Out-of-band Drupal security updates fix bugs with known exploits

Drupal has released out-of-band security updates to patch two arbitrary PHP code execution vulnerabilities identified as CVE-2020-28948 and CVE-2020-28949 in Drupal core.