This is a security release of the Drupal 11 series.
This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcements:
- Drupal core - Moderately critical - Cross-Site Scripting - SA-CORE-2024-003
- Drupal core - Moderately critical - Access Bypass - SA-CORE-2024-004
- Drupal core - Less critical - Gadget chain - SA-CORE-2024-006
- Drupal core - Moderately critical - Gadget chain - SA-CORE-2024-007
No other fixes are included.
Which release do I choose? Security coverage information
- Drupal 11.0.x will receive security coverage until June 2025 when Drupal 11.2.0 is released.
- Sites on 10.3.x should update immediately to Drupal 10.3.9.
- Sites on 10.2.x should update immediately to Drupal 10.2.11.
- Drupal 8 and 9 are end-of-life and do not receive security coverage.
VCS Label
11.0.8
Release type
Short description
Actively maintained with new features and backwards-compatible improvements every six months. Use this version for the best compatibility with future releases.
Packaged Git sha1
3712d59414f556474f990a503c3f7c295f8c719f
Release files
7a20f42ff7491b0d4a230940f8f76a3f
Release file SHA-1 hash
d1effaf5cfcddb2f8692591c5bd9be5ac50c6141
Release file SHA-256 hash
f43a7d51de30a545ae79c6fd52b6fb784523f704ee1a3d5b7cd7ad5846465500
316a08c7a070b5ac6e4746fd0e4165af
Release file SHA-1 hash
192ff9a587e8593f8e6b990aeec904941206dfca
Release file SHA-256 hash
44698c2e3b177a697e55134a322df0dfb4feb108668b5e0e6c137651401e26ae