[Security-news] PSA-2013-002: Direct download links available even during Drupal.org upgrade window