Drupal

Subscribe to Drupal feed
Updated: 1 week 3 days ago

drupal 8.5.12

Wed, 03/13/2019 - 17:10
Release notes

This is a patch release of Drupal 8 and is ready for use on production sites. Learn more about Drupal 8.

Versions of Drupal 8 prior to 8.5.x are end-of-life and do not receive security coverage. Sites on 8.5.x will receive security coverage until May 2019 (when 8.7.0 is released).

Important update information

This release resolves two critical issues affecting Drupal 8 site updates:

Additionally, this release resolves an administrator-only access bypass with the Layout Builder module. Previously, users who didn't have access to view individual entities were still granted access to configure the layout for that entity (if per-entity layout configuration was enabled) and therefore could view its content. This implicit access has been removed. Site owners should ensure that all content editor roles have access to view the content for which they are configuring the layout.

No other fixes are included as Drupal 8.5 is no longer actively supported.

Known issues Download Size md5 hash drupal-8.5.12.tar.gz 15.09 MB 91b4b708c231b098a52b15501ac3c4cf drupal-8.5.12.zip 24.32 MB 8333135d237d62a864d12f3e755f3de0 Last updated: 13 Mar 2019 at 21:13 UTCOfficial release from tag: 8.5.12Core compatibility: 8.xRelease type: Bug fixesShort description: Actively maintained with new features and backwards-compatible improvements every six months. Use this version for the best compatibility with future releases.Packaged Git sha1: 461cee5f4fb72ec1fa6f5dc037f68b36d18aba0c

drupal 8.6.11

Wed, 03/13/2019 - 17:08
Release notes

This is a patch release of Drupal 8 and is ready for use on production sites. Learn more about Drupal 8.

If you are upgrading to this release from 8.5.x, read the Drupal 8.6.0 release notes before upgrading to this release.

This release resolves two critical issues affecting Drupal 8 site updates:

Additionally, this release resolves an administrator-only access bypass with the Layout Builder module. Previously, users who didn't have access to view individual entities were still granted access to configure the layout for that entity (if per-entity layout configuration was enabled) and therefore could view its content. This implicit access has been removed. Site owners should ensure that all content editor roles have access to view the content for which they are configuring the layout.

Known issues All changes since 8.6.10 Download Size md5 hash drupal-8.6.11.tar.gz 16.34 MB 9c2b33438b29df0395ff751b78cd1655 drupal-8.6.11.zip 26.04 MB 73e4d5f88c0c88aaaa90a7a2274d1330 Last updated: 13 Mar 2019 at 21:13 UTCOfficial release from tag: 8.6.11Core compatibility: 8.xRelease type: Bug fixesShort description: Actively maintained with new features and backwards-compatible improvements every six months. Use this version for the best compatibility with future releases.Packaged Git sha1: 8cbc77808e486fa164e8a9992d2955fda18fc02e

drupal 8.8.x-dev

Thu, 03/07/2019 - 16:56
Release notes

Development release package for the 8.8.x release.

The 8.8.x branch is open for development and will now include the latest commits. Those interested in testing the development version of Drupal core should continue to work with the 8.7.x branch until the 8.7.0 release on May 1, 2019.

Download Size md5 hash drupal-8.8.x-dev.tar.gz 20.67 MB c56de44a0b7696b1d90ad0a432722bae drupal-8.8.x-dev.zip 31.82 MB 535aab750f2887245469ec367d83c6f2 Last updated: 14 Mar 2019 at 09:33 UTCLast packaged version: 8.8.x-devDevelopment release from branch: 8.8.xCore compatibility: 8.xRelease type: Bug fixesNew featuresShort description: Development release package for the 8.8.x release.Packaged Git sha1: be9af5bda65481a3e4225e109df94fe4d32e3b41

drupal 8.6.10

Wed, 02/20/2019 - 14:46
Release notes

Maintenance and security release of the Drupal 8 series.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the security announcement and notes below:

Sites on 8.5.x or earlier should update immediately to Drupal 8.5.11 instead, and plan to update to the latest 8.6.x release before May 2019 (when 8.7.0 is released and 8.5.x security coverage ends).

Important update information For site owners
  • In addition to the above fix, this release includes the fix for #3031740: Updating to 8.6.8 or 8.6.9 with Drush 8 causes data loss via update_fix_compatibility() to prevent Drush 8 issues for sites updating directly from an earlier security release.

  • update.php must be run after updating to ensure changes from the patch take effect.

  • No changes have been made to the .htaccess, web.config, robots.txt or default settings.php files in this release, so upgrading custom versions of those files is not necessary if your site is already on the previous release.

For module developers

Some contributed module tests may need to be updated if they extend core's test suite, due to a minor API change in a test base class.

