{"id":5848,"date":"2020-10-12T07:13:44","date_gmt":"2020-10-12T12:43:44","guid":{"rendered":"https:\/\/www.emizentech.com\/blog\/?p=5848"},"modified":"2022-09-12T12:34:03","modified_gmt":"2022-09-12T12:34:03","slug":"magento-commerce-cloud-2-4-1-release-notes","status":"publish","type":"post","link":"https:\/\/multisitelocal.ezxdemo.com\/blog\/magento-commerce-cloud-2-4-1-release-notes.html","title":{"rendered":"Magento Commerce Cloud 2.4.1 Release Notes: All You Want To Know"},"content":{"rendered":"\n<p>Magento has introduced its another major release of Magento Commerce Cloud with version 2.4.1. In this release, we can see improvements in performance, and there are many enhancements in security especially for the B2B feature set. In the security enhancements, there is now support for the SameSite attribute for cookies, and CAPTCHA protection has been introduced for payment-related and order related API endpoints and the Place Order storefront page. The improvements of B2B are focused on approving the order process, shipping methods, logging of Admin actions, and better security.<\/p>\n\n\n\n<p>In this release, we will observe there are several major improvements to the core quality of Magento 2.4.0. More than 150 fixes have been done to the core code, with more than 15 security enhancements. It also includes resolving of nearly <a href=\"https:\/\/github.com\/magento\/magento2\/issues\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">300 GitHub issues<\/a> uploaded by the Magento community trusted members. These community contributions range from minor clean-up of core code to significant enhancements in <a href=\"https:\/\/devdocs.magento.com\/guides\/v2.4\/graphql\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">GraphQL<\/a>. All known issues of Magento 2.4.0 have been resolved in this release. In this article, we will discuss all the major fixes and updates of Magento 2.4.1.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Security-only_patch_available\"><\/span>Security-only patch available<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>Now, the merchants don\u2019t need to apply hundreds of functional fixes and enhancements that a full quarterly release provides for installing the time-sensitive security fixes. All the vulnerabilities which were identified in the previous release i.e. Magento 2.4.0 have been fixed by this Patch 2.4.0.1. All hotfixes which were applied in the Magento 2.4.0 release are included in this release as well.<br>Wish to know more about the security-only patches, then you must go through the official blog post of Magento <a href=\"https:\/\/community.magento.com\/t5\/Magento-DevBlog\/Introducing-the-New-Security-only-Patch-Release\/ba-p\/141287?_ga=2.88355481.389558271.1602478898-832610488.1592751895\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Introducing the New Security-only Patch Release<\/a>. If you need instructions on how to download and install security patches then please go through this article <a href=\"https:\/\/devdocs-beta.magento.com\/guides\/v2.4\/install-gde\/composer.html\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Install Magento using Composer<\/a>. In the security-only patches, there are only security bug fixes. It doesn&#8217;t include the other security enhancements which are included in this release.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Key_Highlights_of_This_Release\"><\/span>Key Highlights of This Release<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li>Substantial Security Enhancements<\/li><li>Infrastructure Improvements<\/li><li>Performance Improvements<\/li><li>New Media&nbsp;Gallery<\/li><li>GraphQL<\/li><li>PWA Studio<\/li><li>Fixed Issues<\/li><\/ul>\n\n\n\n<p>We will each one in more detail.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"1_Substantial_Security_Enhancements\"><\/span>1. Substantial Security Enhancements<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>As we have already mentioned that in this release there are more than 15 security fixes and platform security improvements. The fixes have been backported to Magento 2.4.0-p1 and Magento 2.3.6. These security enhancements can close RCE (Remote Code Execution) and XSS (Cross-site Scripting) vulnerabilities. We have not observed any major attacks on these issues to date. However, there may be some loopholes in the security of your Admin panel which can be easily exploited by the hackers for accessing customer information or taking over the admin sessions. A hacker requires access to the admin panel for all these vulnerabilities hence we always recommend you to make sure there is the utmost security of your Admin Panel. You must put efforts in the IP allow listing, two-factor authentication, VPN usage, use of a unique location rather than \/admin, and good password hygiene.