The Joomla! Community announced the immediate availability of Joomla! 1.5.6 [Vusani]. This is a quick turnaround security release to address a high level security issue and it is recommended all users upgrade immediately.

Release Notes

SECURITY [HIGH] Fixed security hole in reset logic to check for proper token length.

Link | Joomla! 1.5.6