Drupal has released security update to address multiple vulnerabilities that could potentially allow an attacker to gain access to a system account.
(a) Drupal core 6.x versions prior to 6.36
(b) Drupal core 7.x versions prior to 7.38
The following updates are available:-
(a) Drupal core 6.36 for 6.x users
(b) Drupal core 7.38 for 7.x users
Users and administrators are encouraged to review the Drupal Security Advisory and apply the necessary updates.
Click here for more information.