drupal 9.3.12

This is a security release of the Drupal 9 series.

This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcements:

• Drupal core - Moderately critical - Improper input validation - SA-CORE-2022-008
• Drupal core - Moderately critical - Access bypass - SA-CORE-2022-009

No other fixes are included.

Which release do I choose? Security coverage information

• Drupal 9.3.x will receive security coverage until December 8, 2022 when Drupal 9.5.0 is released.
• Sites on 9.2.x or earlier should update immediately to Drupal 9.2.18 instead of this release.
• Versions of Drupal 9 prior to 9.2.x are end-of-life and do not receive security coverage.
• Versions of Drupal 8 are end-of-life and do not receive security coverage.

Important update information

• No changes have been made to the .htaccess, web.config, robots.txt, or default settings.php files in this release, so updating custom versions of those files is not necessary if your site is already on the previous release.