Fixed http://drupal.org/node/277556
Recommended update for SA-2008-042 - Tinytax - Cross site scripting.
Taxonomy terms were not properly escaped before being printed to the page. Update your module!
See SA-2008-039 - Suggested terms - Cross site scripting for details.
Security release, please update. See SA-2008-038 - Services - Arbitrary code execution for details.
Update: This release was missing a number of files. Please see Services 5.x-0.91 for an updated archive.
This release fixes two critical security issues and also makes the module more efficient and independend of statistics.module.
See SA-2008-037: http://drupal.org/node/272191
Fixes security issues (see SA-2008-036 - Profile search - SQL Injection) and makes output themeable.