricing Updates:
   • Adobe Commerce has fixed previous issues where guest checkout errors occurred if the feature was disabled. Now, the POST V1/guest-carts does not allow guest checkout when the feature is disabled.
5. Platform Optimization and Performance:
   • Product Media API: The API now correctly returns the content attribute, allowing for the proper fetching of base64 image codes.
   • Correct Product Status Display: Issues related to incorrect display of product backorder status on the storefront have been rectified.
   • Category Page Loading: Problems related to category page reloading and pagination that affected user navigation have been addressed.
6. User Experience and Interface Enhancements:
   • Fixes have been applied to improve the loading and display of the main product image on product detail pages, ensuring consistency and enhancing visual presentation.
7. Subresource Integrity (SRI):
   • Subresource Integrity features have been implemented to ensure the integrity of scripts and resources, reducing the risk of security vulnerabilities through third-party resource manipulation.

These critical fixes in Adobe Commerce 2.4.7 are part of Adobe’s commitment to continuously improve the platform by addressing bugs, enhancing security measures, and refining user functionalities to provide a robust, efficient, and secure eCommerce experience.

These security improvements are part of Adobe Commerce’s ongoing commitment to providing a secure and reliable platform for e-commerce businesses, enhancing both compliance with the latest security best practices and the overall resilience of the system against cyber threats. By upgrading to Adobe Commerce 2.4.7, merchants can benefit from these advanced security measures to protect their customer data and maintain a secure e-commerce environment.

Performance Optimization in Adobe Commerce 2.4.7

Continuing its commitment to enhancing performance, Adobe Commerce 2.4.7 introduces several key updates:

• Support for PHP 8.3: The latest update includes support for PHP 8.3, promoting improved speed and efficiency in processing requests.
• Optimized Indexer Management: This release offers refined indexer management that boosts performance, especially for stores handling large data volumes.
• Enhanced GraphQL Capabilities: Expanding its GraphQL coverage, this upgrade includes increased support for custom attributes and enhancements in GraphQL resolver caches.

System Improvements and Fixes in Adobe Commerce 2.4.7

System robustness in Adobe Commerce 2.4.7 is noticeably improved through various bug fixes and system enhancements:

• Product Media API Enhancement: The API now correctly returns the content the attribute in the responses, which ensures reliable retrieval of base64 image codes for products.
• Wishlist Functionality Improvement: Redundancies and errors in wishlist management have been addressed:
• Duplicate addition prompts are now correctly managed.
• Products with required file uploads are now correctly single-listed in wishlists.

Installation and System Requirements for Adobe Commerce 2.4.7

The technology stack of Adobe Commerce relies on PHP and MySQL, continuing with the current system requirements framework. For new installations or upgrades to version 2.4.7, the recommended method remains via Composer, ensuring a streamlined and effective installation process.

Conclusion

Adobe Commerce 2.4.7 stands out as a significant release, drawing upon continuous feedback and ongoing innovation strategies. With its robust security improvements, performance enhancements, and functional upgrades, Adobe Commerce ensures that businesses can provide a secure, efficient, and user-friendly online shopping experience. Businesses are encouraged to upgrade to leverage these new capabilities and optimize their eCommerce platforms.