A bugfix release with a few new features. You need this for a smoother upgrade to Drupal 6 (see UPGRADE.txt). New features include Services module integration and improvements to Invite integration (both by @scottgifford).
Thanks to everyone who provided patches and tested!
This release fixes:
* The LDAP integration module does not implement a confirmation pages for the LDAP server activation/deactivation which could cause a CSRF attack.
* A user defined server name is not properly escaped on the administration pages which might lead to a XSS attacks.
* The user's LDAP data is not properly access controlled before displaying it in the user profile pages which allows unauthorized view of the data.
* Some user management access rules are ignored during the authentication process.