Note, to get the fully packaged version of Drupal Commons, download Commons from Acquia.com as the Drupal.org release contains only the Commons feature modules and does not contain Drupal core or contributed projects.
For the latest release notes an upgrade instructions, see https://docs.acquia.com/commons/whats-new.
Changes since 6.x-2.7:
Type casting GET variables passed from the URL as integers preventing any type of XSS attacks.
See SA-CONTRIB-2012-110 - Colorbox Node - Cross Site Scripting (XSS) for details.
7.x-1.0-alpha5: Reupload
6.x-2.22: Reupload files
Changed some logic in the validation.
See SA-CONTRIB-2012-109 - Restrict node page view - Access bypass for details.
Fixes SA-CONTRIB-2012-105 - Hashcash - Cross Site Scripting (XSS)