Apply SA-CORE-2014-005-D7.patch also in custom D7 platforms if not yet present and _PERMISSIONS_FIX=YES is set (default is NO).
Latest hotfix added on: Wed Oct 15 18:19:16 PDT 2014