Download Size md5 hash drupal-8.6.10.tar.gz 16.08 MB 5aee2dacfb525f146fc28b4535066d1c drupal-8.6.10.zip 25.76 MB b1c31e32d7c689597ae25f9371dfebbe Last updated: 20 Feb 2019 at 19:43 UTCOfficial release from tag: 8.6.10Core compatibility: 8.xRelease type: Security updateShort description: Actively maintained with new features and backwards-compatible improvements every six months. Use this version for the best compatibility with future releases.Packaged Git sha1: f4490205b801e91bc77d3b09dcba903e7b35a146

drupal 8.5.11

Wed, 02/20/2019 - 14:45
Release notes

Maintenance and security release of the Drupal 8 series.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the security announcement and notes below:

Versions of Drupal 8 prior to 8.5.x are end-of-life and do not receive security coverage. Sites on 8.5.x will receive security coverage until May 2019 (when 8.7.0 is released).

Important update information For site owners
  • update.php must be run after updating to ensure changes from the patch take effect.

  • No changes have been made to the .htaccess, web.config, robots.txt or default settings.php files in this release, so upgrading custom versions of those files is not necessary if your site is already on the previous release.

For module developers

Some contributed module tests may need to be updated if they extend core's test suite, due to a minor API change in a test base class.

Download Size md5 hash drupal-8.5.11.tar.gz 15.08 MB 356333785c71215d2e3ec0d4a4e018df drupal-8.5.11.zip 24.31 MB 1b5b38632a26cafb024dbbd12d50f350 Last updated: 20 Feb 2019 at 19:43 UTCOfficial release from tag: 8.5.11Core compatibility: 8.xRelease type: Security updateShort description: Actively maintained with new features and backwards-compatible improvements every six months. Use this version for the best compatibility with future releases.Packaged Git sha1: 41adc71929319a82ab6b894b410be74d6ad40ad5

drupal 8.6.9

Fri, 02/08/2019 - 07:24
Release notes

This is a patch release of Drupal 8 and is ready for use on production sites. Learn more about Drupal 8.

If you are upgrading to this release from 8.5.x, read the Drupal 8.6.0 release notes before upgrading to 8.6.9.

Known issues Changes since 8.6.8
  • #2215857 followup by gaydamaka, timmillwood, alexpott, lauriii: Regression on Internet Explorer 11
  • #3031128 by alexpott, TrevorBradley, indigoxela, catch, cilefen, larowlan, jibran: Update from 8.6.7 to 8.6.8 warnings - Drupal\Core\Extension\Extension has no unserializer
  • Revert "Issue #2924201 by tim.plunkett, tedbow, larowlan, xjm, jibran, Kristen Pol: Resolve random failure in LayoutBuilderTest so that it can be added to HEAD"
  • #2924201 by tim.plunkett, tedbow, larowlan, xjm, jibran, Kristen Pol: Resolve random failure in LayoutBuilderTest so that it can be added to HEAD
Download Size md5 hash drupal-8.6.9.tar.gz 16.08 MB 9455aeacf1faf24b3a12890a50198a5e drupal-8.6.9.zip 25.72 MB 85f1d8edd2b0cca75d69ccbf6896a948 Last updated: 8 Feb 2019 at 12:23 UTCOfficial release from tag: 8.6.9Core compatibility: 8.xRelease type: Bug fixesShort description: Actively maintained with new features and backwards-compatible improvements every six months. Use this version for the best compatibility with future releases.Packaged Git sha1: 74e8c2055b33cb8794a7b53dc79b5549ce824bb3

drupal 7.64

Wed, 02/06/2019 - 14:22
Release notes

Maintenance release of the Drupal 7 series. Includes bug fixes and small API/feature improvements only (no major, non-backwards-compatible new functionality).

No security fixes are included in this release.

No changes have been made to the .htaccess, web.config, robots.txt in this release, so upgrading custom versions of those files is not necessary.

There is one change to the sites/default/default.settings.php file in this release:

Major changes since 7.63:
  • Issue #3018637 by emilymoi, das-peter: [regression] Unset the 'host' header in drupal_http_request() during redirect
  • Compatibility fixes for PHP 7.3 (#3020771)
  • Compatibility fixes for MySQL 5.7 (#2981248)
All changes since 7.63: Download Size md5 hash drupal-7.64.tar.gz 3.15 MB bbb3c4d8c2cba35c48380d34f122f750 drupal-7.64.zip 3.65 MB 51c55ddbbcc52ce66816c3a10c97e12b Last updated: 6 Feb 2019 at 19:23 UTCOfficial release from tag: 7.64Core compatibility: 7.xRelease type: Bug fixesNew featuresShort description: If you need stability and features from the widest variety of contributed modules and themes, this is the version for you.Packaged Git sha1: 868f2069242a0983186323c573d498e53dc95af8

drupal 8.6.8

Wed, 02/06/2019 - 10:22
Release notes

This is a patch release of Drupal 8 and is ready for use on production sites. Learn more about Drupal 8.

If you are upgrading to this release from 8.5.x, read the Drupal 8.6.0 release notes before upgrading to 8.6.8.

