UPDATE: Remzi looked into the PDF vunlerability fix and it turns out it is in fact not included in BES 5.0.2 MR3. RIM states pretty clearly on the MR3 download that:
Note: After installing Service Pack 2 Maintenance Release 3, you must install the Service Pack 2 Interim Security Software Update for January 11th 2011.
While most BES admins are waiting for BES 5.0.3 to launch RIM has shipped a maintenance release v3 for BES 5.0.2. This release is available for Microsoft Exchange and Lotus Domino installations but only for BES Premium users. Companies using BES Express will have to wait for the update just like RIM did when they had BlackBerry Professional Server. The last update for Exchange and Domino was in November so its nice to see RIM doing these quarterly.
According to Al over at @CIO (via @Banthon) this MR3 contains bug fixes for issues with the BES BlackBerry Administration Service, BlackBerry Messaging Agent and BlackBerry Monitoring Service along with other issues. It also fixes the BES PDF Distiller vulnerability that we told you about before.
You can pick up both updates at: