drupal 8.9.19

Maintenance and security release of the Drupal 8 series.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement:

• Drupal core - Moderately critical - Cross Site Request Forgery - SA-CORE-2021-006
• Drupal core - Moderately critical - Cross Site Request Forgery - SA-CORE-2021-007
• Drupal core - Moderately critical - Access Bypass - SA-CORE-2021-008
• Drupal core - Moderately critical - Access Bypass - SA-CORE-2021-009
• Drupal core - Moderately critical - Access Bypass - SA-CORE-2021-010

No other fixes are included.

Which release do I choose? Security coverage information

• Sites on 8.9.x should update immediately to this release, but update to Drupal 9 as soon as possible afterward because Drupal 8 is end-of-life in six weeks! Starting in November 2021, Drupal 8 sites will no longer receive security updates. It is essential to update your Drupal 8 sites as soon as possible.
• Versions of Drupal 8 prior to 8.9.x are end-of-life and do not receive security coverage.

Important update information

• No changes have been made to the .htaccess, web.config, robots.txt, or default settings.php files in this release, so upgrading custom versions of those files is not necessary if your site is already on the previous release.