Drupal 6.26, 7.13, and 7.14 were released on yesterday. Drupal 7.13 include fixes for denial of service, access bypass, and unvalidated form redirect security vulnerabilities. Drupal 6.26 and 7.14 include bug fixes.
More information is available in the security advisory and the release notes for 6.26, 7.13, and 7.14.
