Magento Open Source 2.3.6 includes almost 200 fixes to core code and 15 security enhancements. Security enhancements include support for the SameSite attribute for cookies and the addition of CAPTCHA protection for payment-related and order-related API endpoints. This is the last release in the 2.3.x product line that contains functional fixes. We strongly recommend that all merchants upgrade as soon as possible.
-Added October 15, 2020
Patch 2.4.0-p1 is a security-only patch that provides fixes for vulnerabilities that have been identified in our previous quarterly release, Magento 2.4.0, plus hot fixes that were applied to that release. Merchants can install these time-sensitive security fixes to keep their site up-to-date with the most recent security fixes without applying the hundreds of functional fixes and enhancements that the full quarterly release (Magento 2.4.1) provides.
-Added October 15, 2020
Magento Open Source 2.4.1 includes over 130 fixes to core code, 15 security enhancements, and the resolution of approximately 300 GitHub issues by our community members. It introduces enhancements to performance and security. Security enhancements include support for the SameSite attribute for cookies and the addition of CAPTCHA protection for payment-related and order-related API endpoints.We strongly recommend that all merchants upgrade as soon as possible.
2.3.6版本描述
Magento Open Source2.3.6包含了近200个核心代码修复和15个安全增强。 安全性增强包括支持Cookie的Same Site属性，以及为与支付相关和与订单相关的API接口添加CAPTCHA验证码保护。 这是2.3.x产品线中包含功能修复的 后一个版本。 我们强烈建议所有商家尽快升级。
2.4.0版本描述
2.4.0-p1是一个安全补丁，它为我们上一个季度发布的Magento2.4.0中识别的漏洞提供修复，以及应用于该版本的修复内容。 商家可以安装这些敏感的安全修复，以保持他们的网站 新的安全修复，应用数百个功能修复和增强。
2.4.1版本描述
Magento Open Source2.4.1包括130多个核心代码修复、15个安全增强以及社区成员解决大约300个Git Hub问题。 它引入了性能和安全性的增强。 安全性增强包括支持Cookie的Same Site属性，以及为与支付相关和与订单相关的API端点添加CAPTCHA保护。 我们强烈建议所有商家尽快升级。