CINXE.COM

<!DOCTYPE html> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US"><head profile="http://gmpg.org/xfn/11"><script type="text/javascript" src="https://web-static.archive.org/_static/js/bundle-playback.js?v=7YQSqjSh" charset="utf-8"></script> <script type="text/javascript" src="https://web-static.archive.org/_static/js/wombat.js?v=txqj7nKC" charset="utf-8"></script> <script>window.RufflePlayer=window.RufflePlayer||{};window.RufflePlayer.config={"autoplay":"on","unmuteOverlay":"hidden"};</script> <script type="text/javascript" src="https://web-static.archive.org/_static/js/ruffle/ruffle.js"></script> <script type="text/javascript"> __wm.init("https://web.archive.org/web"); __wm.wombat("http://wordpress.org/news/2012/09/wordpress-3-4-2/","20130121164406","https://web.archive.org/","web","https://web-static.archive.org/_static/", "1358786646"); </script> <link rel="stylesheet" type="text/css" href="https://web-static.archive.org/_static/css/banner-styles.css?v=p7PEIJWi" /> <link rel="stylesheet" type="text/css" href="https://web-static.archive.org/_static/css/iconochive.css?v=3PDvdIFv" />  <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>  <link href="https://plus.google.com/107188080561309681193" rel="publisher"/> <meta name="google-site-verification" content="7VWES_-rcHBcmaQis9mSYamPfNwE03f4vyTj4pfuAw0"/> <title>WordPress › WordPress 3.4.2 Maintenance and Security Release</title> <link rel="stylesheet" href="https://web.archive.org/web/20130121164406cs_/http://s.wordpress.org/style/wp4.css?27"/> <link media="only screen and (max-device-width: 480px)" href="https://web.archive.org/web/20130121164406cs_/http://s.wordpress.org/style/iphone.css" type="text/css" rel="stylesheet"/> <link rel="shortcut icon" href="https://web.archive.org/web/20130121164406im_/http://s.wordpress.org/favicon.ico?3" type="image/x-icon"/> <link rel="alternate" type="application/rss+xml" title="WordPress News" href="https://web.archive.org/web/20130121164406/http://wordpress.org/news/feed/"/> <script type="text/javascript"> var gaJsHost = (("https:" == document.location.protocol) ? "https://web.archive.org/web/20130121164406/https://ssl." : "https://web.archive.org/web/20130121164406/http://www."); document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E")); </script> <script type="text/javascript"> var pageTracker = _gat._getTracker("UA-52447-1"); pageTracker._initData(); pageTracker._trackPageview(); function recordOutboundLink(link, category, action) { pageTracker._trackEvent(category, action); setTimeout('document.location = "' + link.href + '"', 100); } </script>  <style type="text/css"> @import url("https://web.archive.org/web/20130121164406cs_/http://s.wordpress.org/style/blog-wp4.css?2"); </style> <link rel="stylesheet" id="sharedaddy-css" href="https://web.archive.org/web/20130121164406cs_/http://wordpress.org/news/wp-content/plugins/jetpack/modules/sharedaddy/sharing.css?ver=2.0.2" type="text/css" media="all"/> <script type="text/javascript" src="https://web.archive.org/web/20130121164406js_/http://wordpress.org/news/wp-includes/js/jquery/jquery.js?ver=1.9.0"></script> <script type="text/javascript" src="https://web.archive.org/web/20130121164406js_/http://wordpress.org/news/wp-includes/js/jquery/jquery-migrate.js?ver=1.0.0"></script> <link rel="EditURI" type="application/rsd+xml" title="RSD" href="http://wordpress.org/news/xmlrpc.php?rsd"/> <link rel="wlwmanifest" type="application/wlwmanifest+xml" href="http://wordpress.org/news/wp-includes/wlwmanifest.xml"/> <link rel="prev" title="Event Organizers Unite!" href="https://web.archive.org/web/20130121164406/http://wordpress.org/news/2012/07/event-organizers-unite/"/> <link rel="next" title="WordPress 3.5 Beta 1 (and a bonus!)" href="https://web.archive.org/web/20130121164406/http://wordpress.org/news/2012/09/wordpress-3-5-beta-1/"/> <meta name="generator" content="WordPress 3.6-alpha-23288"/> <link rel="canonical" href="https://web.archive.org/web/20130121164406/http://wordpress.org/news/2012/09/wordpress-3-4-2/"/> <link