In response to the security advisory posted on drupal.org regarding sites that use the CKeditor library (which is used by Commons), we have packaged Commons version 1.7, which includes an update of the CKeditor (third-party) library and the wysiwyg module. We also included a performance-driven patch to organic groups, and some fixes to some minor theme issues.
As this is a security-related release, it is best if you promptly update your site.