drupal 8.7.5

Maintenance and security release of the Drupal 8 series.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement:

• Drupal core - Access bypass - SA-CORE-2019-008

No other fixes are included.

Which release do I choose? Security coverage information

• Drupal 8.7.x will receive security coverage until June 3, 2020 when Drupal 8.9.0 is released.
• Sites on 8.6.x or earlier do not require an update for this release.
• Versions of Drupal 8 prior to 8.6.x are end-of-life and do not receive security coverage.

Important update information

• For sites with the Workspaces module enabled, update.php needs to run to ensure a required cache clear. If there is a reverse proxy cache or content delivery network (e.g. Varnish, CloudFlare) it is also advisable to clear these as well.

• No changes have been made to the .htaccess, web.config, robots.txt, or default settings.php files in this release, so upgrading custom versions of those files is not necessary if your site is already on the previous release.