Debian Security Advisory DSA 840-1 (drupal)

The remote host is missing an update to drupal announced via advisory DSA 840-1. Stefan Esser of the Hardened-PHP Project reported a serious vulnerability in the third-party XML-RPC library included with some Drupal versions. An attacker could execute arbitrary PHP code on a target site. This...