drupal 8.7.11

Maintenance and security release of the Drupal 8 series.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement:

• Drupal core - Moderately critical - Denial of Service - SA-CORE-2019-009
• Drupal core - Moderately critical - Multiple vulnerabilities - SA-CORE-2019-010
• Drupal core - Moderately critical - Access bypass - SA-CORE-2019-011
• Drupal core - Critical - Multiple vulnerabilities - SA-CORE-2019-012
  

No other fixes are included.

Versions of Drupal 8 prior to 8.7.x are end-of-life and do not receive security coverage.

Important update information

• The pear/archive_tar project has been updated from version 1.4.6 (Drupal 8.7) and 1.4.8 (Drupal 8.8) to version 1.4.9 in order to mitigate Drupal core - Critical - Multiple vulnerabilities - SA-CORE-2019-012
  

• No changes have been made to the .htaccess, web.config, robots.txt or default settings.php files in this release, so upgrading custom versions of those files is not necessary if your site is already on the previous release.