Moodle 2.9.1, 2.8.7 and 2.7.9 are now available via the usual open download channels: https://download.moodle.org or Git.
In addition to a number of bug fixes and small improvements, security
vulnerabilities have been discovered and fixed. We highly recommend
that you upgrade your sites as soon as
possible. Upgrading should be very straightforward. As per our usual
policy, admins of all registered Moodle sites will be notified
security issue details directly via email and we'll publish details more
widely in a week.
Other details can be found in our notes for each release:
Due to YouTube API changes some additional setup is needed if you want your users to access YouTube repository.
that 2.7 branch is supported for security fixes only until May 2017.