commons 7.x-3.40

Drupal Commons 3.40 (Drupal 7.52 core) contains the following updates:

This release of Drupal Commons replaces Flag 2.x with Flag 3.x after support for the 7.x-2.x branch of the Flag module was dropped due to a security issue.

All of the Commons and contrib modules that relied on Flag 2.x have been updated to support Flag 3.x.

Ensure that you follow the upgrade instructions, as the rest of your site will fail to load until the update is performed.

If you have any custom or contrib modules that rely on Flag 2.x then they will need to be updated before proceeding with the upgrade.

Resolved security alerts

• Drupal Core - Moderately Critical - Multiple Vulnerabilities - SA-CORE-2016-005
• Flag - Moderately Critical - Access Bypass - SA-CONTRIB-2016-050

Drupal code and module updates

• Updated Drupal Core to 7.52.
• Updated the CTools module to 7.x-1.11.
• Updated the Dialog module to 7.x-2.0-beta1.
• Updated the Entity module to 7.x-1.8.
• Updated the Entity Embed module to the latest commit hash.
• Updated the Entity Reference module to 7.x-1.2.
• Updated the Flag module to 7.x-3.9.
• Updated the Internationalization module to 7.x-1.14.
• Updated the Media module to 7.x-2.0-beta5.
• Updated the Panels module to 7.x-3.8.
• Updated the Timeago library to 1.5.3.

Fixed issues and improvements

• Accommodated the changes required to support Flag 3.x.