Security update

The security issue is caused by a mishandling of boolean access callbacks when OG Features overrides all menu items. Boolean access callbacks in menu items that are explicitly set to FALSE will be open for access.

Other minor code improvements and changes were included.

The security issue is caused by a mishandling of boolean access callbacks when OG Features overrides all menu items. Boolean access callbacks in menu items that are explicitly set to FALSE will be open for access.

For full release notes and upgrade instructions, please see http://docs.acquia.com/commons.

Drupal Commons 3.5 (Drupal 7.24 core) contains the following features and updates:

Note

Maintenance and security release of the Drupal 7 series.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the security announcement:

• SA-CORE-2013-003 - Drupal core - Multiple vulnerabilities

No other fixes are included.

Maintenance and security release of the Drupal 6 series.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the security announcement:

• SA-CORE-2013-003 - Drupal core - Multiple vulnerabilities

No other fixes are included.

Changes since 7.x-1.0:

SA-CONTRIB-2013-096 - Entity reference - Access bypass