Wordpress 2.6.2 is now available. "You must update now". The WP 2.6.2 version contains a handful of bug fixes. If you allow open registration on your blog, you should definitely upgrade. With open registration enabled, it is possible in WordPress versions 2.6.1 and earlier to craft a username such that it will allow resetting another user’s password to a randomly generated password. More. read on