Drupal patches critical access bypass flaw in engine core

Drupal has released security fixes to smooth over a serious access bypass vulnerability, among other bugs.