rel="shortlink" href="https://web.archive.org/web/20130121164406/http://wp.me/pZhYe-D8"/> <meta property="og:type" content="article"/> <meta property="og:title" content="WordPress 3.4.2 Maintenance and Security Release"/> <meta property="og:url" content="https://web.archive.org/web/20130121164406/http://wordpress.org/news/2012/09/wordpress-3-4-2/"/> <meta property="og:description" content="WordPress 3.4.2, now available for download, is a maintenance and security release for all previous versions. After nearly 15 million downloads since 3.4 was released not three months ago, we've identified and fixed a number of nagging bugs, including: Fix some issues with older browsers in the administration area. Fix an issue where a theme may not preview correctly, or its screenshot may not be displayed. Improve plugin compatibility with the visual editor. Address pagination problems with some category permalink structures. Avoid errors with both oEmbed providers and trackbacks. Prevent improperly sized header images from being uploaded. Version 3.4.2 also fixes a few security issues and contains some security hardening. The vulnerabilities included potential privilege escalation and a bug that affects multisite installs with untrusted users. These issues were discovered and fixed by the WordPress security team. Download 3.4.2 now or visit Dashboard → [...]"/> <meta property="og:site_name" content="WordPress News"/> <meta property="fb:app_id" content="121415197926116"/> <meta property="og:locale" content="en_US"/> <meta property="og:image" content="https://web.archive.org/web/20130121164406im_/http://wordpress.org/about/images/logo-blue/blue-l.png"/> <link rel="image_src" href="https://web.archive.org/web/20130121164406im_/http://wordpress.org/about/images/logo-blue/blue-l.png"/> <meta id="syntaxhighlighteranchor" name="syntaxhighlighter-version" content="3.1.3"/> <script type="text/javascript" src="https://web.archive.org/web/20130121164406js_/http://s.wordpress.org/wp-includes/js/jquery/jquery.js"></script> <script>document.cookie='devicePixelRatio='+((window.devicePixelRatio === undefined) ? 1 : window.devicePixelRatio)+'; path=/';</script> </head> <body id="wordpress-org" class="single single-post postid-2426 single-format-standard"> <div id="header"> <div class="wrapper"> <h1><a href="https://web.archive.org/web/20130121164406/http://s.wordpress.org/">WordPress.org</a></h1> <form action="https://web.archive.org/web/20130121164406/http://wordpress.org/search/do-search.php" method="get" id="head-search"> <input class="text" name="search" type="text" value="Search WordPress.org" maxlength="150" onfocus="this.value=(this.value=='Search WordPress.org') ? '' : this.value;" onblur="this.value=(this.value=='') ? 'Search WordPress.org' : this.value;"/> <input type="submit" class="button" value="Go"/> </form> <ul> <li><a href="https://web.archive.org/web/20130121164406/http://wordpress.org/showcase/" title="See some of the sites built on WordPress.">Showcase</a></li> <li><a href="https://web.archive.org/web/20130121164406/http://wordpress.org/extend/themes/" title="Find just the right look for your website.">Themes</a></li> <li><a href="https://web.archive.org/web/20130121164406/http://wordpress.org/extend/plugins/" title="Plugins can extend WordPress to do almost anything you can imagine.">Plugins</a></li> <li><a href="https://web.archive.org/web/20130121164406/http://wordpress.org/extend/mobile/" title="Take your website on the go!">Mobile</a></li> <li><a href="https://web.archive.org/web/20130121164406/http://wordpress.org/support/" title="Forums, documentation, help.">Support</a><ul class="nav-submenu"><li><a href="https://web.archive.org/web/20130121164406/http://wordpress.org/support/" title="Support and discussion forums.">Forums</a></li><li><a href="https://web.archive.org/web/20130121164406/http://codex.wordpress.org/Main_Page" title="Documentation, tutorials, best practices.">Docs</a></li></ul></li> <li><a