Upgraded to WordPress 2.6.2 this morning using the WPAU plugin.
The release fixes a vulnerability in the password complexity which could allow user passwords to be reset by the attacker who can later use mt_rand() to predict the random password.
Upgrade if you allow open registration.
Download WordPress 2.6.2