WordPress.org announced a “security release” today for core WordPress files – Version 3.6.1.
A “security release” fixes potential holes in the software that hackers could use to exploit your site. In other words, you should UPDATE RIGHT AWAY.
One of the best security measures you can take is to always update to the latest version of a security release (that’s plugins, themes, and of course the core files).
According the WordPress News blog, the release fixes the following three issues:
Block unsafe PHP unserialization that could occur in limited situations and setups, which can lead to remote code execution.