Drupal fixes three vulnerabilities, including one RCE

|