网站首页 / 资讯 / Magento新闻

Magento Open Source 2.4.2 Release Notes

作者:admin

Magento Open Source 2.4.2 introduces enhancements to performance and security plus significant platform improvements. Security enhancements include expansion of support for the SameSite attribute for all cookies. Elasticsearch 7.9.x and Redis 6.x are now supported.

This release includes over 280 new fixes to core code and 35 security enhancements. It includes the resolution of almost 290 GitHub issues by our community members. These community contributions range from minor clean-up of core code to significant enhancements in GraphQL.

All known issues identified in Magento 2.4.1 have been fixed in this release.

Quarterly releases may contain backward-incompatible changes (BIC). Magento 2.4.2 contains minor backward-incompatible changes. To review minor backward-incompatible changes, see BIC reference. (Major backward-incompatible issues are described in BIC highlights. Not all releases introduce major BICs.)

Security-only patch available

Merchants can now install time-sensitive security fixes without applying the hundreds of functional fixes and enhancements that a full quarterly release provides (for example, Magento 2.4.1-p1). Patch 2.4.0.12 (Composer package 2.4.1-p1) is a security-only patch that provides fixes for vulnerabilities that have been identified in our previous quarterly release, Magento 2.4.1. All hot fixes that were applied to the 2.4.1 release are included in this security-only patch. (A hot fix provides a fix to a released version of Magento that addresses a specific problem or bug.)

For general information about security-only patches, see the Magento DevBlog post Introducing the New Security-only Patch Release. For instructions on downloading and applying security-only patches (including patch 2.4.1-p1), see Install Magento using Composer. Security-only patches include security bug fixes only, not the additional security enhancements that are included in the full patch.

Other release information

Although code for these features is bundled with quarterly releases of the Magento core code, several of these projects (for example, Progressive Web Applications (PWA) Studio) are also released independently. Bug fixes for these projects are documented in the separate, project-specific release information that is available in the documentation for each project.

Highlights

Look for the following highlights in this release.

Substantial security enhancements

This release includes over 35 security fixes and platform security improvements. All security fixes have been backported to Magento 2.4.1-p1 and Magento 2.3.6-p1.

Over 35 security enhancements that help close remote code execution (RCE) and cross-site scripting (XSS) vulnerabilities

No confirmed attacks related to these issues have occurred to date. However, certain vulnerabilities can potentially be exploited to access customer information or take over administrator sessions. Most of these issues require that an attacker first obtains access to the Admin. As a result, we remind you to take all necessary steps to protect your Admin, including but not limited to these efforts: IP allowlisting, two-factor authentication, use of a VPN, the use of a unique location rather than /admin, and good password hygiene. See Adobe Security Bulletin for a discussion of these fixed issues.

Additional security enhancements

Security improvements for this release include:

Starting with the release of Magento Commerce 2.3.2, Magento will assign and publish indexed Common Vulnerabilities and Exposures (CVE) numbers with each security bug reported to us by external parties. This allows users of Magento Commerce to more easily identify unaddressed vulnerabilities in their deployment. You can learn more about CVE identifiers at CVE.

Infrastructure improvements

This release contains enhancements to core quality, which improve the quality of the Framework and these functional areas: Customer Account, Catalog, CMS, OMS, Import/Export, Promotions and Targeting, and Cart and Checkout.

Platform enhancements

The ability to configure a Magento installation to use a split database has been deprecated in this release. Merchants who currently use split database should start planning to revert to or migrate to a single database or use an alternative approach. See the Deprecation of split database functionality in Magento Commerce DevBlog post for an overview of this issue. See Revert from a split database to a single database for migration instructions.

Performance enhancements

This release includes code enhancements that boost API performance and Admin response time for deployments with large catalogs. Multiple scalability enhancements enable Magento 2.4.2 to natively support complex catalogs up to 20x larger than in previous releases.

Adobe Stock Integration

This release includes Adobe Stock Integration v2.1.1.

GraphQL

This release adds GraphQL coverage for the following features:

See the GraphQL Developer Guide for details on these enhancements.

PWA Studio

This release of PWA Studio includes:

For information about enhancements and bug fixes, see PWA Studio releases. See Magento compatibility for a list of PWA Studio versions and their compatible Magento core versions.

New Role Resources for Media Gallery. This release provides merchants the ability to limit administrator access to only the Media gallery and to control who can perform these actions:

Web-optimized images in content. Merchants can now use web-optimized image rendition in content instead of high resolution images. The original image remains unmodified in the Media Gallery, and the image rendition is dynamically generated when the image is inserted in the content.

Magento Functional Testing Framework (MFTF)

MFTF 3.2.1 is now available. This release introduces error tolerance in both tests and test suite generation. Additional enhancements and bug fixes are described in the Magento Functional Testing Framework Changelog.

Vendor Developed Extensions

See the following articles for updates on features and changes for this release:

AWS S3 support enhancements

Amazon Simple Storage Service (AWS S3) support has been enhanced to include support for:

Fixed issues

We have fixed hundreds of issues in the Magento 2.4.2 core code.

Installation, upgrade, deployment

Adobe Stock Integration

Analytics

Braintree

Bundle products

Cart and checkout

Cart price rule

Catalog

Catalog Rule

Cleanup

Typo and grammar cleanup

Code cleanup

Configurable products

cron

Custom customer attributes

Customer

dotdigital

Downloadable

EAV

Email

Frameworks

General fixes

GraphQL

GraphQL

Images

Import/export

Index

Infrastructure

Klarna

Logging

MFTF

New tests

New action groups

Newsletter

Payment methods

PayPal

Performance

Persistent

Pricing

Reports

Reviews

Sales

Sales Rule

Shipping

Sitemap

Store

Target rules

Tax

Test

Theme

Translation and locales

UI

Vault

Vertex

Web API framework

Wishlist

Known issues

Issue: Magento does not submit payment information as expected when a shopper first enters a correct code into the CAPTCHA field on the Payment page but displays this error: There has been an error processing your request. This occurs only when the shopper tries to place the order either without entering the CAPTCHA code or by entering it incorrectly. Workaround: Refresh the page.

Issue: Magento creates an order in Braintree as expected when a shopper clicks Pay with Venmo, but does not create the order in the Admin. See the Magento 2.4.2 known issue: Braintree Venmo payment does not work Knowledge Base article.

Issue: You cannot use the addConfigurableProductToCart GraphQL mutation to add a configurable product to a cart in a non-default store view in a multi-store deployment that runs Inventory. (Luma storefronts are not affected.) Magento displays this error: Could not add item to cart. Please check required options and try againWorkaround: Use the addProductsToCart mutation instead. GitHub-31660

Community contributions

We are grateful to the wider Magento community and would like to acknowledge their contributions to this release.

The Magento Community Engineering team Magento Contributors maintains a list of top contributing individuals and partners by month, quarter, and year. From that Contributors page, you can follow links to their merged PRs on GitHub.

Partner contributions


标签: magento2.4.2 magento版本更新 magento版本更新通知
上一篇:Magento2.4.1及2.3.6于2020年10月15日正式发布
下一篇:Magento开源社区版本2.4.2更新说明

相关内容

最近更新
相关产品
综合服务邮箱: magento2#foxmail.com