<\/p>\n\n\n\n<p class=\"has-text-align-center has-text-color\" style=\"color:#f46f25\"><strong>Also Read: <a href=\"https:\/\/multisitelocal.ezxdemo.com\/blog\/magento-review.html\">An extensive review of Magento for ecommerce<\/a><\/strong><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Additional_Security_Improvements\"><\/span>Additional Security Improvements<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>The three major fixed issues in this release are:<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">CAPTCHA<\/h4>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter\"><img decoding=\"async\" src=\"\/blog\/wp-content\/uploads\/sites\/2\/2020\/10\/captcha-for-admin.png\" alt=\"captcha for admin magento\" class=\"wp-image-5806\" \/><\/figure><\/div>\n\n\n\n<p>In the following product areas, you can find CAPTCHA protection<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Place Order storefront page and REST and GraphQL endpoints<\/li><li>Payment-related REST and GraphQL endpoints.<\/li><\/ul>\n\n\n\n<p>Captcha Protection for the other additional pages comes by default. You can easily enable it on the Admin Panel.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Support for the SameSite attribute for Cookies<\/h4>\n\n\n\n<p>For supporting Google Chrome enforcement in the new cookie classification system, the Magento class which used to handle cookies has been updated to support the SameSite cookie attribute.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Enhanced Magento Scan Tool<\/h4>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter\"><img decoding=\"async\" src=\"\/blog\/wp-content\/uploads\/sites\/2\/2020\/10\/magento-security-scan-feature-1.png\" alt=\"magento security scan feature (1)\" class=\"wp-image-5807\" \/><\/figure><\/div>\n\n\n\n<p>Adobe has partnered with Sanguine Security. It is a global leader for preventing digital skimming to integrate their database of over 8700 threat signatures into the <a href=\"https:\/\/docs.magento.com\/user-guide\/magento\/security-scan.html\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Magento Security Scan Tool<\/a>. This partnership will result in better security status of the e-commerce stores, and real-time insights of the security status. The Security scan tool is available for free from the dashboard of your\u00a0<a href=\"https:\/\/docs.magento.com\/user-guide\/magento\/magento-account.html\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Commerce account<\/a><\/p>\n\n\n\n<h3 class=\"has-text-align-center wp-block-heading\"><span class=\"ez-toc-section\" id=\"_Hire_Skilled_and_Experienced_Magento_Developers\"><\/span><a href=\"https:\/\/multisitelocal.ezxdemo.com\/hire-magento-developer.html\"> \u00a0Hire Skilled and Experienced Magento Developers<\/a><span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"2_Improvements_in_the_Infrastructure\"><\/span>2. Improvements in the Infrastructure<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>In this release, there are many improvements in the core quality of the Magento, which results in the better quality of the Framework and functional areas like:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Customer Account<\/li><li>Catalog<\/li><li>CMS<\/li><li>OMS<\/li><li>Import &amp; Export<\/li><li>Promotions &amp; Targeting<\/li><li>Cart &amp; Checkout<\/li><li>Staging &amp; Preview<\/li><\/ul>\n\n\n\n<p>Merchants can give the options to users to clear all the items from their cart in a single and can configure this ability independently on each website.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"3_Improvements_in_the_Performance\"><\/span>3. Improvements in the Performance<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>In the Magento Commerce 2.4.1, you will find 3 major releases which are mentioned here:<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Network transfers size reduction between Redis and Magento<\/h4>\n\n\n\n<p>Plugin list configuration is now generated during the execution of the <strong>bin\/magento di:compile<\/strong> command. It is written for generating metadata folders based on scope. Earlier, it was stored in the cache.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Improved message queue customer performance<\/h4>\n\n\n\n<p>There are 3 new configuration settings introduced which will decrease the customer queue CPU consumption by <strong>20%<\/strong>. These parameters can give better control over customers to save server resources.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Improved execution time for bin\/Magento commands.<\/h4>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"4_Adobe_Stock_Integration\"><\/span>4. Adobe Stock Integration<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>This release includes <a href=\"https:\/\/docs.magento.com\/user-guide\/cms\/adobe-stock.html\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Adobe Stock Integration v2.1.0<\/a>.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"5_New_Media_Gallery\"><\/span>5. New Media Gallery<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter\"><img decoding=\"async\" src=\"\/blog\/wp-content\/uploads\/sites\/2\/2020\/10\/magento-media-gallery-feature-1.png\" alt=\"magento media gallery feature\" class=\"wp-image-5809\" \/><\/figure><\/div>\n\n\n\n<p>The default option of the New Media Gallery has been enabled default in the Admin Panel of the Magento. There are certain actions which the merchants can perform on images in the New Media Gallery such as:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Deleting images in bulk<\/li><li>Optimize the storage by duplicate image deletion &amp; images that are no longer in use<\/li><li>Filter images by the storefront area, including product &amp; category content and CMS blocks<\/li><li>Work with the metadata of the image:\n<ul>\n<li>View metadata from the images of the Product Gallery<\/li>\n<li>Edit the metadata of images such as title, keywords, description, etc.