drupal 11.2.10

This is a patch (bugfix) release of Drupal 11 and is ready for use on production sites. Learn more about the latest version of Drupal.

Drupal 11.2.x will receive security coverage until June 2026.

Important update information

Symfony packages were previously updated in Drupal 11.2.8 as a security hardening for CVE-2025-64500, but Drupal 11.2.9 accidentally downgraded these packages. This release again updates the packages. No other changes are included.

While Drupal does not expose the above vulnerability, it is still recommended that sites using Drupal 11.2.9 either update to 11.2.10 or ensure symfony/http-foundation is on at least version 7.3.7.