SA-CORE-2017-002 by alexpott, xjm, larowlan, Wim Leers, samuel.mortenson, Berdir, dawehner, tstoeckler, catch

Issue #2818011 by shashikant_chauhan, rakesh.gectcr, yashsharma01, dalin, akalata, Chi, catch, rosschive: Missing 'attributes' under 'options' in docs for Link::createFromRoute

(cherry picked from commit 2572749d)

(cherry picked from commit 87c1e2ee)

Issue #2843828 by alexpott, timmillwood: \Drupal\Core\DrupalKernel::initializeSettings() can result in moving the autoloader position

Issue #2843074 by tim.plunkett, alexpott, claudiu.cristea, denutkarsh, effulgentsia: Stale dependencies passed to onDependencyRemoval() result in data loss on uninstallation

Issue #2801097 by dawehner, Berdir: Converting feed to absolute URLs fails on invalid XML, results in empty output

(cherry picked from commit 8f2befb3)

Issue #2839951 by chiranjeeb2410, badjava: API docs FormattableMarkup::placeholderFormat %variable example contain errors

(cherry picked from commit c250a53d)

Issue #2489606 by 20th, slashrsm: hook_file_download() docblock refers to a non-existing function file_download()

(cherry picked from commit c732e506)

Issue #2786443 by alexpott, Berdir, RKopacz, milos.kroulik, generalconsensus: \Drupal\field\FieldStorageConfigStorage::mapFromStorageRecords() can fail without a reasonable error

(cherry picked from commit bb55292a)

Issue #2721725 by Vinay15, snehi, zerbash, er.pushpinderrana, jhodgdon, xjm, Ashish.Dalvi, joachim, Kevin Davison, ckrina: Select form element has undocumented properties

(cherry picked from commit c6344b06)

Issue #2781927 by pguillard, kiamlaluno, Eda, kiwimind: Improve description of render array properties and examples

(cherry picked from commit aa036603)

Issue #2756401 by claudiu.cristea, pfrenssen, sandervd, gielfeldt, alexpott, amateescu, dawehner: EntityAutocomplete form element validation is too strict

(cherry picked from commit 729340a8)

Issue #2698909 by Berdir, andypost, jibran, tim.plunkett, lauriii, tstoeckler, dawehner: EntityViewBuilder uses non-existing #theme hooks

(cherry picked from commit 408f00c3)

(cherry picked from commit 9e0ae4b0)

Issue #2609252 by eiriksm, Ginovski, lokapujya, toncic, Arla, Berdir, chx: Boolean field with #access FALSE cause EntityStorageException

(cherry picked from commit 44227b16)

Issue #2826389 by alexpott, kmoll, Robin Monks, Berdir, tbonomelli: Draggable List Builder has no pager

(cherry picked from commit 3cabea22)

Issue #2502195 by vijaycs85, larowlan: \Drupal\Core\StringTranslation\Translator\CustomStrings should be serializable, but contain \Drupal\Core\Site\Settings which is not

(cherry picked from commit 1e2f37a3)

Issue #2828364 by dawehner: Default media stopped to render due to recursion protection being to protective

(cherry picked from commit 65a01a77)

Issue #2424791 by jibran, dpi, chx, Berdir: Entity query hardcodes entity_reference and entity specifier

(cherry picked from commit 87e10306)

(cherry picked from commit 759c27ce)

SA-CORE-2016-005 by larowlan, xjm, David_Rothstein, Dave Reid, Crell, cilefen, alexpott, mlhess, catch, pwolanin, YesCT, dawehner, quicksketch, Heine, znerol, charlotte.b, jnicola, ezraw

(cherry picked from commit 9a3f5aaf)

Issue #1926000 by alansaviolobo, longwave, Emin Sulaiman, jungle: Language name Uyghur in Cyrillic alphabet

(cherry picked from commit 7313770a)

Issue #2823809 by er.pushpinderrana, joachim: incorrect property docs for EntityDisplayBase::displayContext

(cherry picked from commit a61efd82)

catch authored Nov 03, 2016 and Alex Pott committed Nov 03, 2016

(cherry picked from commit 329c020e)

Issue #2585899 by willzyx, mr.baileys, esod, dawehner: HtmlResponseAttachmentsProcessor::processHtmlHeadLink produces invalid HTTP Link header

(cherry picked from commit e24749ac147e4523a45c849d315e57af68853f62)

(cherry picked from commit 3408c306)

Issue #2802593 by arunkumark, er.pushpinderrana, karlosgliberal, joachim: incorrect param for EntityController::loadBundleDescriptions()

(cherry picked from commit 9bdda95a)

Issue #2207247 by larowlan, sasanikolic, olli, s_leu, Berdir, joelpittet, mrjmd, rpayanm, dawehner, Truptti, nod_, alexpott, Wim Leers: Dialog titles double escaped for views handlers and delete forms

(cherry picked from commit 8f3e25cd)

Issue #2818031 by phenaproxima, Berdir, alexpott: Trailing slashes can cause FileSystem::mkdir() to return a false negative

(cherry picked from commit 78d37706)

(cherry picked from commit 30f78fc0)

Issue #2803923 by gianani, shashikant_chauhan, joachim: Table render element docs don't explain how to do colspan

(cherry picked from commit af89f803)

Issue #2801409 by jp.stacey, dawehner, tstoeckler: Entity routing via YAML or via a routing provider is ambiguous in docs

(cherry picked from commit 96152bf9)

Issue #2819479 by shashikant_chauhan, joachim: Fully qualify the FieldItemListInterface class name in its docs so it links

(cherry picked from commit e0463d0e)

Issue #2791375 by shashikant_chauhan: Fix $tableInformation documentation in pgsql and mysql schema.php

(cherry picked from commit 178cbb92)

(cherry picked from commit f08a96ea)

Issue #2752463 by tstoeckler: EntityResolverManager::setParametersFromEntityInformation() sets parameter info for non-existing parameters

(cherry picked from commit 2f7924b3)

Issue #2811133 by cilefen, Wim Leers, neclimdul, dawehner: Confusing error response set by ContentTypeHeaderMatcher when forgetting the Content-Type request header

(cherry picked from commit 8bbdbedd)

Issue #2795395 by Yogesh Pawar, tresti88, marvin_B8, shashikant_chauhan, tstoeckler, dawehner: PathRootsSubscriber breaks if there are no routes

(cherry picked from commit 184a05e0)