This is a security release of the Drupal 9 series.

This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcement:

No other fixes are included.

Which release do I choose? Security coverage information

  • Drupal 9.2.x will receive security coverage until June 15, 2022 when Drupal 9.4.0 is released.
  • Versions of Drupal 9 prior to 9.2.x are end-of-life and do not receive security coverage.
  • Versions of Drupal 8 are end-of-life and do not receive security coverage.

Important update information

  • No changes have been made to the .htaccess, web.config, robots.txt, or default settings.php files in this release, so updating custom versions of those files is not necessary if your site is already on the previous release.
VCS Label
9.2.18
Release type
Short description
Drupal 9.2.x will receive security coverage until June 2022 when Drupal 9.4.0 is released.
Packaged Git sha1
416eae2698e7c8b5588a7b7ebc88df842d9324cc
Release files
58f546a0d25dad5f3d5cac55a300d2f5
Release file SHA-1 hash
879e5a5527476c29cf34725fe74c1ce61587234b
Release file SHA-256 hash
0aa4cdb4d9386491be379f86602af02ff9c0d708b6c2fe22ef9a306ee92341c8
86cd705a9011bb0a203f4937d673b270
Release file SHA-1 hash
77cf7b61a6ee23b90a3f4f214e89566cc8a1831d
Release file SHA-256 hash
4fd716dc51260ef7da09dcd1e0fc4bae34eee545df7e9fe9a7af3c7ecb5200e7