The Joomla! team has just release Joomla! 1.0.4 [Sundial] which is marked as a security related release (although it does contain other fixes).

Perhaps some fellow Joomlapolitans can verify if this release is compatible with CB 1.0 RC2 and report back in the following discussion thread:

---