Maintenance and security release of the Drupal 9 series.

This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcement:

No other fixes are included.

Which release do I choose? Security coverage information

  • Drupal 9.2.x will receive security coverage until June 15, 2022 when Drupal 9.4.0 is released.
  • Sites on 9.1.x or earlier should update immediately to Drupal 9.1.14 instead of this release, and plan to update to the latest 9.x release before December 8, 2021 (when Drupal 9.3.0 is scheduled for release and 9.1.x security coverage ends).
  • Sites on 8.9.x should update immediately to Drupal 8.9.20 instead of this release, and then upgrade to Drupal 9 as soon as possible afterward because Drupal 8 is now end-of-life.
  • Versions of Drupal prior to 9.1.x are end-of-life and do not receive security coverage.

Important update information

  • CKEditor 4 has been updated to 4.17.1.
  • No changes have been made to the .htaccess, web.config, robots.txt, or default settings.php files in this release, so updating custom versions of those files is not necessary if your site is already on the previous release.
VCS Label
9.2.9
Release type
Short description
Actively maintained with new features and backwards-compatible improvements every six months. Use this version for the best compatibility with future releases.
Packaged Git sha1
ae75f828134e57bb1aed2ffb2635e6b28fc0e040
Release files
fb02ad948cb679b3f3e6c6c61ce86245
Release file SHA-1 hash
72ad5206f0cc73a6fd2e301337d456f5f82a155d
Release file SHA-256 hash
cf846f32875f7ba12f5b7dae894b1fc8ca99af82aad939dc071d488b5a430fd4
ef324e1b7e6abe98fa413b9ead9b6162
Release file SHA-1 hash
1751d6d362e8c05e250f304c137f6310489d696d
Release file SHA-256 hash
69353916877e276d86dba41b4aa580b78c591592cb5926915b4ef0a9b1860255