CVE-2012-4448 should be resolved by this change http://core.trac.ww.wp.xz.cn/changeset/22930
@msimpsonthanks for the quick update. I’ll give it a go.
@mardala I think WP doesn’t make the WP_DEBUG very discoverable. If it was up to me, I’d force debugging on all the time.