A vulnerability (see SA-CONTRIB-2015-025 - Patterns - Cross Site Request Forgery (CSRF)) was discovered by @Pere Orga (Drupal Security team) in Patterns 7.x-2.1, one of the contributed modules which is used in this distribution . The issue is solved in versions >= 7.x-1.8 of QScience.
Websites running versions of QScience <= 7.x-1.7 should update the patterns module to >= 7.x-2.2 or update the QScience distribution to >= 7.x-1.8.
A vulnerability (see SA-CONTRIB-2015-025 - Patterns - Cross Site Request Forgery (CSRF)) was discovered by @Pere Orga (Drupal Security team) in Patterns 7.x-2.1, one of the contributed modules which is used in the 7.x-2.x branch of distribution . The issue is solved in versions >= 7.x-2.5 of Patterns Profile.
Websites running versions of Patterns Profile <= 7.x-2.4 should update the patterns module to >= 7.x-2.2 or update the Patterns Profile distribution to >= 7.x-2.5.