Debian Linux Security Advisory 3051-1 – Stefan Horst discovered a vulnerability in the Drupal database abstraction API, which may result in SQL injection.