Upgrade / Security Issues (Update on Hold).

[josereyero]

There's once again an OA update, we should consider whether to upgrade the full distribution or just the modules with security issues:

• Views, Less Critical, SA-CONTRIB-2015-039 - Views - Multiple vulnerabilities, https://www.drupal.org/node/2424403

There's also Two unsupported modules (check whether there's an upgrade for them in OA):

• Conditional Fields (Unsupported)
• DHTML Menu (Unsupported)

The OA release is 7.x-2.30 (Feb 11th), that seems to come with lots of bug fixes and some new features, it may be some work though, https://www.drupal.org/node/2424735

However, upgrading Views alone may not be a very good option, since there are some important dependencies for both OA and Panopoly (Another big package included in OA)

[josereyero]

There are some more (pending) security updates:

• Drupal Core - Moderately Critical - Multiple Vulnerabilities - SA-CORE-2015-001, https://www.drupal.org/SA-CORE-2015-001
• Chaos tool suite (ctools) - Multiple vulnerabilities, https://www.drupal.org/node/2454909
• Entity API - Cross Site Scripting (XSS), https://www.drupal.org/node/2437905

None of them is critical, there are several open redirect / xss issues, but issues are piling up and it is about time we do some update.

I think best option would be to just apply the Drupal core update for now, then update to next OA release, that should be in a few days and include updates for all these modules.