Known issues Changes since 8.6.7
  • #2975539 by mondrake, alexpott, marcoscano, desierto: Changing machine name of image style leads to WSOD when loading widgets that used the old name
  • #2859315 by quietone, heddn, jhodgdon: SQL error from profile_fields when migrating d6 (or d7) to d8 without Profile module
  • #2443165 by davidwbarratt, amateescu, HOG, kostyashupenko, yched, Berdir, andypost, alexpott, tstoeckler, xjm: Drupal\Core\Entity\EntityInterface\ContentEntityStorageBase::doCreate() assumes that the bundle is a string
  • #2849074 by decafdennis, alexpott, zuuperman, AdamPS, sagesolutions, tucho, xjm: SiteConfigureForm overrides value from install profile
  • #3007716 by Sam152, kevin.dutra, jhedstrom, larowlan: Security update introduces breaking changes to content moderation
  • #2215857 by michielnugter, Lendude, gmercer, tim.plunkett, cferthorney, marabak, olli, ericmulder1980, TwoD, sanduhrs, stella, dww, nod_: Behaviors get attached to removed forms
  • #3017812 by ibustos, joachim: Language selector is immune to hook_entity_field_access in entity forms
  • #2900883 by larskhansen, GaëlG, kalyansamanta, Chi, tim.plunkett, Gábor Hojtsy, joachim: Wrong documentation of Drupal\Component\Plugin\Derivative\DeriverInterface::getDerivativeDefinitions()
  • #3027595 by amateescu, pmelab: Incorrect blacklist condition in WorkspaceManager
  • #2725259 by sardara, andrewmacpherson, claudiu.cristea, tedbow, alwaysworking, droplet, techmsi, kwoxer, xjm, alexpott, lauriii, catch, cilefen, Cottser: [regression] Table Drag handles no longer respond to up/down arrow keys
  • Revert "Issue #2725259 by sardara, andrewmacpherson, claudiu.cristea, tedbow, alwaysworking, droplet, techmsi, kwoxer, xjm, alexpott, @catch, @cilefen, @Cottser, @lauriii: [regression] Table Drag handles no longer respond to up/down arrow keys"
  • #2725259 by sardara, andrewmacpherson, claudiu.cristea, tedbow, alwaysworking, droplet, techmsi, kwoxer, xjm, alexpott, @catch, @cilefen, @Cottser, @lauriii: [regression] Table Drag handles no longer respond to up/down arrow keys
  • #2937073 by tim.plunkett, Saviktor, tedbow: Improve robustness of FieldBlockTest
  • #2973713 by quietone, Adita, etecjdo, apmsooner, mikeryan, gnuschichten, tstoeckler: cache_key source plugin configuration not documented
  • #2949555 by quietone, ankitjain28may: Correct the documentation on method UserMigrationClassTest
  • #3025685 by quietone: Add error msg to assertions in MigrateSourceTestBase
  • #3026840 by izus: Fix plural typo in workspaces field
  • #3024452 by kfritsche, hchonov, alexpott: DatabaseStorageExpirable:setWithExpireIfNotExists is not respecting expired
  • #2999908 by penyaskito: View more link in recipe cards is not fully translated
  • #3028819 by alwaysworking: Update username
  • #2916021 by d.olaresko, wengerk, Chi, xjm, dawehner, idebr: Update "Running tests" section in core.api.php
  • #2953995 by kjay, starshaped, rachel_norfolk, Vidushi Mehta, cferthorney, HAL 9000, Eli-T, markconroy, steveparks: Update the Umami Vegan Chocolate Brownie recipe
  • #3028608 by danharper, Eli-T, markconroy, Not Real: Umami - favicon
  • #2940027 by jmsosso: Add change record to @deprecated for AccountInterface
  • #2995150 by msankhala, tim.plunkett: Command examples in core/tests/README.md are confusing and not executable
  • #3024184 by seanB, andrewmacpherson, Kristen Pol: Make the tabbing order match the visual reading order in MediaLibraryWidget
  • #2668416 by Krzysztof Domański, wheatpenny, Lendude, alexpott: Wrong assert in NodeTitleTest
  • #2981870 by Lendude, alexpott: Duplicate BrokenSetUpTest for BrowserTestBase
  • #2809513 by Lendude, brentgees: Convert AJAX part of \Drupal\responsive_image\Tests\ResponsiveImageFieldUiTest to JavascriptTestBase and the rest to BrowserTestBase
  • #3027574 by tuutti: SqlContentEntityStorage no longer update entities with certain (id) fields
  • #3026043 by Berdir: ConfigEntityBase::__sleep() serializes plugin instances if they were not previously initialized
  • #3021395 by quietone, alexpott: MigrateDrupalTestBase::migrateContent(['translations') does not migrate translations
  • Revert "Issue #3003238 by Sam152, amateescu, Berdir: EntityStorageException: Default revision can not be deleted in content_moderation_entity_revision_delete()"
  • #2987418 by quietone, Kristen Pol: Rename MigrateUpgrade tests
  • #3003238 by Sam152, amateescu, Berdir: EntityStorageException: Default revision can not be deleted in content_moderation_entity_revision_delete()
  • #3026470 by alexpott, jrockowitz, Joseph Zhao: ArchiveTar is throwing fatal error
  • Merged 8.6.7.
  • Merged 8.6.6.
  • #3015992 by Krzysztof Domański, alexpott, larowlan: Not affecting spacing in PhpTransliterationTest
  • #2998769 by kiamlaluno, quietone, kkalaskar: @see directive used in the wrong place outputs the wrong HTML markup
  • #3000677 by catch, Shane Birley, featherbelly, alexpott, larowlan: Fatal error after upgrade to 8.6x [due to regression in extension system]
  • #2955457 by pfrenssen, Chewie, unrealauk, alexpott, Pol: ConfigFactory static cache gets polluted with data from config overrides
  • #3020142 by mglaman, tim.plunkett: Test module no_transitions_css has invalid hook_page_attachments
  • #3007973 by tim.plunkett, lukasss, xopoc, bnjmnm, stompersly: Layout builder prevents the rendering of extra fields (like Links) on pages not using Layout Builder
  • #3024259 by Pol, alexpott: [PHP 7.3] Fix EnvironmentTest::providerTestCheckMemoryLimit() notice
  • #3023747 by mikelutz, heddn: D6 profile migrations assume stubs, which fail
  • #2978922 by brathbone, philipnorton42, msankhala, hardikpandya, alexpott, siliconmeadow: Improve batch_process() documentation
  • #2845975 by quietone, Jo Fitzgerald, aleevas, maxocub, Gábor Hojtsy: Migrate Drupal 6 user profile field value option translations
  • #2701829 by alexpott, andypost, Soul88, Graber, Eduardo Morales, dawehner, pingwin4eg, catch, Berdir, jibran, httang12: Extension objects should not implement \Serializable
  • #2693727 by mikelutz, sanduhrs, CalebD, ajlib, Lendude, tstoeckler, catch: Limiting options for exposed Language filters causes errors and doesn't work for special languages
Download Size md5 hash drupal-8.6.8.tar.gz 15.84 MB 5c8f5107e3831f6e6f55f17486dee5d2 drupal-8.6.8.zip 25.49 MB 3c6b6a4d5d61341409081cbf77d55e76 Last updated: 6 Feb 2019 at 15:23 UTCOfficial release from tag: 8.6.8Core compatibility: 8.xRelease type: Bug fixesShort description: This is a patch release of Drupal 8 and is ready for use on production sites.Packaged Git sha1: c82ac84ab5d695a3c0447bad8298880e61f3eac3

