Drupal core security release window on Wednesday, September 21, 2016