Drupal administrators should be aware that a security update has been released:

The Drupal project has released version 4.6.2 of its open-source content management platform. Drupal 4.6.2 is a maintenance release that provides corrections of problems reported using the bug tracking system. Drupal 4.6.2 also fixes two security vulnerabilities: one related to the use of Drupal's input filters and one in the XML-RPC library that Drupal ships with. Upgrading your existing Drupal sites is highly recommended. As the same bugs are also present in the Drupal 4.5 series, Drupal 4.5.4 is released as well.

We've interrupted an ongoing design project (to be announced in the next few days) to update all of our sites. We recommend that all Drupal and CivicSpace users reading this to do this upgrade as soon as possible. If you already have version 4.6.1 installed, you can download the tarball and upload only the files from /modules and /includes bearing dates post-June 5th. There were no database changes.

• Laura's blog
•