drupal 8.6.7

Wed, 01/16/2019 - 18:42
Release notes

This is a hotfix release for a regression affecting some Drush installations that was introduced by the fix for SA-CORE-2019-002. No other fixes are included.

Sites on 8.5.x or earlier should update immediately to Drupal 8.5.10 instead, and plan to update to the latest 8.6.x release before May 2019.

If you continue to experience issues with Drush following this update, try the following:

  1. Run update.php to ensure database updates are completed and to clear the site cache safely without Drush.
  2. Check the site status report to confirm that 8.6.7 was successfully installed.
  3. Test Drush again. If issues persist:
    • Rename your drush CLI file back to drush.phar.
    • Create a symlink named drush pointing to drush.phar

Alternately, try installing Drush with Composer instead of from a phar.

Known issues Download Size md5 hash drupal-8.6.7.tar.gz 15.72 MB cd3d0c9ad1d9e976eb589a963e427388 drupal-8.6.7.zip 25.35 MB 1afd2d955bbbf4ea7cd4d0023c01f616 Last updated: 16 Jan 2019 at 23:43 UTCOfficial release from tag: 8.6.7Core compatibility: 8.xRelease type: Bug fixesShort description: This is a patch release of Drupal 8 and is ready for use on production sites.Packaged Git sha1: 021b0fd5d6ac752c472655b16c68286acba8afd0

drupal 8.5.10

Wed, 01/16/2019 - 18:40
Release notes

This is a hotfix release for a regression affecting some Drush installations that was introduced by the fix for SA-CORE-2019-002. No other fixes are included.

Versions of Drupal 8 prior to 8.5.x are end-of-life and do not receive security coverage. Sites on 8.5.x will receive security coverage until May 2019.

If you continue to experience issues with Drush following this update, try the following:

  1. Run update.php to ensure database updates are completed and to clear the site cache safely without Drush.
  2. Check the site status report to confirm that 8.6.7 was successfully installed.
  3. Test Drush again. If issues persist:
    • Rename your drush CLI file back to drush.phar.
    • Create a symlink named drush pointing to drush.phar

Alternately, try installing Drush with Composer instead of from a phar.

Known issues Download Size md5 hash drupal-8.5.10.tar.gz 15.09 MB 39e2b451d6bc6f58c4eeb09ad26ad965 drupal-8.5.10.zip 24.31 MB daccd346e36000fb9949693348712acc Last updated: 16 Jan 2019 at 23:43 UTCOfficial release from tag: 8.5.10Core compatibility: 8.xRelease type: Bug fixesShort description: This is a patch release of Drupal 8 and is ready for use on production sites.Packaged Git sha1: 0da0def27a6db8a5ff0019c08798452f882a7858

drupal 7.63

Wed, 01/16/2019 - 18:37
Release notes

This is a hotfix release for a regression affecting some Drush installations that was introduced by the fix for SA-CORE-2019-002. No other fixes are included.

If you continue to experience issues with Drush following this update, try the following:

  1. Run update.php to ensure database updates are completed and to clear the site cache safely without Drush.
  2. Check the site status report to confirm that 7.63 was successfully installed.
  3. Test Drush again. If issues persist:
    • Rename your drush CLI file back to drush.phar.
    • Create a symlink named drush pointing to drush.phar

Alternately, try installing Drush with Composer instead of from a phar.

Important update information
  • The .phar file extension has been added to Drupal's dangerous extensions list, which means that any such file uploaded to a Drupal file field will automatically be converted to a text file (with the .txt extension) to prevent it from being executed. This is similar to how Drupal handles file uploads with a .php extension.

  • No changes have been made to the .htaccess, web.config, robots.txt or default settings.php files in this release, so upgrading custom versions of those files is not necessary.

  • The replacement stream wrapper needed to resolve Drupal Core - Remote code execution - SA-CORE-2018-002 is not compatible with PHP versions lower than 5.3.3. For sites using lower PHP versions, the built-in phar stream wrapper has been disabled rather than replaced. Drupal 7 sites using PHP 5.2 (or PHP 5.3.0-5.3.2) that require phar support will need to re-enable the stream wrapper for it; however, note that re-enabling the stream wrapper will re-enable the insecure PHP behavior on those PHP versions.

    It is very uncommon to both be running a PHP version lower than 5.3.3 and to need phar support. If you're in that situation, consider upgrading your PHP version instead of restoring insecure phar support.

Known issues Download Size md5 hash drupal-7.63.tar.gz 3.15 MB 926f05ef0acadfa4ea75fd1d94c8489c drupal-7.63.zip 3.65 MB 466faca7b39a760bebdb7be99d6a658c Last updated: 16 Jan 2019 at 23:33 UTCOfficial release from tag: 7.63Core compatibility: 7.xRelease type: Bug fixesShort description: If you need stability and features from the widest variety of contributed modules and themes, this is the version for you.`Packaged Git sha1: e1d746d812b077a5a8fad101904d598bfcf09675

drupal 8.6.6

Wed, 01/16/2019 - 13:29
Release notes

Maintenance and security release of the Drupal 8 series.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement:

No other fixes are included.

Sites on 8.5.x or earlier should update immediately to Drupal 8.5.8 instead, and plan to update to the latest 8.6.x release before May 2019.

Important update information
  • The .phar file extension has been added to Drupal's dangerous extensions list, which means that any such file uploaded to a Drupal file field will automatically be converted to a text file (with the .txt extension) to prevent it from being executed. This is similar to how Drupal handles file uploads with a .php extension.

  • No changes have been made to the .htaccess, web.config, robots.txt or default settings.php files in this release, so upgrading custom versions of those files is not necessary.

Known issues

Users are reporting seeing a fatal error when updating their sites with Drush. Site owners may be able to run drush updb and either drush cc all or drush cr depending on the version to complete the update. Check the status report afterward to confirm that Drupal has been updated. See #3026386: Drush fatal error after upgrading to 8.6.6, 8.5.9, or 7.62: PHP Fatal error: Uncaught TYPO3\PharStreamWrapper\Exception for details.

Download Size md5 hash drupal-8.6.6.tar.gz 15.72 MB bdabe7ae149890555e176ba492b7b250 drupal-8.6.6.zip 25.35 MB ab995873f865d7c7a597f2b4e3b9018b Last updated: 16 Jan 2019 at 18:32 UTCOfficial release from tag: 8.6.6Core compatibility: 8.xRelease type: Security updatePackaged Git sha1: c9f66f9f581cd0734fe74c1cbb1addce3260cf5d

drupal 8.5.9

Wed, 01/16/2019 - 13:29
Release notes

Maintenance and security release of the Drupal 8 series.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement:

No other fixes are included.

Versions of Drupal 8 prior to 8.5.x are end-of-life and do not receive security coverage. Sites on 8.5.x will receive security coverage until May 2019.

Important update information
  • The .phar file extension has been added to Drupal's dangerous extensions list, which means that any such file uploaded to a Drupal file field will automatically be converted to a text file (with the .txt extension) to prevent it from being executed. This is similar to how Drupal handles file uploads with a .php extension.

  • No changes have been made to the .htaccess, web.config, robots.txt or default settings.php files in this release, so upgrading custom versions of those files is not necessary.

Known issues

Users are reporting seeing a fatal error when updating their sites with Drush. Site owners may be able to run drush updb and either drush cc all or drush cr depending on the version to complete the update. Check the status report afterward to confirm that Drupal has been updated. See #3026386: Upgrading to 8.6.6, 8.5.8, or 7.62 using drush 8 causes PHP Fatal error: Uncaught TYPO3\PharStreamWrapper\Exception for details.

Download Size md5 hash drupal-8.5.9.tar.gz 15.08 MB ab7feda97f750c8997154c04ee7b1c5b drupal-8.5.9.zip 24.27 MB 1df42622c98481fd23d15db3cac97b3f Last updated: 16 Jan 2019 at 18:32 UTCOfficial release from tag: 8.5.9Core compatibility: 8.xRelease type: InsecureSecurity updateShort description: The next patch release of Drupal 8 is ready for new development and use on production sites.Packaged Git sha1: 3c5a5276ab17f2e117ecaae6ecda16f918e5fb7d

drupal 7.62

Wed, 01/16/2019 - 13:29
Release notes

Maintenance and security release of the Drupal 8 series.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement:

No other fixes are included.

