Secunia Security Advisory – Fedora has issued an update for drupal. This fixes some vulnerabilities, which can be exploited by malicious users to conduct HTTP response splitting attacks, and by malicious people to conduct cross-site request forgery and cross-site scripting attacks, bypass certain security restrictions, and to compromise a vulnerable system.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/60394/sa27352.txt
Source: https://packetstormsecurity.com/files/60394/Secunia-Security-Advisory-27352.html