Security update

This release hardens asynchronous script loading and updates the AddToAny sharing buttons:

Fixes: http://drupal.org/node/1506412

Includes a fix for #416586: Add db_rewrite_sql to respect users permissions for search results - Information Disclosure. The autocomplete would suggest access to nodes which are not necessarily accessible.

See SA-CONTRIB-2011-016

SA-CONTRIB-2011-012

This release fixes http://drupal.org/node/1719462 - but users are encouraged to ugprade all the way to 6.x-4.0 since this release contains a grave bug.

This is a release candidate. Community tests are very much appreciated.

Upgrade instructions:

1. Read the documentation
2. Ensure that you can login as administrator using a password. Upgrading/configuring the new version might fail if you're using the module to log in.
3. Back up your database.. We can't stress this enough.
4. After overwriting module files, run update.php (It's also necessary if you are upgrading from 4.0-rc1.)

Finally finishing off a long overdue release.

Commons 1.4 has been released in conjunction with a security update for the Messaging module (See: http://drupal.org/node/1064024).

It is recommended that you update to this release as soon as possible.

For more details about this release, view the COMMONS_RELEASE_NOTES.txt file located at the root of the distribution code.

You can download Commons 1.4 via http://acquia.com/products-services/drupal-commons.