WordPress 6.4.2发布，请尽快更新

维护和安全更新

6.4.2 版本修补了安全漏洞、修正了 7 个问题。

2023 年 12 月 6 日，WordPress 6.4.2 向公众发布。

维护和安全更新

WordPress 6.4.2 修复了 7 个重大修复

#59819 – 将CSSalign-item从开始/结束更改为flex-start/flex-end以获得完整的浏览器支持

#59821 – 给译者的不相关评论

#59847 – 自 WordPress 6.4 起，不再调用使用 register_theme_directory 移动到不同位置的主题的functions.php

#59869 – 文档块中 _register_theme_block_patterns 的引用不正确

#59882 – 将序列化模板内容公开给注册到“hooked_block_types”过滤器的回调。

#59891 – WP_HTML_Tag_Processor 类的示例不正确

#59935 – 站点编辑器：徽标

安全团队修复了 WordPress 6.4.2 中的以下漏洞

无法在核心中直接利用的远程代码执行漏洞；然而，安全团队认为，与某些插件结合使用时，特别是在多站点安装中，可能会出现严重的严重性。

变更日志

修订的文件清单

./readme.html
./wp-admin/css/about-rtl.min.css
./wp-admin/css/about.css
./wp-admin/css/about-rtl.css
./wp-admin/css/about.min.css
./wp-admin/includes/update-core.php
./wp-admin/about.php
./wp-includes/theme.php
./wp-includes/ms-blogs.php
./wp-includes/html-api/class-wp-html-token.php
./wp-includes/html-api/class-wp-html-tag-processor.php
./wp-includes/version.php
./wp-includes/block-template-utils.php
./wp-includes/block-patterns.php
./wp-includes/rest-api/class-wp-rest-server.php

原文：

Version 6.4.2

On December 6, 2023, WordPress 6.4.2 was released to the public.

Summary

Maintenance & Security updates

WordPress 6.4.2 fixes 7 Big fixes

#59819 – Change CSS align-item from start / end to flex-start / flex-end for full browser support

#59821 – Irrelevant comment for translators

#59847 – Since WordPress 6.4, the functions.php of a theme moved to a different location using register_theme_directory is no longer called

#59869 – Incorrect reference in docblock for _register_theme_block_patterns

#59882 – Expose serialized template content to callbacks registered to the `hooked_block_types` filter.

#59891 – Incorrect example for WP_HTML_Tag_Processor class

#59935 – Site editor: logo

The security team addressed the following vulnerability in WordPress 6.4.2

A Remote Code Execution vulnerability that is not directly exploitable in core; however, the security team feels that there is a potential for high severity when combined with some plugins, especially in multisite installations.

Change log

List of files revised

./readme.html
./wp-admin/css/about-rtl.min.css
./wp-admin/css/about.css
./wp-admin/css/about-rtl.css
./wp-admin/css/about.min.css
./wp-admin/includes/update-core.php
./wp-admin/about.php
./wp-includes/theme.php
./wp-includes/ms-blogs.php
./wp-includes/html-api/class-wp-html-token.php
./wp-includes/html-api/class-wp-html-tag-processor.php
./wp-includes/version.php
./wp-includes/block-template-utils.php
./wp-includes/block-patterns.php
./wp-includes/rest-api/class-wp-rest-server.php