Software Update: Drupal 8.6.13

Version 8.6.13 of Drupal has been released. Drupal is a PHP-written, user-friendly and powerful content management platform, with which, for example, websites can be created. It’s simple enough for a novice user, but powerful enough to build a more complex website as well. The program includes a content management platform and a development framework. Version 8.6 includes oEmbed, a new way to add media, and there is a demo that shows what Drupal is capable of. Version 8.6.13 fixes some important security vulnerabilities.

release notes

Maintenance and security release of the Drupal 8 series.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the security announcement and notes below:

• Drupal core – Cross-Site Scripting- SA-CORE-2019-004

Sites on 8.5.x or earlier should update immediately to Drupal 8.5.14 instead, and plan to update to the latest 8.6.x release before May 2019 (when 8.7.0 is released and 8.5.x security coverage ends).

Important update information

• No changes have been made to the .htaccess, web.config, robots.txt or default settings.php files in this release, so upgrading custom versions of those files is not necessary if your site is already on the previous release.
• No database updates are required for this release.