Update drupal core to fix XML security bug.
Merge pull request #6478 from openscholar/6477

Update drupal core to fix XML security bug.