Drupal PHP Code Execution Vulnerabilities

[niall]

Two vulnerabilities have been reported in Drupal, which can be exploited by malicious people to compromise a vulnerable system.

1) An unspecified error in the XML-RPC library can be exploited to execute arbitrary PHP code.
The PEAR XML-RPC module has been upgraded on all servers, but you are advised to upgrade to version 4.5.4, or 4.6.2, or later.

2) An input validation error in the filter mechanisms can be exploited to execute arbitrary PHP code via a specially crafted comment or posting.

The vulnerability has been reported in version 4.5.0, 4.5.1, 4.5.2, 4.5.3, 4.6.0 and 4.6.1.

Solution:
Update to version 4.5.4, or 4.6.2, or later.