Finally vTigerCRM 6 Beta have been released. It’s not fully functional yet, there are some modules missing as well as some new modules that did not exist in vTigerCRM 5.4 such as Google Calendar & Contact Sync. Since it’s just Beta version, you can not upgrade from 5.4 yet and it’s only for testing and bug reporting purposes. The RC/Stable is scheduled to be released September or October, however the schedule might change. Vtiger 6.0 Beta: Installation Files | Installation Manual | Developer Manual
vTiger team has released a security patch which will help prevent the Local File Inclusion, Local File Deletion, SQL Injection, PHP Code Injection, Cross site scripting, Arbitrary File Upload, Authentication Bypass vulnerabilities(SOAP API’s). You can download the patch from SourceForge or Office vTiger Link. Make sure you always backup  your files and the database.  To apply the security patch, simply overwrite the files in /vtigercrm/ directory. Feel free to contact us if you need help apply the patch.