drupal 8.5.9

Install

To start a new Drupal project with version 8.5.9:

To update your site and all dependencies to the latest version of Drupal:

To update your site to this specific release:

Pinning to a specific release may make it more challenging to update your site in future, see composer documentation for managing pinned versions

Using Composer to manage Drupal site dependencies

Downloads

Download drupal-8.5.9.tar.gztar.gz 15.08 MB

MD5: ab7feda97f750c8997154c04ee7b1c5b

SHA-1: 3de1b8ccf037b693efbac7dc91716238328a7f69

SHA-256: c2545d741f28e698e3b08222e38c3aa80f63464b5e4c145e6e719a44d89f1bdf

Download drupal-8.5.9.zipzip 24.27 MB

MD5: 1df42622c98481fd23d15db3cac97b3f

SHA-1: 6c5aa64107b7690b36f4d1234cd2af9848cf848f

SHA-256: 43e10b9deba9229a4ee7206233824b577193e7c20c952ee5f99b5b4867d383df

Release notes

Maintenance and security release of the Drupal 8 series.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement:

No other fixes are included.

Versions of Drupal 8 prior to 8.5.x are end-of-life and do not receive security coverage. Sites on 8.5.x will receive security coverage until May 2019.

Important update information

The .phar file extension has been added to Drupal's dangerous extensions list, which means that any such file uploaded to a Drupal file field will automatically be converted to a text file (with the .txt extension) to prevent it from being executed. This is similar to how Drupal handles file uploads with a .php extension.
No changes have been made to the .htaccess, web.config, robots.txt or default settings.php files in this release, so upgrading custom versions of those files is not necessary.

Known issues

Users are reporting seeing a fatal error when updating their sites with Drush. Site owners may be able to run drush updb and either drush cc all or drush cr depending on the version to complete the update. Check the status report afterward to confirm that Drupal has been updated. See #3026386: Drush fatal error after upgrading to 8.6.6, 8.5.9, or 7.62: PHP Fatal error: Uncaught TYPO3\PharStreamWrapper\Exception for details.