This release is basically to fix a vulnerability in the submodules "shouts" and "heartbeat_comments". The problem was a CSRF attach was possible.
SA-CONTRIB-2012-137 - Heartbeat - Cross Site Request Forgery (CSRF) in heartbeat_comments
Security release. Added a check_plain() to prevent attacks.
SA-CONTRIB-2012-136 - Apache Solr Search Autocomplete - Cross Site Scripting (XSS)
Slight tweak to campaign viewing.
SA-CONTRIB-2012-129 - Activism - Access Bypass
Changes since 6.x-1.2:
Changes since 7.x-1.1: