A fix for an administrator compromise, a fix for a bug in which PHP versions prior to 4.0.1 would truncate long stories, and some other bugfixes and new features.
Changes include timezone settings for users, topic icons can be of different sizes and file formats, better password generator, better theming, and docs have been improved with regards to security.