Issue #278425 by andypost, droplet, OnkelTem, chx, c960657, drewish, kotnik, realityloop: Change notice for: Using basename() is not locale safe.

Issue #1205138 by pwolanin, Dave Reid: Do not blow away non-MD5 password hashes in user_update_7000().

Issue #1123092 by michaellenahan: Fixed user-profile.tpl.php doc has confusing/misleading first paragraph.

- Patch #999040 by Niklas Fiekas: corrected alternative control structure syntax in theme templates.

Issue #1234834 by catch: Fixed user_update_7006() causes fatal errors when trying to fill 'module' column of permissions table on disabled modules.

Issue #717834 by David_Rothstein, clemens.tolboom, catch: Fixed The dependencies declared in core's hook_update_dependencies() implementations aren't actually correct.

Issue #1203766 by sun, lyricnz: Fixed With large number of permissions /admin/people/permissions becomes unusable.

Issue #1192178 by pillarsdotnet: Changed The user_module_invoke() function lacks documentation of parameters.

Issue #1014262 by Eric_A, asimmonds: Fixed user_update_7011() completely broken (User email template tokens not upgraded).

Issue #1164120 by pillarsdotnet: Fixed Add reference to _user_mail_text() in the doxygen for user_mail_tokens() function.

- Patch #876282 by tim.plunkett, amateescu: small layout glitch on 'Password match' line during installation.

- Patch #61856 by bfroehle, jredding, andypost, blakehall, Pancho: in user.module, trim() user-submitted email address before validation.

Issue #817482 by Stevel, bfroehle: user_save() issues a warning when saving without changing mail attribute.

- Patch #1127312 by niklas: undefined variable items in theme_user_list() when displaying empty user/new block.

- Patch #1031686 by rschwab: User_load() documentation should reference drupal_save_session(), not session_save_session().

#690980 by Dave Reid, grendzy, cwgordon7: Security hardening: Ensure password fields are empty on display.