Debian Linux Security Advisory 2776-1 – Multiple vulnerabilities have been been fixed in the Drupal content management framework, resulting in information disclosure, insufficient validation, cross-site scripting and cross-site request forgery…. Debian Linux Security Advisory 2776-1 – Multiple vulnerabilities have been been fixed in the Drupal content management framework, resulting in information disclosure, insufficient validation, cross-site scripting and cross-site request forgery.

Read more http://packetstormsecurity.com/files/123579/dsa-2776-1.txt