Security update

Coder - Highly Critical - Remote Code Execution - SA-CONTRIB-2016-039
Prevent unauthenticated remote code execution.

Changes since 5.x-2.0-rc3:

• Security fix by mr.j, dsnopek: fix for sessions not being regenerated when password is changed

Changes since 6.x-2.1:

• Security fix by mr.j, dsnopek: fix for sessions not being regenerated when password is changed

Maintenance and security release of the Drupal 8 series.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcements:

• Drupal Core - Moderately Critical - Multiple Vulnerabilities - SA-CORE-2016-002

No other fixes are included.

Maintenance and security release of the Drupal 7 series.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement:

• Drupal Core - Moderately Critical - Multiple Vulnerabilities - SA-CORE-2016-002

No other fixes are included.

Fixes Views - Less Critical - Access Bypass - SA-CONTRIB-2016-036

Changes since 7.x-3.13: