+ * In mercurial backend, untaint ipaddr when using it as the user for the
+ commit. Thanks, Alexander Wirt. Closes: #420428
+ * Fix aggregator to not warn when a feed contains no body content at all.
+ * Work around bug #420636 by, if XML::Parser crashes, running the feed
+ content though Encode::decode_utf8.
+
+ [ Josh Triplett ]
+ * Change basewiki CSS to not put a border around images used as links.