drupal 7.62

Release notes

Maintenance and security release of the Drupal 8 series.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement:

No other fixes are included.

Important update information

  • The .phar file extension has been added to Drupal’s dangerous extensions list, which means that any such file uploaded to a Drupal file field will automatically be converted to a text file (with the .txt extension) to prevent it from being executed. This is similar to how Drupal handles file uploads with a .php extension.

  • No changes have been made to the .htaccess, web.config, robots.txt or default settings.php files in this release, so upgrading custom versions of those files is not necessary.

  • The replacement stream wrapper needed to resolve Drupal Core – Remote code execution – SA-CORE-2018-002 is not compatible with PHP versions lower than 5.3.3. For sites using lower PHP versions, the built-in phar stream wrapper has been disabled rather than replaced. Drupal 7 sites using PHP 5.2 (or PHP 5.3.0-5.3.2) that require phar support will need to re-enable the stream wrapper for it; however, note that re-enabling the stream wrapper will re-enable the insecure PHP behavior on those PHP versions.

    It is very uncommon to both be running a PHP version lower than 5.3.3 and to need phar support. If you’re in that situation, consider upgrading your PHP version instead of restoring insecure phar support.

Known issues

Users are reporting seeing a fatal error when updating their sites with Drush. Site owners may be able to run drush updb and either drush cc all or drush cr depending on the version to complete the update. Check the status report afterward to confirm that Drupal has been updated. See #3026386: Drush fatal error after upgrading to 8.6.6, 8.5.9, or 7.62: PHP Fatal error: Uncaught TYPO3PharStreamWrapperException for details.

Download Size md5 hash
drupal-7.62.tar.gz 3.15 MB ba6c2d9f1757da31e804b92cab09dc17
drupal-7.62.zip 3.65 MB 688bc8b13f235d8e6e60800bd11038be
Last updated: 16 Jan 2019 at 18:32 UTC
Official release from tag: 
Core compatibility: 
Release type: 
Short description: 
If you need stability and features from the widest variety of contributed modules and themes, this is the version for you.
Packaged Git sha1: 

Source: https://www.drupal.org/taxonomy/term/103/feed