- install drupal modules/themes as root:daemon rather than www:www
(only the files/ directory needs to be writeable by 'www').
- don't install 'settings.php' world-readable since it contains the
DB password. Use 640, owner 'www' instead.
- bump all modules.
tested in production, including upgrade szenarios.
ok sthen@ and landry@, maintainer timeout.
removing a local patch that is now included in upstream.
Please note some users have reported vage 'issues' with this update,
see http://drupal.org/node/695952 - Make sure you clear your cache and
reset switch back navigation menu item to defaults after this update.
prodded by espie@