BlogsWeek.com

Drupal 4.6.7 and Drupal 4.7.1 are available for download. These are maintenance releases, there are no new features but two highly critical security vulnerabilities are addressed.

Details can be found in the official security advisory:

http://drupal.org/files/sa-2006-005/advisory.txt
http://drupal.org/files/sa-2006-006/advisory.txt

To fix these security problems, you can upgrade Drupal or patch Drupal. You can choose either method, following the detailed instructions provided, but upgrading your existing Drupal sites is strongly recommended.

For additional details, please read the Drupal release announcement.