href="https://web.archive.org/web/20130121164406/http://make.wordpress.org/" title="Contribute your knowledge.">Get Involved</a><ul class="nav-submenu"><li><a href="https://web.archive.org/web/20130121164406/http://make.wordpress.org/core/" title="Write the code.">Core</a></li><li><a href="https://web.archive.org/web/20130121164406/http://make.wordpress.org/ui/" title="Improve the interface.">UI</a></li><li><a href="https://web.archive.org/web/20130121164406/http://make.wordpress.org/accessibility/" title="Create a better experience.">Accessibility</a></li><li><a href="https://web.archive.org/web/20130121164406/http://make.wordpress.org/plugins/" title="Extend the system.">Plugins</a></li><li><a href="https://web.archive.org/web/20130121164406/http://make.wordpress.org/themes/" title="Beautify the web.">Themes</a></li><li><a href="https://web.archive.org/web/20130121164406/http://make.wordpress.org/support/" title="Help the users.">Support</a></li><li><a href="https://web.archive.org/web/20130121164406/http://make.wordpress.org/polyglots/" title="Translate for the world.">Polyglots</a></li><li><a href="https://web.archive.org/web/20130121164406/http://make.wordpress.org/mobile/" title="On the go.">Mobile</a></li></ul></li> <li><a href="https://web.archive.org/web/20130121164406/http://wordpress.org/about/" title="About the WordPress Organization, and where we're going.">About</a></li> <li><a href="https://web.archive.org/web/20130121164406/http://wordpress.org/news/" title="Come here for the latest scoop." class="current">Blog</a></li> <li><a href="https://web.archive.org/web/20130121164406/http://wordpress.org/hosting/" title="Find a home for your blog.">Hosting</a></li> <li id="download"><a href="https://web.archive.org/web/20130121164406/http://wordpress.org/download/" title="Get it. Got it? Good.">Download</a></li> </ul> </div> </div> <div id="headline"> <div class="wrapper"> <h2><a href="https://web.archive.org/web/20130121164406/http://wordpress.org/news/" title="WordPress News" rel="home">WordPress News</a></h2> </div> </div> <div id="pagebody"> <div class="wrapper"> <div class="col-9"> <h2 class="fancy"><a href="https://web.archive.org/web/20130121164406/http://wordpress.org/news/2012/09/wordpress-3-4-2/">WordPress 3.4.2 Maintenance and Security Release</a></h2> <div class="meta">Posted September 6, 2012 by <a href="https://web.archive.org/web/20130121164406/http://nacin.com/">Andrew Nacin</a>. Filed under <a href="https://web.archive.org/web/20130121164406/http://wordpress.org/news/category/releases/" title="View all posts in Releases" rel="category tag">Releases</a>, <a href="https://web.archive.org/web/20130121164406/http://wordpress.org/news/category/security/" title="View all posts in Security" rel="category tag">Security</a>. </div> <div class="storycontent"> <p>WordPress 3.4.2, now available for download, is a maintenance and security release for all previous versions.</p> <p>After nearly 15 million downloads since 3.4 was released not three months ago, we’ve <a href="https://web.archive.org/web/20130121164406/http://core.trac.wordpress.org/query?status=closed&resolution=fixed&milestone=3.4.2&group=resolution&order=severity&desc=1">identified and fixed a number of nagging bugs</a>, including:</p> <ul> <li>Fix some issues with older browsers in the administration area.</li> <li>Fix an issue where a theme may not preview correctly, or its screenshot may not be displayed.</li> <li>Improve plugin compatibility with the visual editor.</li> <li>Address pagination problems with some category permalink structures.</li> <li>Avoid errors with both oEmbed providers and trackbacks.</li> <li>Prevent improperly sized header images from being uploaded.</li> </ul> <p>Version 3.4.2 also fixes a few security issues and contains some security hardening. The vulnerabilities included potential privilege escalation and a bug that affects multisite installs with untrusted users. These issues were discovered and fixed by the WordPress security team.</p> <p><a href="https://web.archive.org/web/20130121164406/http://wordpress.org/download/"><strong>Download 3.4.2</strong></a><strong> now or visit Dashboard → Updates in your site admin to update now.</strong></p> <p><em>Fixes for some bugs<br/> Back to work on 3.5<br/> It’s time to update</em></p> <div class="sharedaddy sd-sharing-enabled"><div class="robots-nocontent sd-block sd-social sd-social-icon-text sd-sharing"><h3 class="sd-title">Share this:</h3><div class="sd-content"><ul><li class="share-twitter"><a rel="nofollow" class="share-twitter sd-button share-icon" href="https://web.archive.org/web/20130121164406/http://wordpress.org/news/2012/09/wordpress-3-4-2/?share=twitter" target="_blank" title="Click to share on Twitter" id="sharing-twitter-2426"><span>Twitter</span></a></li><li class="share-facebook"><a rel="nofollow" class="share-facebook sd-button share-icon" href="https://web.archive.org/web/20130121164406/http://wordpress.org/news/2012/09/wordpress-3-4-2/?share=facebook" target="_blank" title="Share on Facebook" id="sharing-facebook-2426"><span>Facebook</span></a></li><li class="share-google-plus-1"><a rel="nofollow" class="share-google-plus-1 sd-button share-icon" href="https://web.archive.org/web/20130121164406/http://wordpress.org/news/2012/09/wordpress-3-4-2/?share=google-plus-1" target="_blank" title="Click to share on Google+" id="sharing-google-2426"><span>Google +1</span></a></li><li class="share-email"><a rel="nofollow" class="share-email sd-button share-icon" href="https://web.archive.org/web/20130121164406/http://wordpress.org/news/2012/09/wordpress-3-4-2/?share=email" target="_blank" title="Click to email this to a friend"><span>Email</span></a></li><li class="share-end"></li></ul><div class="sharing-clear"></div></div></div></div></div> <div class="feedback"> <span>Comments Off</span> </div> <div class="nextprev"><span class="prev">« <a href="https://web.archive.org/web/20130121164406/http://wordpress.org/news/2012/07/event-organizers-unite/">Event Organizers Unite!</a></span> <span class="next"><a href="https://web.archive.org/web/20130121164406/http://wordpress.org/news/2012/09/wordpress-3-5-beta-1/">WordPress 3.5 Beta 1 (and a bonus!)</a> »</span></div> <h2 class="fancy">No Pings </h2> <p><a href="https://web.archive.org/web/20130121164406/http://wordpress.org/news/2012/09/wordpress-3-4-2/feed/"><abbr title="Really Simple Syndication">RSS</abbr> feed for comments on this post.</a> </p> </div> <div class="col-3"> <div class="blog-categories"> <h4>See Also:</h4> <p>For more WordPress news, check out the <a href="https://web.archive.org/web/20130121164406/http://planet.wordpress.org/">WordPress Planet</a>.</p> <p>There’s also a <a href="https://web.archive.org/web/20130121164406/http://wpdevel.wordpress.com/">development P2 blog</a>.</p> <p>To see how active the project is <a href="https://web.archive.org/web/20130121164406/http://core.trac.wordpress.org/timeline">check out our Trac timeline</a>, it often has 20–30 updates per day.</p> <h4>Categories</h4> <ul> <li class="cat-item cat-item-14"><a href="https://web.archive.org/web/20130121164406/http://wordpress.org/news/category/releases/" title="View all posts filed under Releases">Releases</a> (108) </li> <li class="cat-item cat-item-1"><a href="https://web.archive.org/web/20130121164406/http://wordpress.org/news/category/uncategorized/" title="View all posts filed under Uncategorized">Uncategorized</a> (92) </li> <li class="cat-item cat-item-5"><a href="https://web.archive.org/web/20130121164406/http://wordpress.org/news/category/development/" title="View all posts filed under Development">Development</a> (86) </li> <li class="cat-item cat-item-12"><a href="https://web.archive.org/web/20130121164406/http://wordpress.org/news/category/meta/" title="View all posts filed under Meta">Meta</a> (31) </li> <li class="cat-item cat-item-3"><a href="https://web.archive.org/web/20130121164406/http://wordpress.org/news/category/community/" title="View all posts filed under Community">Community</a> (29) </li> <li class="cat-item cat-item-15"><a