<\/li>\n<li>Search for the images by metadata<\/li>\n<\/ul>\n<\/li><\/ul>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"5_Page_Builder\"><\/span>5. Page Builder<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>There is now support for the full-screen mode in the Page Builder. This will support easier editing of content and a consistent content editing experience on the Admin Panel.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"6_GraphQL\"><\/span>6. GraphQL<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>The GraphQL coverage in this release are:<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Reviews for products<\/h4>\n\n\n\n<p>Customers, as well as guest, can write reviews for products. They can also retrieve product review histories.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Gift Options<\/h4>\n\n\n\n<p>All customers &amp; guests can also add a gift message for their orders. They can also add gift wrapping, gift receipts, or printed cards in their order.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Reward Points<\/h4>\n\n\n\n<p>In the Magento Commerce installation, the customers can add or remove reward points to their carts. They can also check the reward points in history.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Order History<\/h4>\n\n\n\n<p>The customer can check all the details related to their order history, including invoicing, shipping &amp; refunds.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Add to Cart<\/h4>\n\n\n\n<p>The customers can below product types in the cart:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Simple<\/li><li>Configurable<\/li><li>Bundled<\/li><li>Grouped<\/li><li>Virtual<\/li><li>Gift Card<\/li><li>Downloadable<\/li><\/ul>\n\n\n\n<h4 class=\"wp-block-heading\">Payment Methods<\/h4>\n\n\n\n<p>The customer can save their payment details including Braintree credit card and Braintree with Paypal<\/p>\n\n\n\n<h3 class=\"has-text-align-center wp-block-heading\"><span class=\"ez-toc-section\" id=\"Consult_Us_for_Magento_2_Payment_module_Integration\"><\/span><a href=\"https:\/\/multisitelocal.ezxdemo.com\/magento-2-payment-module-integration.html\">Consult Us for Magento 2 Payment module Integration<\/a><span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"7_PWA_Studio\"><\/span>7.&nbsp;PWA Studio<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>In the <a href=\"https:\/\/magento.github.io\/pwa-studio\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">PWA Studio<\/a> v8.0.0, you can find many new features and enhancements:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Venia Style guide updates that are applied to design token, typography, colors, core components, and page layouts.<\/li><li>Improvements in the Venia mini-cart experience<\/li><li>Initial support for localized content and locales on the Venia storefront<\/li><li>Improvements in the MyAccount experience of the Venia storefront<\/li><\/ul>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"8_B2B\"><\/span>8.&nbsp;B2B<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>In the Magento 2.4.1. you will be welcoming the B2B v1.3.0. In this release, there are improvements in approving methods, shipping methods, shopping cart, and Admin actions logging.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Approving Orders<\/h4>\n\n\n\n<p>Approving the orders in B2B results in improving usability and allows for bulk actions on order purchasing. Improvements related to approving orders and rejection includes the following:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>cNew View Rule Page for users without editing privileges:<\/strong> The buyers can now check the rules which are applied to their company on the new View Rule page but they don&#8217;t have permissions to edit them.<\/li><li><strong>Count alert icon on the Requires My Approval tab:<\/strong> In the My Purchase Orders there is a Requires My Approval Tab on which there is a counter which indicates the number of pending approval actions.<\/li><li><strong>Bulk order approvals and rejections:<\/strong> The company admin or B2B manager can perform bulk rejection or approval of the orders. The changes allow approvers either to reject or approve the orders in a single action.<\/li><li>E-commerce store owners can also search Applies to and Requires approval from fields of the My Purchase Orders view and can select multiple user roles.<\/li><\/ul>\n\n\n\n<h4 class=\"wp-block-heading\">B2B Shipping Methods Improvements<\/h4>\n\n\n\n<p>The merchant can also control the shipping methods which are provided to each company. They are having a choice for the following configurations:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Set of shipping methods for B2B Company accounts<\/li><li>Use of either all or specific shipping methods for each company<\/li><li>A specific list of shipping methods for each company<\/li><\/ul>\n\n\n\n<h4 class=\"wp-block-heading\">Improvements in the Shopping Cart<\/h4>\n\n\n\n<ul class=\"wp-block-list\"><li>Merchants can allow users to clear their shopping cart content in a single action and can&nbsp; configure this ability independently on each site<\/li><li>The B2B buyers can either add individual items or all shopping carts contents directly to a requisition list.