PMweb - as Rich pointed out in the
other thread; OpenSSL, Nginx, etc are updated.
Right now were just waiting on Sun
to do their part in JVM
so that Jetty can be addressed.
Thus
6.0.3 should be out this month with ~13 items (the third-party
ssl/tls protocol vulnerability plus a few of your most pressing issues: contact dupes discussed in this thread, scrolling resets to top, high load, stuck invitations, etc).
And yes we're aiming to make
6.0.4 an early Christmas present for those doing upgrades when students are off campus etc. (With
5.0.21 shortly thereafter.)
Edit: Remember it's not possible to go from 5.0.20 to 6.0.2/3, since it was released prior the installer won't know that 5.0.20 exists (will have to use upcoming 6.0.4, those on 5.0.19 should be ok to do 6.0.2):
Bug 42609 - Upgrade from 5.0.19 to 6.0.0 or 6.0.1 fails - slapadd import failed