Geronimo 2.2 was released in late December.
Work on the trunk version has continued to convert the server to run within the Karaf OSGi environment.
The Jetty and Apache Tomcat versions have been upgraded in trunk to support the newer servlet specs that are part of Java EE6.
I know there has been some work toward getting Daytrader 2.2 ready for release - but I do not know the status.
Voting began on the first release candidate of GEP 2.2 in early January (this should be updated before the report is sent to the board with a result).
ApacheCon US held in November '09 included a half day dedicated to Geronimo. Presentations included:
Geronimo now has a blog - so far there are no posts.
There have been no new security flaws found in Geronimo since the last board report.