href="https://web.archive.org/web/20130121164406/http://wordpress.org/news/category/security/" title="View all posts filed under Security">Security</a> (25) </li> <li class="cat-item cat-item-7"><a href="https://web.archive.org/web/20130121164406/http://wordpress.org/news/category/events/" title="View all posts filed under Events">Events</a> (22) </li> <li class="cat-item cat-item-18"><a href="https://web.archive.org/web/20130121164406/http://wordpress.org/news/category/testing/" title="View all posts filed under Testing">Testing</a> (20) </li> <li class="cat-item cat-item-22"><a href="https://web.archive.org/web/20130121164406/http://wordpress.org/news/category/wordcamp/" title="View all posts filed under WordCamp">WordCamp</a> (16) </li> <li class="cat-item cat-item-129"><a href="https://web.archive.org/web/20130121164406/http://wordpress.org/news/category/user-interface/" title="View all posts filed under User Interface">User Interface</a> (14) </li> </ul> </div> </div> </div> </div> <div style="display:none"> </div> <script type="text/javascript"> WPCOM_sharing_counts = {"https:\/\/web.archive.org\/web\/20130121164406\/http:\/\/wordpress.org\/news\/2012\/09\/wordpress-3-4-2\/":2426} </script> <script type="text/javascript" src="https://web.archive.org/web/20130121164406js_/http://wordpress.org/news/wp-content/plugins/jetpack/modules/sharedaddy/sharing.js?ver=20120131"></script> <script type="text/javascript" charset="utf-8"> jQuery(document).ready(function(){ jQuery( 'a.share-twitter' ).click(function(){ window.open( jQuery(this).attr( 'href' ), 'wpcomtwitter', 'menubar=1,resizable=1,width=600,height=350' ); return false; }); }); </script> <script type="text/javascript" charset="utf-8"> jQuery(document).ready(function(){ jQuery( 'a.share-facebook' ).click(function(){ window.open( jQuery(this).attr( 'href' ), 'wpcomfacebook', 'menubar=1,resizable=1,width=600,height=400' ); return false; }); }); </script> <script type="text/javascript" charset="utf-8"> jQuery(document).ready(function(){ jQuery( 'a.share-google-plus-1' ).click(function(){ window.open( jQuery(this).attr( 'href' ), 'wpcomgoogle-plus-1', 'menubar=1,resizable=1,width=600,height=600' ); return false; }); }); </script> <div id="sharing_email" style="display: none;"> <form action="" method="post"> <label for="target_email">Send to Email Address</label> <input type="text" name="target_email" id="target_email" value=""/> <label for="source_name">Your Name</label> <input type="text" name="source_name" id="source_name" value=""/> <label for="source_email">Your Email Address</label> <input type="text" name="source_email" id="source_email" value=""/> <img style="float: right; display: none" class="loading" src="https://web.archive.org/web/20130121164406im_/http://wordpress.org/news/wp-content/plugins/jetpack/modules/sharedaddy/images/loading.gif" alt="loading" width="16" height="16"/> <input type="submit" value="Send Email" class="sharing_send"/> <a href="#cancel" class="sharing_cancel">Cancel</a> <div class="errors errors-1" style="display: none;"> Post was not sent - check your email addresses! </div> <div class="errors errors-2" style="display: none;"> Email check failed, please try again </div> <div class="errors errors-3" style="display: none;"> Sorry, your blog cannot share posts by email. </div> </form> </div> <script type="text/javascript" src="https://web.archive.org/web/20130121164406js_/http://s0.wp.com/wp-content/js/devicepx-jetpack.js?ver=201304"></script> <script type="text/javascript" src="https://web.archive.org/web/20130121164406js_/http://s.gravatar.com/js/gprofiles.js?ver=2013Janaa"></script> <script type="text/javascript"> /* <![CDATA[ */ var WPGroHo = {"my_hash":""}; /* ]]> */ </script> <script type="text/javascript" src="https://web.archive.org/web/20130121164406js_/http://wordpress.org/news/wp-content/plugins/jetpack/modules/wpgroho.js?ver=3.6-alpha-23288"></script> <div id="fb-root"></div> <script type="text/javascript"> window.fbAsyncInit = function() { FB.init({"appId":"121415197926116","channelUrl":"https:\/\/web.archive.org\/web\/20130121164406\/http:\/\/wordpress.org\/news\/?sfc-channel-file=1","status":true,"cookie":true,"xfbml":true,"oauth":true}); }; (function(d){ var js, id = 'facebook-jssdk'; if (d.getElementById(id)) {return;} js = d.createElement('script'); js.id = id; js.async = true; js.src = "//web.archive.org/web/20130121164406/http://connect.facebook.net/en_US/all.js"; d.getElementsByTagName('head')[0].appendChild(js); }(document)); </script> <script src="https://web.archive.org/web/20130121164406js_/http://stats.wordpress.com/e-201304.js" type="text/javascript"></script> <script type="text/javascript"> st_go({v:'ext',j:'1:2.0.2',blog:'14607090',post:'2426'}); var load_cmc = function(){linktracker_init(14607090,2426,2);}; if ( typeof addLoadEvent != 'undefined' ) addLoadEvent(load_cmc); else load_cmc(); </script> <div id="footer"> <div class="wrapper"> <p> <a href="https://web.archive.org/web/20130121164406/http://wordpress.org/about/privacy/">Privacy</a> | <a href="https://web.archive.org/web/20130121164406/http://wordpress.org/about/license/">License / GPLv2</a>     See also: <a href="https://web.archive.org/web/20130121164406/http://wordpress.com/?ref=wporg-footer" title="Hassle-free WP hosting">Hosted WordPress.com</a> | <a href="https://web.archive.org/web/20130121164406/http://wordpress.tv/" title="Videos, tutorials, WordCamps">WordPress.TV Videos</a> | <a href="https://web.archive.org/web/20130121164406/http://central.wordcamp.org/" title="Find a WordPress event near your home">WordCamp Events</a> | <a href="https://web.archive.org/web/20130121164406/http://buddypress.org/" title="A set of plugins to transform your WordPress into a social network">BuddyPress Social Layer</a> | <a href="https://web.archive.org/web/20130121164406/http://bbpress.org/" title="Fast, slick forums built on WordPress">bbPress Forums</a> | <a href="https://web.archive.org/web/20130121164406/http://jobs.wordpress.net/" title="Find or post WordPress jobs">WP Jobs</a> | <a href="https://web.archive.org/web/20130121164406/http://ma.tt/" title="Co-founder of WordPress, an example of what WordPress can do">Matt</a> </p> <br/> <iframe src="https://web.archive.org/web/20130121164406if_/http://www.facebook.com/plugins/like.php?app_id=121415197926116&href=http%3A%2F%2Fwww.facebook.com%2Fwordpress&send=false&layout=button_count&width=150&show_faces=false&action=like&colorscheme=light&font=lucida+grande&height=21" scrolling="no" frameborder="0" style="border:none; overflow:hidden; width:150px; height:21px;" allowtransparency="true"></iframe>  <iframe allowtransparency="true" frameborder="0" scrolling="no" src="https://web.archive.org/web/20130121164406if_/http://platform.twitter.com/widgets/follow_button.html?screen_name=WordPress&show_count=false" style="width:150px; height:20px;"></iframe> <h6>Code is Poetry</h6> </div> </div> <script type="text/javascript">_qoptions={qacct:"p-18-mFEk4J448M"};</script> <script type="text/javascript" src="https://web.archive.org/web/20130121164406js_/http://edge.quantserve.com/quant.js"></script> <noscript><img src="https://web.archive.org/web/20130121164406im_/http://pixel.quantserve.com/pixel/p-18-mFEk4J448M.gif" style="display: none;" border="0" height="1" width="1" alt=""/></noscript>  <script type="text/javascript" src="https://web.archive.org/web/20130121164406js_/http://s.gravatar.com/js/gprofiles.js"></script> <script type="text/javascript"> (function() { var po = document.createElement('script'); po.type = 'text/javascript'; po.async = true; po.src = 'https://web.archive.org/web/20130121164406/https://apis.google.com/js/plusone.js'; var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(po, s); })(); </script> <script type="text/javascript"> (function($){ $(document).ready(function() { $('#footer a').click(function() { if (this.href.indexOf('wordpress.org') == -1 && this.href.indexOf('http') == 0) { recordOutboundLink(this, 'Outbound Links', this.href); return false; } }); }); })(jQuery); </script> </body> </html>