possibilities.
Patch by Andreas Ho¶fle, r=bbaetz, a=myk

Fix for bug 226469: labels the votes column in the RDF buglist output as containing Integer values so they sort correctly in RDF-slurping clients.

bug 199502. Applied myk's suggestion in patch checked in. r=myk, a=myk.

flag. Simple namespace fix. r=myk, a=myk.

Bug 226249: buglist.cgi warning (use uninitialized value) line 97 for no ctype defined; r=kiko; a=justdave.

Bug 226119: The template admin/add-group.html.tmpl moved to admin/groups/create.html.tmpl to better match with admin template naming consensus discussed in reviewers@.
r=myk, a=justdave

Bug 214466: Cookie setting w/ 3xx redirect broken on IIS - make colchange use Refresh HTTP header (on IIS only). r=justdave,a=justdave

226061 - someone forgot to tell editgroups that regexps are applied at runtime, not on account creation.
r=joel,a=justdave

Bug 219358 - Make attachments with all supported MIME types viewable in the edit page. Patch by gerv; r=kiko, r,a=justdave.

Bug 225081 - Tests are failing due to checkin for bug 223913. Sorry about that - it worked on my machine, but not any machine without the excluded template. Doh. Patch by gerv; r,a=mozbot.

Bug 224913 - Need tests to check whether any templates uses the bareword "bug" or variations. Patch by gerv; r,a=justdave.

Bug 195530 - Make javascript version of buglists available, part 2. This is a security fix to prevent remote sites being able to see sensitive bug data. Patch by gerv; r=justdave, r=myk, a=justdave.

Bug 221160 - crash if illegal date specified in new charts date range. Patch by gerv; r=kiko, a=justdave.

Bug 186130 - collectstats.pl doesn't work if 'requirelogin' set. Patch by gerv; r=bbaetz, a=justdave.

Bug 222564 - The chart made when creating a new Product/Component is not public. Patch by gerv; r=kiko, a=justdave.

Bug 219475: The check for null db entries in process_bug.cgi is wrong; patch by Chuck Duvall <caduvall@glue.umd.edu>; r=bbaetz; a=justdave.

Bug 155119: reassigning bugs to a product with no components gives 'browser' error; patch by Chuck Duvall <caduvall@glue.umd.edu>; r=bbaetz; a=justdave.

[SECURITY] Bug 219044: A user with 'editkeywords' privileges (i.e. usually an administrator) can inject arbitrary SQL via the URL used to edit an existing keyword.
Patch by Joel Peshkin <bugreport@peshkin.net>
r= justdave, zach  a= justdave

[SECURITY] Bug 209742: Under some circumstances, a user can obtain component descriptions for a product to which he does not normally have access.
Patch by Ryan Cleary <tryanc@interdimensions.com>
r= joel, bbaetz   a= justdave

[SECURITY] Bug 209376: If you know the email address of someone who has voted on a secure bug, you can access the summary of that bug even if you do not have sufficient permissions to view the bug itself.
Patch by Gervase Markham <gerv@mozilla.org>
r= justdave, bbaetz  a= justdave

Bu 210735 - collectstats.pl broken. Removes "uninitialised value" warning. Patch by gerv; r=bbaetz, a=justdave.

Rebuilding documentation for the 2.17.5 release; the docbook system on landfill proved to be broken.

Bug 111522: Provide ability to specify MIME type of attachment when downloading - correction of url parameter name to avoid usage conflicts with other parts of Bugzilla
Patch by Alex Vincent <ajvincent@juno.com>
r= justdave, a= justdave

Bug 224397: Mismatch of user error: insufficient_privs vs insufficient_perms; patch by caduvall@glue.umd.edu (chaduv); r=justdave; a=justdave.