Debian Linux Security Advisory 2828-1 - Multiple vulnerabilities have been discovered in Drupal, a fully-featured request forgery protection, insecure pseudo random number generation, code execution and incorrect security token validation.
9fca0e872421aa3d505fa144d23009d1dc2627543758b7bd99600341f0efc3ac