Important update information
  • The .phar file extension has been added to Drupal's dangerous extensions list, which means that any such file uploaded to a Drupal file field will automatically be converted to a text file (with the .txt extension) to prevent it from being executed. This is similar to how Drupal handles file uploads with a .php extension.

  • No changes have been made to the .htaccess, web.config, robots.txt or default settings.php files in this release, so upgrading custom versions of those files is not necessary.

  • The replacement stream wrapper needed to resolve Drupal Core - Remote code execution - SA-CORE-2018-002 is not compatible with PHP versions lower than 5.3.3. For sites using lower PHP versions, the built-in phar stream wrapper has been disabled rather than replaced. Drupal 7 sites using PHP 5.2 (or PHP 5.3.0-5.3.2) that require phar support will need to re-enable the stream wrapper for it; however, note that re-enabling the stream wrapper will re-enable the insecure PHP behavior on those PHP versions.

    It is very uncommon to both be running a PHP version lower than 5.3.3 and to need phar support. If you're in that situation, consider upgrading your PHP version instead of restoring insecure phar support.

Known issues

Users are reporting seeing a fatal error when updating their sites with Drush. Site owners may be able to run drush updb and either drush cc all or drush cr depending on the version to complete the update. Check the status report afterward to confirm that Drupal has been updated. See #3026386: Drush fatal error after upgrading to 8.6.6, 8.5.9, or 7.62: PHP Fatal error: Uncaught TYPO3\PharStreamWrapper\Exception for details.

Download Size md5 hash drupal-7.62.tar.gz 3.15 MB ba6c2d9f1757da31e804b92cab09dc17 drupal-7.62.zip 3.65 MB 688bc8b13f235d8e6e60800bd11038be Last updated: 16 Jan 2019 at 18:32 UTCOfficial release from tag: 7.62Core compatibility: 7.xRelease type: Security updateShort description: If you need stability and features from the widest variety of contributed modules and themes, this is the version for you.Packaged Git sha1: 492fd4da5c9e8c0695f779f1967e7f90960d343b

drupal 8.6.5

Wed, 01/02/2019 - 17:16
Release notes

This is a patch release of Drupal 8 and is ready for use on production sites. Learn more about Drupal 8.

If you are upgrading to this release from 8.5.x, read the Drupal 8.6.0 release notes before upgrading to 8.6.5.

Changes since 8.6.4 Download Size md5 hash drupal-8.6.5.tar.gz 15.7 MB 3db4ab3674ae38d1b15d5faac3b10ff0 drupal-8.6.5.zip 25.33 MB cb829fe1939cf9844a02d66f1ff097ff Last updated: 2 Jan 2019 at 22:18 UTCOfficial release from tag: 8.6.5Core compatibility: 8.xRelease type: Bug fixesShort description: This is a patch release of Drupal 8 and is ready for use on production sites.Packaged Git sha1: 1a8e6de9de0b12cc13d4020ea290327b86a8ba12

drupal 8.6.4

Wed, 12/05/2018 - 07:05
Release notes

This is a patch release of Drupal 8 and is ready for use on production sites. Learn more about Drupal 8.

If you are upgrading to this release from 8.5.x, read the Drupal 8.6.0 release notes before upgrading to 8.6.4.

