drupal 8.6.10

Maintenance and security release of the Drupal 8 series.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the security announcement and notes below:

• Drupal core - Remote code execution - SA-CORE-2019-003

Sites on 8.5.x or earlier should update immediately to Drupal 8.5.11 instead, and plan to update to the latest 8.6.x release before May 2019 (when 8.7.0 is released and 8.5.x security coverage ends).

Important update information

For site owners

• In addition to the above fix, this release includes the fix for #3031740: Updating to 8.6.8 or 8.6.9 with Drush 8 causes data loss via update_fix_compatibility() to prevent Drush 8 issues for sites updating directly from an earlier security release.

• update.php must be run after updating to ensure changes from the patch take effect.

• No changes have been made to the .htaccess, web.config, robots.txt or default settings.php files in this release, so upgrading custom versions of those files is not necessary if your site is already on the previous release.

For module developers

Some contributed module tests may need to be updated if they extend core's test suite, due to a minor API change in a test base class.