- Patch #218539 by keith.smith: mentioned the security team and the security bug report process in the INSTALL.txt

#79018 by pwolanin, catch, Morbus Iff: document how can one hide CHANGELOG.txt, etc. to improve security a slight bit

#204411 by catch: elevate MySQL requirements to 4.1.1 (the first production MySQL 4.1.x was 4.1.5 anyway)

#194369 by lots of contributors: move default files directory to sites/default/files which can be created automatically on install, so no need to bug the user about it, making the install process easier

#196535 by sun, chx, dww: check whether Drupal can issue HTTP requests at all, so we know that this is the cause of problems, not the remote host not responding.

#197730 by keith.smith: standardize on a much more user friendly cron reference in help texts, explain its importance with more examples in INSTALL.txt

#175876 by hazexp, webernet, keith.smith: unify module/theme/translation download links and include more pointers to these locations

#191310 by JirkaRybka, keith.smith: ship with a files directory by default and improve installation error messages checking for all requirements on the same screen, instead of putting the user through individual error screens

#181088 by fajerstarter, catch and JirkaRybka: rename 'access control' to 'permissions' for usability reasons

- Patch #144634 by chx: fixed critical bug that prevented language negotiation to work after/when drupal_goto() is called.