Security update

Addresses Services - Moderately critical - Access bypass - SA-CONTRIB-2020-022.

Further restrict anonymous user access to anonymous orders.

Drupal Commerce - Moderately critical - Access bypass - SA-CONTRIB-2020-020

Security release. All users MUST upgrade to this release.

See Password Reset Landing Page (PRLP) - Highly critical - Access bypass - SA-CONTRIB-2020-021

Maintenance and security release of the Drupal 7 series.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security advisories:

Maintenance and security release of the Drupal 8 series.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement:

• Drupal core - Moderately critical - Third-party libraries - SA-CORE-2020-002

No other fixes are included.