PrestaShop has officially launched two maintenance releases: 9.1.4 and 8.2.7. These updates are crucial for ensuring that new installations come equipped with the patched version of the Faceted Search module (ps_facetedsearch) right out of the box. This release follows a recent security update for the Faceted Search module, which addressed significant vulnerabilities. The primary focus of these updates is to integrate this important fix into the bundled distributions, ensuring that new installations are protected from the outset.
Key Features of the Releases
Both PrestaShop 9.1.4 and 8.2.7 do not introduce any changes to the PrestaShop Core. The only notable difference from previous versions is the inclusion of ps_facetedsearch v4.0.4, which resolves the security issues highlighted in the advisory. For PrestaShop 9.1.4, there are additional updates related to dependencies:
- Symfony components have been updated to 6.4.41.
- Twig has been updated to 3.27.1, which includes the latest fixes for the Twig sandbox and template engine.
In summary, downloading and installing PrestaShop 9.1.4 or 8.2.7 guarantees that you will have the secure version of the Faceted Search module without needing to perform a separate update.
How to Download
Download PrestaShop 9.1.4: You can get the Classic version from the official PrestaShop website: Download PrestaShop 9.1.4 Classic now!
Download PrestaShop 8.2.7: Available from the official PrestaShop website or GitHub: Download PrestaShop 8.2.7 Classic now!
Updating Your Existing Shop
For those using previous versions, the Update Assistant can facilitate the upgrade to the latest version. As always, ensure you perform a full backup of your database and files before proceeding with any updates. If you encounter issues that do not stem from third-party modules or modifications, please submit a bug report.
Acknowledgments
We would like to thank Frédéric Moreau (Antadis) and Gilles Caudal (Datalinx) for reporting the original issue, as well as @clotairer for their assistance in validating and testing the module fix included in these releases. Stay informed about future updates and releases by subscribing to our newsletter and following our official channels.