Xaraya .9.0.6 Released

In response to a reported security issue, the Xaraya Team has decided to
release the .9.0.6 package.  Not much has changed between .9.0.5 and .9.0.6,
however all users are suggested to upgrade to the latest release.  The
reported security issue allows a malicious user to gain access to areas that
their privilege set should not allow.  This release fixes this issue, as
well as hardens areas such as the memberslist against XSS attacks.  Credit
goes to Carl Corliss for the report of the issue, as well as the fix.  As a
reminder, security issues are requested to be forwarded to the Xaraya
Project Management Committee at [email protected] or [email protected] so
that appropriate attention can be given.

There are no DB changes between this release and the .9.0.5 release;
however, you should still run the upgrade.php to raise your version number.
There are also three separate builds to choose from with this release.  Core
is the bare minimum to run Xaraya, Base is a good assortment of modules to
run, and Full is all the modules that are in the modules repository that are
in condition for testing.  Thanks to all that have reported issues, and
please keep the feedback coming!

J. Cox for Team Xaraya