Core SECURTY UPDATE to 7.x-7.24.
db update REQUIRED

Includes patch for Node module:
See report:  https://drupal.org/node/1349080  #149
Patch: https://drupal.org/files/issues/1349080-149-d7-move-access-to-join-condition-update-do-not-test.patch

Without this patch, photo albums without covers explicitly set will not show up on /albums page for non-authenticated users.