Changes since 8.6.3:
  • #2956368 by marcoscano, Nitebreed, ph53: MediaThumbnailFormatter produces unhelpful text alternative and title attributes for media thumbnails
  • #3000240 by govind.maloo, philipnorton42, msankhala, izus, scott_euser, joachim, alexpott, catch: hook_user_format_name_alter() should document that it's invoked for both user entities and session objects
  • #3014669 by kalyansamanta, govind.maloo, msankhala, hardikpandya, joachim, awangsetyawan: return value for hook_entity_bundle_info() doesn't mark 'uri_callback' as optional
  • #2977276 by Sam152, ergonlogic, amateescu, jibran, catch, greggmarshall: Node views integration that joins revisions to the default entity fails to consider langcode, resulting in duplicate rows
  • Revert "Issue #3016458 by tim.plunkett, xjm: ContextHandler should use setContext() not setContextValue()"
  • #3017119 by phenaproxima: SourcePluginBase::next() calls Row constructor incorrectly
  • #3016458 by tim.plunkett, xjm: ContextHandler should use setContext() not setContextValue()
  • #2511968 by Berdir, jhedstrom, zaporylie, catch, dawehner, alexpott, amateescu: Path field should fall back to language neutral aliases (also makes this happen for the form widget!)
  • #2737741 by amateescu, anoopjohn: Drupal\menu_link_content\Plugin\Menu\MenuLinkContent::getUuid() does not return any value
  • #2370115 by Upchuk, nafsinvk, jibran: Clicking 'Add to shortcuts' adds shortcut multiple times
  • #2968139 by tim.plunkett, tedbow: Layout Builder field blocks show up on Block UI when they shouldn't
  • Revert "Issue #3000630 by scott_euser, Krzysztof Domański, APolitsin, vijaycs85, longwave: Transliteration causes 2 capital letters at the beginning of a word"
  • #2983665 by cferthorney, zuhair_ak, Saviktor, John Cook, Eli-T, longwave, alexpott: Inconsistent ordering of views of content in Umami
  • #2911149 by quietone, Jo Fitzgerald, heddn, cogent, mikelutz: FormatDate process plugin doesn't handle zero values
  • #3015110 by pwolanin, mikelutz, YesCT, quietone: migrate source plugin SqlBase::initializeIterator fails to update rows when high water reset to NULL or 0 and mapJoinable() = TRUE
  • #3015004 by tedbow, andrewmacpherson, tim.plunkett: Distinguish between the repeated text of remove-section buttons in Layout Builder UI
  • #2936360 by tim.plunkett, samuel.mortenson: Remove duplicate references to the "layout_builder__layout" field from Layout Builder
  • #2924218 by amateescu, Fabianx: Clearing the persistent entity cache every time we switch between workspaces is super wasteful
  • #2997194 by ndf, L-four, drpal: tableheader.js throws error when running Drupal inside an iframe
  • #2948068 by drpal, dawehner, borisson_, ethomas08, lauriii, yoroy, tedbow: Placing and then removing a block appends incorrect query string destination parameter
  • #2936032 by gambry, nlisgo, alexpott, cwells, cilefen, Darvanen, DamienGR: Sites named with special characters cannot send mail
  • #3014797 by mikelutz: Add mikelutz as sub-system maintainer for Migrate
  • #3014851 by tim.plunkett: ContextAwarePluginBase::setContextValue() should delegate to ::setContext()
  • #2894193 by alexpott, jlscott, kkonuhov, mallezie, larowlan: Multiple file upload does not validate extensions correctly
  • #3000630 by scott_euser, Krzysztof Domański, APolitsin, vijaycs85, longwave: Transliteration causes 2 capital letters at the beginning of a word
  • #3014772 by kiamlaluno: ModuleHandlerTest::testUninstallProfileDependency() uninstall a module and reports another module has been uninstalled
  • Revert "Revert "Issue #2809533 by Lendude, jibran: Convert AJAX part of \Drupal\system\Tests\Ajax\FrameworkTest to JavascriptTestBase""
  • #3006625 by Lendude, borisson_: 'stylesheets-remove' test is broken
  • #3001124 by yongt9412, huzooka, amateescu, Berdir: Unable to create new draft for content translation even if the path alias does not change
  • #3012959 by govind.maloo: Fix typos involving the word bet
  • #3014415 by brathbone, DavidPetit, kiamlaluno: Replace "page" by "page title" in the description for "bartik_preprocess_page_title"
  • #3012599 by mondrake, andypost: Replace all db calls to aggregator_feed and aggregator_item tables with Entity APIs
  • #3008720 by quietone, neclimdul, dhirendra.mishra, heddn: DrupalSqlBase::getSystemData eats exceptions causing DrupalSqlBase::checkRequirements to be less useful on database errors than it should be
  • #3002121 by Lendude, jibran, borisson_: Session: Convert system functional tests to phpunit
  • #3001398 by mondrake, Krzysztof Domański, alexpott, voleger, neclimdul, longwave, dawehner, goodboy: format_size() fixes
  • Revert "Issue #2809533 by Lendude, jibran: Convert AJAX part of \Drupal\system\Tests\Ajax\FrameworkTest to JavascriptTestBase"
  • #2900291 by martin107, Lendude, RytoEX, vijaycs85, borisson_, jibran, dawehner: Form: Convert system functional tests to phpunit Part 2
  • #3008490 by Lendude, jibran, jhodgdon: Update \Drupal\Tests\UiHelperTrait::drupalPostForm docblock to match BrowserTestBase version
  • #2863563 by Lendude, michielnugter, larowlan: Convert PreviewTest WebTestBase to BrowserTestBase and JavascriptTestBase
  • #3013029 by amateescu, dolu: StringFormatter should check whether an entity type has a 'revision' link template
