SA-CORE-2016-003 by alexpott, Michael Dowling, mlhess, xjm, Pere Orga, dawehner, greggles, coltrane, pwolanin, larowlan

Issue #2699613 by alexpott, catch, Wim Leers, Berdir, dawehner, mpdonadio, borisson_, Fabianx: Set a shorter TTL for 404 responses in page_cache module

Issue #2536682 by eporama, r_sharma08, snehi, rakesh.gectcr, chegor, Prashant.c: default.settings.php database instructions need to be user friendly

Issue #2637058 by claudiu.cristea, priya.chat, jhodgdon, dawehner: Fix HTTP proxy docs in default.settings.php

Issue #2580569 by anavarre, Davinder.Snehi, Schnitzel, jhodgdon: Update documentation that mentions active CMI directory. active was removed

Issue #2527126 by Wim Leers, dawehner, effulgentsia, anavarre, janusman, Fabianx, alexpott, hass, catch, Berdir, znerol: Only send X-Drupal-Cache-Tags and -Contexts headers when developer explicitly enables them

Issue #313145 by ghoti, t0xicCode, znerol, pwolanin, thedavidmeister, seanr, neclimdul, Damien Tournoud: Support X-Forwarded-* HTTP headers alternates

Issue #2487588 by YesCT, Leksat, Schnitzel, alexpott, anavarre, xjm: Move CMI import/export directory "staging" to "sync", as it is confused with staging environments

Issue #2522008 by pwolanin, nlisgo, Wim Leers, jplopezy: Provide a setting to override base url when creating links to public files

Issue #2487592 by alexpott, JeroenT, Schnitzel, cilefen: CMI: don't ship with a default "active" directory that is empty in most Drupal installations

Issue #2455057 by michaellenahan, jhodgdon, jelo: Document (or set up?) fast 404 settings for private image files

Issue #2543332 by Wim Leers, effulgentsia, Fabianx, Crell, dawehner, borisson_: Auto-placeholdering for #lazy_builder without bubbling

Issue #2529514 by dawehner, Fabianx, Wim Leers: Replace system.filter::protocols with container parameters

Issue #2493033 by Berdir, Wim Leers, lauriii, Fabianx, effulgentsia, dawehner, catch, msonnabaum, Crell, webchick: Make 'user.permissions' a required cache context

Issue #2528292 by Fabianx, dawehner: Decouple Error testing from relying on a cached on disk-container that is created by a different Kernel

Issue #2507509 by catch, dawehner: Service changes should not result in fatal errors between patch or minor releases

Issue #1314214 by stefan.r, phayes, ergophobe, YesCT, damienwhaley, kbasarab, Tor Arne Thune, basic, pfrenssen, yannickoo, simolokid, fietserwin, bzrudi71: MySQL driver does not support full UTF-8 (emojis, asian symbols, mathematical symbols)

Issue #2384675 by sidharrell, cilefen, Mile23, damiankloip, dawehner, Wim Leers, alexpott, neclimdul: Deprecate conf_path()

Revert "Issue #1314214 by stefan.r, phayes, ergophobe, YesCT, damienwhaley, Tor Arne Thune, kbasarab, pfrenssen, basic, yannickoo, simolokid: MySQL driver does not support full UTF-8 (emojis, asian symbols, mathematical symbols)"

This reverts commit b105158a.

Issue #1314214 by stefan.r, phayes, ergophobe, YesCT, damienwhaley, Tor Arne Thune, kbasarab, pfrenssen, basic, yannickoo, simolokid: MySQL driver does not support full UTF-8 (emojis, asian symbols, mathematical symbols)

Issue #2491155 by mikeburrelljr, Mac_Weber, opdavies: Update drupal.org and kernel.org URLs in core modules (Follow-up to 2489912)

Issue #2451363 by alexpott, Berdir, pjcdawkins: Ensure install_profile is exists in settings.php after installation

Issue #2453311 by David_Rothstein, TravisCarden, Dom., rpayanm: Issue #2417983 follow-up: a few more "the the"s

Issue #2453059 by Wim Leers: Set default render cache contexts: 'theme' + 'languages:' . LanguageInterface::TYPE_INTERFACE

Issue #2419225 by mikeker: settings.local.php trusted_host_patterns are ignored due to incorrect location of the include statement

Issue #2381763 by chx, webflo: Adjust the order of container yamls to override settings per environment

Revert "Issue #1916790 by plach, YesCT, penyaskito, Gábor Hojtsy, das-peter, herom, larowlan: Convert translation metadata into regular entity fields"

This reverts commit 920382d4.

Issue #1916790 by plach, YesCT, penyaskito, Gábor Hojtsy, das-peter, herom, larowlan: Convert translation metadata into regular entity fields

Issue #2221699 by mpdonadio, mikey_p, alexpott, kim.pepper, arlinsandbulte: HTTP_HOST header cannot be trusted

Revert "Issue #2221699 by mpdonadio, mikey_p, kim.pepper, arlinsandbulte: HTTP_HOST header cannot be trusted"

This reverts commit 2c9eddf3.

Issue #2221699 by mpdonadio, mikey_p, kim.pepper, arlinsandbulte: HTTP_HOST header cannot be trusted

Issue #2392319 by alexpott, effulgentsia: Config objects (but not config entities) should by default be immutable

Issue #2347877 by znerol, Berdir: Move DrupalKernel::initializeCookieGlobals() into a SessionConfiguration service