In a recent update on Moodle.org, Moodle 2.9.2, 2.8.8 & 2.7.10 are released and are now available via the usual open download channels: https://download.moodle.org or Git. (See our previous coverage here.)
Acc. to the official announcement:
In addition to a number of bug fixes and small improvements, security vulnerabilities have been discovered and fixed. We highly recommend that you upgrade your sites as soon as possible. Upgrading should be very straightforward. As per our usual policy, admins of all registered Moodle sites will be notified of security issue details directly via email and we’ll publish details more widely in a week.
Other details can be found in release notes for each release:
For the Moodlecloud users, the announcement also contains the upgrade notification:
For those of you on our MoodleCloud free Moodle hosting service you will find your sites have already been upgraded to 2.9.2!
For Moodle 2.7 LTS branch, please Note that 2.7 branch is supported for security fixes until May 2017.
Reference Announcement: https://moodle.org/mod/forum/discuss.php?d=319884#p1283179