WordPress 3.1.4 & 3.2 RC3 [1] has been released.
WordPress 3.1.4
WordPress 3.1.4 is available now and is a maintenance and security update for all previous versions.
This release fixes an issue that could allow a malicious Editor-level user to gain further access to the site. Thanks K. Gudinavicius of SEC Consult [2] for bringing this to our attention. Version 3.1.4 also incorporates several other security fixes and hardening measures thanks to the work of WordPress developers Alexander Concha [3] and Jon Cave [4] of our security team. Consult the change log [5] for more details.
Changelog: WordPress 3.1.4 [6]
Download: WordPress 3.1.4 [7]
Download: Modified files since WordPress 3.1.3 [8]
WordPress 3.2 RC3
This release was about all that stood in the way of a final release of WordPress 3.2. So we’re also announcing the third release candidate for 3.2, which contains all of the fixes in 3.1.4; few minor RTL, JavaScript, and user interface fixes; and ensures graceful failures if 3.2 is run on PHP4. As a reminder, we’ve bumped our minimum requirements for version 3.2 to PHP 5.2.4 and MySQL 5.0.
Download: WordPress 3.2 RC3 [9]