If by "any day now" you mean in about a month... sure, the current ETA is 12/14/2009 according to the Zimbra Product Portal.
.. not even "admin" could solve the problem ...
what is the possibility for a patch before 6.0.3? (according to "any day now"..)
The "Estimated (12/14/2009)" was associated with what is now 6.0.4. I believe that someone failed to move that estimate from 6.0.3 to 6.0.4 when the version numbers rolled.
I would expect that QA for ten hot security & stability issues (all but one already resolved) should take considerably less than a month.
I want 6.0.4 before Christmas. Please.
Good to hear that as I thought that was quite a while to wait for an important security fix such as that, where are you getting your information on the release date?
PMweb - as Rich pointed out in the other thread; OpenSSL, Nginx, etc are updated.
Right now were just waiting on Sun to do their part in JVM so that Jetty can be addressed.
Thus 6.0.3 should be out this month with ~13 items (the third-party ssl/tls protocol vulnerability plus a few of your most pressing issues: contact dupes discussed in this thread, scrolling resets to top, high load, stuck invitations, etc).
And yes we're aiming to make 6.0.4 an early Christmas present for those doing upgrades when students are off campus etc. (With 5.0.21 shortly thereafter.)
Edit: Remember it's not possible to go from 5.0.20 to 6.0.2/3, since it was released prior the installer won't know that 5.0.20 exists (will have to use upcoming 6.0.4, those on 5.0.19 should be ok to do 6.0.2): Bug 42609 - Upgrade from 5.0.19 to 6.0.0 or 6.0.1 fails - slapadd import failed
Fixed in Bug 42761 - Enable upgrade path from 5.0.20 to 6.0.3 and the OP's issue Bug 41920 - Duplicates returned in contact search is now fixed in the latest release: http://www.zimbra.com/forums/announc...commended.html