Security update

• Issue #2390715 by m.abdulqader: Using save_user on user login cause problem with other modules

Also fixes issue which caused Remember Me - Critical - Unsupported - SA-CONTRIB-2017-025

This is a consolidated security update to address several issues that have been fixed in the 6-months since the last OpenPublic release. It also includes the fix to the recently unsupported References module. Sites are strongly encouraged to upgrade. If sites have been highly customized, they should attempt to update the modules manually.

Security Updates includes

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcements:

• Drupal Core - Critical - Access bypass - SA-CORE-2017-002

No other fixes are included.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcements:

• Drupal Core - Critical - Access Bypass - SA-CORE-2017-002

No other fixes are included.

Fixes shib_auth Moderately Critical - Multiple vulnerabilities - SA-CONTRIB-2017-043

Fixes References - Critical - Unsupported - SA-CONTRIB-2017-38