- Patch #755030 by jhedstrom, sivaji, kkaefer: #field_prefix()/suffix is displayed before the label. With tests.

- Patch #765860 by effulgentsia, dww, dereine, mikey_p, sun: make drupal_alter() support multiple alter hooks executed by module weight.

#520736 by grendzy, brianV, JoshuaRogers, kjy07, Damien Tournoud, greggles: Fixed SA-CORE-2009-007 forum module XSS.

#211182 follow-up by clemens.tolboom, David_Rothstein, tstoeckler: Re-work update depencency check to deal with array_merge_recursive() edge case (with tests).

#654726 by bdurbin, sun, plach, et al: Fixed Installing Drupal 7 in non-English language doesn't pick up st() installation lists.

- Patch #737632 by Georg, casey, aspilicious: menu children take top of left region or not at all in IE.

- Patch #683988 by catch, dww, aspilicious: failure to clear the system_list() entry from {cache_bootstrap()} results in bogus results when you upgrade a module.

- Patch #617126 by pwolanin, Damien Tournoud, mkalkbrenner: work around PHP bugs in drupal_http_request().

- Patch #613272 by Kevin Hankens, Dave Reid, yoroy, rgristroph, pcarman: forums not usable out-of-the-box: disabled comments, no forums.

- Patch #537278 by jhodgdon, caelon, dtarc: search results show comment count for content types where comments are disabled.