WordPress Release: 3.7.20
Tag Name: 3.7.20
Release Date: 4/20/2017
WordPressWorld's most popular open-source content management system powering over 40% of all websites. Offers extensive plugin ecosystem, themes, and robust community support for blogs, e-commerce, and corporate websites. Highly customizable and scalable platform suitable for beginners and advanced developers.
TL;DR
WordPress 3.7.20 is a maintenance release that fixes a critical bug affecting audio and video functionality when sanitizing ID3 data. This update prevents corruption of blob data when using wp_kses_post_deep() on ID3 tag information, ensuring proper media handling on WordPress sites. This is an important fix for anyone using audio or video content with ID3 metadata.
Highlight of the Release
- Fixed a critical bug that corrupted audio/video files when sanitizing ID3 metadata
- Improved handling of blob data when using
wp_kses_post_deep()function - Enhanced compatibility with media files containing ID3 tags
Migration Guide
No migration steps are required for this update. This is a maintenance release that fixes a bug without introducing any breaking changes or requiring configuration adjustments.
Simply update to WordPress 3.7.20 through your admin dashboard or via your preferred update method.
Upgrade Recommendations
This update is recommended for all WordPress 3.7.x users, especially those who work with audio or video content that contains ID3 metadata.
The bug fix addresses a specific issue with media handling that could affect content integrity. While the impact depends on your specific usage of audio/video features, upgrading ensures proper functionality of media with ID3 tags.
As always with WordPress updates, it's recommended to backup your site before upgrading, though this maintenance release focuses on a specific bug fix and should not cause compatibility issues.
Bug Fixes
Audio/Video Function Fix
Fixed a critical bug where running wp_kses_post_deep() on ID3 tag data would corrupt blob data, causing issues with audio and video functionality. This resolves issues reported in WordPress core tickets #40075 and #40085.
The fix ensures that binary data in ID3 tags is properly handled during the sanitization process, preventing corruption when processing media files.
New Features
No new features were added in this maintenance release. WordPress 3.7.20 focuses exclusively on fixing the ID3 data sanitization bug.
Security Updates
No specific security fixes were included in this release. The primary focus was on resolving the functional bug related to ID3 data sanitization.
Performance Improvements
No specific performance improvements were included in this release. The focus was on fixing the ID3 data sanitization bug affecting audio and video functionality.
Impact Summary
WordPress 3.7.20 addresses a specific but important bug that affected how WordPress handles ID3 metadata in audio and video files. The issue occurred when the wp_kses_post_deep() function was applied to ID3 tag data, resulting in corruption of blob data.
This fix is particularly important for sites that handle media files with embedded metadata, such as MP3s with artist information or videos with descriptive tags. Prior to this fix, these files could experience data corruption during the sanitization process, potentially leading to playback issues or metadata loss.
The update ensures that WordPress can properly sanitize content without damaging binary data in ID3 tags, resulting in more reliable media handling across the platform. While this is a targeted fix rather than a feature update, it resolves an issue that could significantly impact media-heavy WordPress sites.
Statistics:
User Affected:
- Can now properly upload and manage audio/video files with ID3 metadata without data corruption
- Will experience more reliable media handling for content containing ID3 tags
Contributors:
