Alrighty, brand new update again. But this time, a recommended one it seems. If you run a multi-author blog or one that allows others to self-register. Apparently, in versions 2.6.1 and below, will allow your users’ passwords to be reset. This update is recommended. The official news can be found here if you want to read more.