Secunia Security Advisory - Debian has issued an update for drupal6. This fixes a weakness and some vulnerabilities, which can be exploited by malicious users to conduct script insertion attacks and by malicious users and malicious people to bypass certain security restrictions.
d10382c65791b94180f10ea5ff4d3b04f639ff55e7b595e43d3dffc8cc73fa11