{"id":994,"date":"2014-08-12T10:56:18","date_gmt":"2014-08-12T09:56:18","guid":{"rendered":"http:\/\/ukwebsolutionsdirect.co.uk\/blog\/?p=994"},"modified":"2014-08-12T10:56:18","modified_gmt":"2014-08-12T09:56:18","slug":"wordpress-3-9-2-security-release","status":"publish","type":"post","link":"http:\/\/ukwebsolutionsdirect.co.uk\/blog\/wordpress-hosting\/wordpress-3-9-2-security-release","title":{"rendered":"WordPress 3.9.2 Security Release"},"content":{"rendered":"<p style=\"color: #444444;\">WordPress 3.9.2 is now available as a security release for all previous versions.\u00a0We strongly encourage you to update your sites immediately.<\/p>\n<p style=\"color: #444444;\">This release fixes a possible denial of service issue in PHP\u2019s XML processing, reported by\u00a0Nir Goldshlager\u00a0of the Salesforce.com Product Security Team. It\u00a0\u00a0was fixed by Michael Adams and Andrew Nacin of the WordPress security team and\u00a0David Rothstein of the\u00a0Drupal security team. This is the first time our two projects have coordinated joint security releases.<\/p>\n<p style=\"color: #444444;\">WordPress 3.9.2 also contains other security changes:<\/p>\n<ul style=\"color: #444444;\">\n<li>Fixes a possible but unlikely code execution when processing widgets (WordPress is not affected by default), discovered by\u00a0Alex Concha\u00a0of the WordPress security team.<\/li>\n<li>Prevents information disclosure via XML entity attacks in the external GetID3 library, reported by\u00a0Ivan Novikov\u00a0of ONSec.<\/li>\n<li>Adds protections against brute attacks against CSRF tokens, reported by\u00a0David Tomaschik\u00a0of the Google Security Team.<\/li>\n<li>Contains some additional security hardening, like preventing cross-site scripting that could be triggered only by administrators.<\/li>\n<\/ul>\n<p style=\"color: #444444;\">We appreciated responsible disclosure of these issues directly to our security team. For more information, see the\u00a0release notes\u00a0or consult the\u00a0list of changes.<\/p>\n<p style=\"color: #444444;\">Download WordPress 3.9.2\u00a0or venture over to\u00a0<strong>Dashboard \u2192 Updates<\/strong>\u00a0and simply click \u201cUpdate Now\u201d.<\/p>\n<p style=\"color: #444444;\">Sites that support automatic background updates will be updated to WordPress 3.9.2 within 12 hours. (If you are still on WordPress 3.8.3 or 3.7.3, you will also be updated to 3.8.4 or 3.7.4. We don\u2019t support older versions, so please update to 3.9.2 for the latest and greatest.)<\/p>\n<p style=\"color: #444444;\">Already testing WordPress 4.0? The third beta is\u00a0now available\u00a0(zip) and it contains these security fixes.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>WordPress 3.9.2 is now available as a security release for all previous versions.\u00a0We strongly encourage you to update your sites immediately. This release fixes a possible denial of service issue in PHP\u2019s XML processing, reported by\u00a0Nir Goldshlager\u00a0of the Salesforce.com Product Security Team. It\u00a0\u00a0was fixed by Michael Adams and Andrew Nacin of the WordPress security team [&hellip;]<\/p>\n","protected":false},"author":7,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[97],"tags":[15,160],"_links":{"self":[{"href":"http:\/\/ukwebsolutionsdirect.co.uk\/blog\/wp-json\/wp\/v2\/posts\/994"}],"collection":[{"href":"http:\/\/ukwebsolutionsdirect.co.uk\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/ukwebsolutionsdirect.co.uk\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/ukwebsolutionsdirect.co.uk\/blog\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"http:\/\/ukwebsolutionsdirect.co.uk\/blog\/wp-json\/wp\/v2\/comments?post=994"}],"version-history":[{"count":1,"href":"http:\/\/ukwebsolutionsdirect.co.uk\/blog\/wp-json\/wp\/v2\/posts\/994\/revisions"}],"predecessor-version":[{"id":995,"href":"http:\/\/ukwebsolutionsdirect.co.uk\/blog\/wp-json\/wp\/v2\/posts\/994\/revisions\/995"}],"wp:attachment":[{"href":"http:\/\/ukwebsolutionsdirect.co.uk\/blog\/wp-json\/wp\/v2\/media?parent=994"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/ukwebsolutionsdirect.co.uk\/blog\/wp-json\/wp\/v2\/categories?post=994"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/ukwebsolutionsdirect.co.uk\/blog\/wp-json\/wp\/v2\/tags?post=994"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}