drupal 10.5.3

This is a patch (bugfix) release of Drupal 10 and is ready for use on production sites. Learn more about the latest version of Drupal.

Drupal 10.5.x will receive security support until June 2026. Drupal 10.4.x will continue to receive security support until December 2025.

Drupal 10.3.x security support has ended. Sites on any Drupal version prior to 10.4.x should upgrade to a supported release as soon as possible.

All changes since 10.5.2

Important update information

• CKEditor5 is updated from v45.2.0 to v45.2.2 to fix a Cross-Site Scripting (XSS) vulnerability that does not directly effect Drupal core. If your site enables the HTML embed plugin or has a custom plugin that uses an editable element which implements view RawElement is enabled update should update immediately. See the v45.2.2 release notes for details.

All changes since 10.5.2

• Issue #3544581 by catch, longwave, godotislate: Update to CKEditor5 v45.2.2
• Issue #3440399 by prudloff, akalata, larowlan, longwave, smustgrave, mrszymon, greggles, berdir: Malicious fingerprinting of visitors via role name on content translation screen
• Issue #3540554 by tstoeckler: Functional tests attempting to release locks for a no-longer existing site throws an exception
• Issue #3539366 by dimitriskr, andypost, godotislate, catch: [10.6] Default DB transaction isolation set to read-committed breaks InstallerIsolationLevelExistingSettingsTest test
• Issue #3351597 by acbramley, smustgrave, catch: [random test failure] Drupal\Tests\ckeditor5\FunctionalJavascript\MediaLibraryTest
• Issue #3541487 by alexpott: Fix EntityQueryTest on SQLite and Postgres
• Issue #3538854 by dww, driskell, andypost, godotislate: APCu requirement for 32MB always displays since APCu 5.1.25
• Issue #3540528 by andypost, jacktonkin: Clean-up deprecated non-standard cast names
• Issue #3541053 by andypost: Fix deprecated curl_close() for PHP 8.5
• Issue #2950869 by amateescu, alexpott, fabianx, lucassc, abhishek-anand, pavlosdan, ravi.shankar, adam.weingarten, timmy_cos, rassoni, bryanmanalo, pooja saraah, _pratik_, enrocean167, matsbla, catch, berdir, wim leers, yakoub, neclimdul, dixon_, camoa, daffie, effulgentsia, mariancalinro, mheip, nicobot, krzysztof domański: Entity queries querying the latest revision very slow with lots of revisions
• Issue #3537282 by xjm, divyansh.gupta, griffynh, tedbow, smustgrave: Remove tedbow as maintainer for Settings Tray subsystem
• Back to dev.