<\/li><\/ul>\n\n\n\n<h4 class=\"wp-block-heading\">New Admin Features<\/h4>\n\n\n\n<ul class=\"wp-block-list\"><li>The B2B merchants can also create orders from the Admin on behalf of their customers.<\/li><li>They can also view quotes associated with a user from the customer\u2019s detail page.<\/li><li>They can filter the Customers Now Online grid by company<\/li><\/ul>\n\n\n\n<h4 class=\"wp-block-heading\">Better Security of Storefront<\/h4>\n\n\n\n<p>For eliminating spam or fraudulent accounts, the store owners can now enable Google reCAPTCHA on the New Company Request form on the storefront.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Expanded Logging of Admin Actions<\/h4>\n\n\n\n<p>The admin actions will now be logged in the Admin Actions log. These actions will be logged through all relevant company modules: Company, NegotiableQuote, CompanyCredit, SharedCatalog.<\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter\"><a href=\"https:\/\/multisitelocal.ezxdemo.com\/enqiry.html?utm_source=blog&amp;utm_medium=banner&amp;utm_campaign=emizen_blog\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" src=\"\/blog\/wp-content\/uploads\/sites\/2\/2020\/04\/magento-developer-1.jpg\" alt=\"Hire Magento Developer\" class=\"wp-image-2088\" \/><\/a><\/figure><\/div>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"9_Fixed_Issues\"><\/span>9. Fixed Issues<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>In the Magento 2.4.1, there are hundreds of fixes of issues in the core code of Magento. You can find the fixes in these fields:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Installation, Upgrade, Deployment<\/li><li>Adobe Stock<\/li><li>Bundle Products<\/li><li>Cache<\/li><li>Cart and Checkout<\/li><li>Catalog<\/li><li>Cleanup<\/li><li>CMS content<\/li><li>Configurable Products<\/li><li>Cookies<\/li><li>Cron<\/li><li>CSS<\/li><li>Customer<\/li><li>Directory<\/li><li>Downloadable<\/li><li>Email<\/li><li>Frameworks<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Wrapping_Up\"><\/span>Wrapping Up<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>With every new release of Magento, our Magento developers start delving more about it to make the most out of it. We, at Emizentech, the best <a href=\"https:\/\/multisitelocal.ezxdemo.com\/magento-development-services.html\">Magento development company<\/a> in India, we are having expertise in upgrading your Magento store to the latest Magento version or developing an ecommerce store from scratch. Let us know your requirements.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Magento has introduced its another major release of Magento Commerce Cloud with version 2.4.1. In this release, we can see improvements in performance, and there are many enhancements in security especially for the B2B feature set. In the security enhancements, there is now support for the SameSite attribute for cookies, and CAPTCHA protection has been<\/p>\n","protected":false},"author":35,"featured_media":5855,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"MSN_Categories":"Uncategorized","MSN_Publish_Option":false,"MSN_Is_Local_News":false,"MSN_Is_AIAC_Included":"Empty","MSN_Location":"[]","MSN_Add_Feature_Img_On_Top_Of_Post":false,"MSN_Has_Custom_Author":false,"MSN_Custom_Author":"","MSN_Has_Custom_Canonical_Url":false,"MSN_Custom_Canonical_Url":"","_lmt_disableupdate":"no","_lmt_disable":"no","footnotes":""},"categories":[78],"tags":[],"class_list":{"0":"post-5848","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-magento"},"modified_by":"Marketing EmizenTech","featured_image_src":"https:\/\/multisitelocal.ezxdemo.com\/blog\/wp-content\/uploads\/sites\/2\/2020\/10\/Magento-Commerce-Cloud-2.4.1-Release_-Security-Patches-Fixed-Issues-1.png","featured_image_src_square":"https:\/\/multisitelocal.ezxdemo.com\/blog\/wp-content\/uploads\/sites\/2\/2020\/10\/Magento-Commerce-Cloud-2.4.1-Release_-Security-Patches-Fixed-Issues-1.png","author_info":{"display_name":"Amit Samsukha","author_link":"https:\/\/multisitelocal.ezxdemo.com\/blog\/author\/amit"},"_links":{"self":[{"href":"https:\/\/multisitelocal.ezxdemo.com\/blog\/wp-json\/wp\/v2\/posts\/5848","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/multisitelocal.ezxdemo.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/multisitelocal.ezxdemo.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/multisitelocal.ezxdemo.com\/blog\/wp-json\/wp\/v2\/users\/35"}],"replies":[{"embeddable":true,"href":"https:\/\/multisitelocal.ezxdemo.com\/blog\/wp-json\/wp\/v2\/comments?post=5848"}],"version-history":[{"count":0,"href":"https:\/\/multisitelocal.ezxdemo.com\/blog\/wp-json\/wp\/v2\/posts\/5848\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/multisitelocal.ezxdemo.com\/blog\/wp-json\/wp\/v2\/media\/5855"}],"wp:attachment":[{"href":"https:\/\/multisitelocal.ezxdemo.com\/blog\/wp-json\/wp\/v2\/media?parent=5848"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/multisitelocal.ezxdemo.com\/blog\/wp-json\/wp\/v2\/categories?post=5848"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/multisitelocal.ezxdemo.com\/blog\/wp-json\/wp\/v2\/tags?post=5848"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}