- Patch #215858 by pwolanin, goba, catch et al: localized menu link data getting saved back to the database.

- Patch #216904 by pwolanin et al: if there are more than 21 menu items under a parent, the weights got screwy.

- Patch #139290 by Arancaytar, Rob Loach, GreenLED, matt et al: when a user has no blog posts, show a status message.

- Patch #209240 by saxofaan, mike stewart, gopherspidey: fixed installation problem with multi-site setups.

- Patch #184926 by Rob and brightloudnoise: improved usability of status message when site is offline.

- Patch #211979 by chx, theborg, pwolanin, et al: menu items show no matter where their parent is found.

- Patch #218054 by Arancaytar: _db_create_field_sql has precision and scale arguments in wrong order.

- Patch #218539 by keith.smith: mentioned the security team and the security bug report process in the INSTALL.txt

#215858 by pwolanin: localized menu options were saved into the database, avoid this by using different variable names / array keys

#216404 by Rob Loach: path_nodeapi() only worked for users with permissions, although node loading requires the path to be loaded

#157652 by beginner, Steven Merrill and killes: block_user() had a global user object and a user parameter colliding

#216890 by gpk with documentation from myself: blog API clients do not pass on the teaser_include flag, so only act on that flag, if we have it

#216022 reported by johnnysxip, patch by walkah: (SA-2008-016) OpenID - Incorrect claimed_id returned for OpenID 2.0 and other minor OpenID 2.0 compliance fixes