Drupal Multiple Vulnerabilities

Two vulnerabilities have been identified in Drupal, which can be exploited by malicious people to cause a DoS (Denial of Service).

1) An error in xmlrpc.php when expanding entity references and can be exploited to consume large amounts of memory and cause an hang via a specially crafted XML file containing malicious attributes.

2) An error related to the OpenID module when expanding entity references and can be exploited to consume large amounts of memory and cause an hang via a specially crafted XML file containing malicious attributes.