Couple of days ago, I read a report from Security Focus saying that the Atahualpa 3.6.7 has some vulerability. And mentioned 3.6.8 that should resolve the issue.

But I've not seen 3.6.8 out yet. Anyone has any idea on this issue and the new release?

http://www.securityfocus.com/bid/49865/info

1) twenty-eleven allows you to enter that code in a comment too
2) themes don't process the contents of comments ( to my knowledge)
3) as of today, there is no 3.6.8 (edit:well as of 5:39 am there wasn't )

Make your own judgement about this but saying something ts fixed in a release that doesn't exist, makes me suspicious of the process.

In 3.6.8 this is fixed