This is a security release of the Drupal 9 series.
This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcement:
- Drupal core - Moderately critical - Information disclosure - SA-CORE-2023-002
- Drupal core - Moderately critical - Information disclosure - SA-CORE-2023-003
- Drupal core - Moderately critical - Access bypass - SA-CORE-2023-004
No other fixes are included.
Which release do I choose? Security coverage information
- Drupal 9.5.x will receive security coverage until November 1, 2023 when Drupal 9 is end-of-life.
- Sites on 9.4.x or earlier should update immediately to Drupal 9.4.12 instead of this release, but update to 9.5 or higher soon.
- Versions of Drupal 9 prior to 9.4.x are end-of-life and do not receive security coverage.
- Drupal 8 is end-of-life and does not receive security coverage.
Known issues
Release type:
Security update