  • #2986887 by hchonov, tstoeckler, amateescu, alexpott: Impossible entity query with condition on revision metadata keys
  • #2809533 by Lendude, jibran: Convert AJAX part of \Drupal\system\Tests\Ajax\FrameworkTest to JavascriptTestBase
  • #3013187 by tim.plunkett: Rename PlaceholderInterface to PreviewFallbackInterface
  • #2982626 by phenaproxima, tim.plunkett, EclipseGc: ContextAwarePluginBase is incompatible with ContextAwarePluginDefinitionInterface
  • #2886609 by quietone, Jo Fitzgerald, masipila, heddn, jhodgdon, Gábor Hojtsy, mikeryan, alexpott: Migrate translations for D6 i18n taxonomy 'localized' terms
  • #3007436 by Jo Fitzgerald, andypost, mikelutz, heddn: Fix d7 comment migration
  • #3006719 by tetranz, dhirendra.mishra, scott_euser, Eli-T, amateescu: Workspace indicator does not update after workspace label edited
  • #3008025 by quietone: Migrate D7 i18n block translated strings
  • #2946402 by Sam152, awm, jibran, lamp5, mattshoaf, amateescu: Content moderation incorrectly always assumes a language is being added when the default language of an entity is being changed
  • #2809531 by Lendude, martin107, larowlan: Convert AJAX part of \Drupal\system\Tests\Ajax\FormValuesTest::testSimpleAjaxFormValue to JavascriptTestBase
  • #3013197 by tim.plunkett: Cloning an implementation of SectionListInterface does not deep clone the Section or SectionComponent objects
  • #2189267 by Manuel Garcia, snufkin, alexpott, nuez, maxocub, mirsoft, SiliconMind, blazey, mErilainen, wannesderoy, borisson_, Gábor Hojtsy, stella, spoit, swentel, lauriii, Rob230, Xano, danquah: When content language detection is different from interface language detection, the detected language is not applied to the rendered content
  • #2959370 by dawehner, Lendude, alexpott: View with user/% path breaks login/logout
  • #2809495 by Lendude, jibran, larowlan: Convert AJAX part of \Drupal\field\Tests\EntityReference\EntityReferenceAdminTest to JavascriptTestBase
  • #2998662 by Sam152, dhirendra.mishra, amateescu, Eli-T: Saving a tagged article in staged workspace causes fatal exception
  • #2968452 by amateescu, timmillwood, jeqq, alexpott, Fabianx: Add a way to execute a function in the context of a specific workspace
  • #2982372 by phenaproxima, catch, alexpott: oEmbed system can't parse XML attributes
  • #2342699 by Beakerboy, david_garcia, alexpott, madhavvyas, Nitesh Sethia, mradcliffe, plach, rakshith.thotada, ruloweb, deepakaryan1988, Berdir, rbrenton: SqlContentEntityStorage tries to update identity/serial values by default
  • #3000573 by Sam152, yongt9412, scott_euser, idflood, Berdir, amateescu: After enabling Workflows and Content Moderation there is a fatal error when trying to edit content translation
  • #2968500 by tedbow, bendeguz.csirmaz, samuel.mortenson, phenaproxima, lauriii, AaronMcHale: Change inline blocks workflow in Layout Builder to match mocks
  • #2919795 by tim.plunkett, tedbow, dead_arm, webchick, alexpott, xjm: Add visual hints that Layout Builder work is in tempstore and will not be lost, or take effect until saved
  • #2995071 by tim.plunkett, sugaroverflow: Refactor LayoutBuilderLocalTaskDeriver to delegate local tasks to plugins
  • #2992410 by tim.plunkett, scottsawyer, sugaroverflow, phenaproxima: Provide placeholders for empty blocks (for example, an empty Views listing)
  • #2978939 by tedbow, dead_arm: Change 'field_block' block plugins to use "[entity_type] - fields" category to avoid confusion with other blocks
  • #2934223 by jibran, MerryHamster, tim.plunkett, kiamlaluno: layout_builder module has a hidden dependency on block module
  • #2942011 by tsega, imalabya, robindh, David_Rothstein, Eli-T, Gábor Hojtsy, markconroy, aburrows, ckrina, Gvert, alexpott, cchoudhary: Umami demo has display problems in right-to-left languages
  • #2989734 by alexpott, andypost, mikelutz, tacituseu: PHP 7.3 compatibility
  • #2982183 by phenaproxima, neclimdul: Follow-up Conflict between TypedDataManager and TypedConfigManager in ConfigEntityAdapter
  • #3002522 by andypost, Matthijs, tim.plunkett, wizonesolutions: Calling StatusMessages::renderMessages() with a returns a faulty render array
  • Back to dev.
  • #2982183 by tim.plunkett, phenaproxima, Berdir, Wim Leers, agentrickard: Conflict between TypedDataManager and TypedConfigManager in ConfigEntityAdapter
  • #2856362 by bpresles, Surian, WamFlying: Drupal install fail on Percona XtraDB Cluster 5.7 (pxc_strict_mode enforced)
  • #3008772 by andypost, tim.plunkett: Layout definition defined in YAML is not translated
  • #2982149 by scuba_fly, vijaycs85, Lendude: Routing: Convert system functional tests to phpunit
  • #2809529 by Lendude, martin107: Convert AJAX part of \Drupal\system\Tests\Ajax\ElementValidationTest::testAjaxElementValidation to JavascriptTestBase
Download Size md5 hash drupal-8.6.4.tar.gz 15.64 MB 455722dcf2c051232e6f9299725d11a3 drupal-8.6.4.zip 25.26 MB 1f4a079f34fc25ef5fb73cd507f2b344 Last updated: 5 Dec 2018 at 12:08 UTCOfficial release from tag: 8.6.4Core compatibility: 8.xRelease type: Bug fixesShort description: This is a patch release of Drupal 8 and is ready for use on production sites.Packaged Git sha1: b872dbb52bea17e5ed9a0e76d0c65fc3b13f7fed