Acquia Drupal 1.2.26 (Drupal 6.17 core) contains important security updates and bug fixes. The following list describes what is new in this version.

• Updated the Content Construction Kit (CCK) module to 6.x-2.7. This also fixes an access bypass security issue described in SA-CONTRIB-2010-065.
• Updated the FileField module to 6.x-3.5. See also the changes in 6.x-3.4. This update fixes a cross site scripting security issue described in SA-CONTRIB-2010-066.
• Updated the Views module to 6.x-2.11. This also fixes multiple security issue described in SA-CONTRIB-2010-067.
• Updated the Acquia Network Connector module to 6.x-1.9.
• Updated the Link module to 6.x-2.9.
• Updated the Token module to 6.x-1.13.

Notes:

• Acquia Drupal may include released, beta, alpha, or patched modules depending on which version is determined to be the most current, stable, secure and appropriate version for general use.
• Customers updating a production site should always perform a backup first, and, if possible, perform a trial update in a test environment before updating their production site.
• For some of the modules being upgraded, it is important to make sure that the new version of the module completely replaces the old one (i.e., that the entire module's directory is replaced and that there are no files from the old version left behind). Please follow the recommended upgrade procedures found in the Getting Started Guide.
• If you experience problems during the upgrade, clearing Drupal's caches may be necessary. You can do this by visiting Administer > Site configuration > Performance (?q=admin/settings/performance) and clicking the "Clear cached data" button at the bottom of the page. Also note that you may be prompted to run your site's database updates more than once, and if you see error messages during the upgrade they do not necessarily indicate a problem.
• The Acquia Drupal Stack Installer has the following known issues:
• On windows upgrade, you will be prompted to stop the Xmail service. (AN-15336)
• On windows upgrade, the stack installer insists that you uncheck the Xmail install because it is already installed. (AN-15337)
• The stack installer's php.ini will not be modified on upgrade to support side-by-side drupal/php applications.