Version 3.4.1

On June 27, 2012, WordPress 3.4.1 was released to the public. This is a maintenance and security update.

For version 3.4.1, the database version (dbversion in wpoptions) changed to 21115.

Installation/Update Information

To download WordPress 3.4.1, update automatically from the Dashboard > Updates menu in your site's admin area or visit http://wordpress.org/download/release-archive/.

For step-by-step instructions on installing and updating WordPress:

Updating WordPress

If you are new to WordPress, we recommend that you begin with the following:

Summary

This maintenance release addresses 18 bugs with version 3.4, including:

Fixes an issue where a theme’s page templates were sometimes not detected.
Addresses problems with some category permalink structures.
Better handling for plugins or themes loading JavaScript incorrectly.
Adds early support for uploading images on iOS 6 devices.
Allows for a technique commonly used by plugins to detect a network-wide activation.
Better compatibility with servers running certain versions of PHP (5.2.4, 5.4) or with uncommon setups (safe mode, open_basedir), which had caused warnings or in some cases prevented emails from being sent.
Additionally: Version 3.4.1 fixes a few security issues and contains some security hardening. These issues were discovered and fixed by the WordPress security team:
  • Privilege Escalation/XSS. Critical. Administrators and editors in multisite were accidentally allowed to use unfiltered_html for 3.4.0.
  • CSRF. Additional CSRF protection in the customizer.
  • Information Disclosure: Disclosure of post contents to authors and contributors (such as private or draft posts).
  • Hardening: Deprecate wpexplainnonce(), which could reveal unnecessary information.
  • Hardening: Require a child theme to be activated with its intended parent only.
A full log of the changes made for 3.4.1 can be found at http://core.trac.wordpress.org/changeset?reponame=&new=21153%40branches%2F3.4&old=21076%40trunk

Last edited Jul 24, 2012 at 12:26 PM by rishi25ils, version 1

Comments

No comments yet.