SA-CORE-2017-002 by alexpott, xjm, larowlan, Wim Leers, samuel.mortenson, Berdir, dawehner, tstoeckler, catch

Issue #2818011 by shashikant_chauhan, rakesh.gectcr, yashsharma01, dalin, akalata, Chi, catch, rosschive: Missing 'attributes' under 'options' in docs for Link::createFromRoute

(cherry picked from commit 2572749d)

(cherry picked from commit 87c1e2ee)

Issue #2843828 by alexpott, timmillwood: \Drupal\Core\DrupalKernel::initializeSettings() can result in moving the autoloader position

Issue #2843074 by tim.plunkett, alexpott, claudiu.cristea, denutkarsh, effulgentsia: Stale dependencies passed to onDependencyRemoval() result in data loss on uninstallation

Issue #2801097 by dawehner, Berdir: Converting feed to absolute URLs fails on invalid XML, results in empty output

(cherry picked from commit 8f2befb3)

Issue #2839951 by chiranjeeb2410, badjava: API docs FormattableMarkup::placeholderFormat %variable example contain errors

(cherry picked from commit c250a53d)

Issue #2489606 by 20th, slashrsm: hook_file_download() docblock refers to a non-existing function file_download()

(cherry picked from commit c732e506)

Issue #2786443 by alexpott, Berdir, RKopacz, milos.kroulik, generalconsensus: \Drupal\field\FieldStorageConfigStorage::mapFromStorageRecords() can fail without a reasonable error

(cherry picked from commit bb55292a)

Issue #2721725 by Vinay15, snehi, zerbash, er.pushpinderrana, jhodgdon, xjm, Ashish.Dalvi, joachim, Kevin Davison, ckrina: Select form element has undocumented properties

(cherry picked from commit c6344b06)

Issue #2822296 by shashikant_chauhan, jp.stacey, xjm: Wrong fully qualified class name  \Drupal\Core\Routing\LinkGeneratorInterface::generate() in docs of Drupal::l()

(cherry picked from commit 38959d63)

Issue #2781927 by pguillard, kiamlaluno, Eda, kiwimind: Improve description of render array properties and examples

(cherry picked from commit aa036603)

Issue #2756401 by claudiu.cristea, pfrenssen, sandervd, gielfeldt, alexpott, amateescu, dawehner: EntityAutocomplete form element validation is too strict

(cherry picked from commit 729340a8)

Issue #2698909 by Berdir, andypost, jibran, tim.plunkett, lauriii, tstoeckler, dawehner: EntityViewBuilder uses non-existing #theme hooks

(cherry picked from commit 408f00c3)

(cherry picked from commit 9e0ae4b0)

Issue #2609252 by eiriksm, Ginovski, lokapujya, toncic, Arla, Berdir, chx: Boolean field with #access FALSE cause EntityStorageException

(cherry picked from commit 44227b16)

Issue #2826389 by alexpott, kmoll, Robin Monks, Berdir, tbonomelli: Draggable List Builder has no pager

(cherry picked from commit 3cabea22)

Issue #2502195 by vijaycs85, larowlan: \Drupal\Core\StringTranslation\Translator\CustomStrings should be serializable, but contain \Drupal\Core\Site\Settings which is not

(cherry picked from commit 1e2f37a3)

Issue #2828364 by dawehner: Default media stopped to render due to recursion protection being to protective

(cherry picked from commit 65a01a77)

Issue #2424791 by jibran, dpi, chx, Berdir: Entity query hardcodes entity_reference and entity specifier

(cherry picked from commit 87e10306)

(cherry picked from commit 759c27ce)

SA-CORE-2016-005 by larowlan, xjm, David_Rothstein, Dave Reid, Crell, cilefen, alexpott, mlhess, catch, pwolanin, YesCT, dawehner, quicksketch, Heine, znerol, charlotte.b, jnicola, ezraw

(cherry picked from commit 9a3f5aaf)

Issue #1926000 by alansaviolobo, longwave, Emin Sulaiman, jungle: Language name Uyghur in Cyrillic alphabet

(cherry picked from commit 7313770a)

Issue #2823809 by er.pushpinderrana, joachim: incorrect property docs for EntityDisplayBase::displayContext

(cherry picked from commit a61efd82)

catch authored Nov 03, 2016 and Alex Pott committed Nov 03, 2016

(cherry picked from commit 329c020e)

Issue #2585899 by willzyx, mr.baileys, esod, dawehner: HtmlResponseAttachmentsProcessor::processHtmlHeadLink produces invalid HTTP Link header

(cherry picked from commit e24749ac147e4523a45c849d315e57af68853f62)

(cherry picked from commit 3408c306)