Drupal has released security updates to address multiple vulnerabilities that could potentially allow an attacker to gain access to a system account.
Version affected:-
(a) Drupal core 7.x versions prior to 7.39
(b) Drupal core 6.x versions prior to 6.37
The following updates are available:-
(a) Drupal core 6.37 for 6.x users
(b) Drupal core 7.39 for 7.x users
Users and administrators are encouraged to review the Drupal Security Advisory and apply the necessary updates.
Click here for more information.