* If you are running Drupal 6.x then upgrade to Drupal 6.10 .
If you are unable to upgrade immediately, you can apply a patch to secure
your installation until you are able to do a proper upgrade. The patch fixes
the security vulnerability, but does not contain other fixes which were
released in Drupal 6.10.
* To patch Drupal 6.9 use SA-CORE-2009-003-6.9.patch ...."