How to install a security update
The Wiki has good instructions for each CMS:


Upgrading CiviCRM for Drupal 7
Upgrading CiviCRM for Drupal 6
Upgrading CiviCRM for WordPress
Upgrading CiviCRM for Joomla


If you are using Drupal/drush, you may also be interested in this thread.