See Ctools - Critical - Multiple Vulnerabilities - SA-CONTRIB-2015-141.

This is an incremental security and bugfix release for ctools.

Looking to fix future D6 CTools issues? Find japerry or merlinofchaos in #drupal-scotch, #drupal-contribute, or #drupal-panels -- and become a maintainer for D6 CTools.

Changes since 6.x-1.13:

• Harden AJAX link handling
• Content type plugins do not properly inherit "edit" permission
• Various lint fixes
• Fix typo
• Issue #2512850 by DamienMcKenna, mw4ll4c3: PHP 5.4+ compatibility
• Issue #2010124 by davidwhthomas: ctools_access_get_loggedin_context doesn't fully load current user in context