Maintenance and security release of the Drupal 9 series.
This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcements:
- Drupal core - Moderately critical - Improper input validation - SA-CORE-2022-003
- Drupal core - Moderately critical - Information disclosure - SA-CORE-2022-004
No other fixes are included.
Which release do I choose? Security coverage information
- Drupal 9.3.x will receive security coverage until December 8, 2022.
- Sites on 9.2.x or earlier should update immediately to Drupal 9.2.13 instead of this release.
- Versions of Drupal 9 prior to 9.2.x are end-of-life and do not receive security coverage.
- Versions of Drupal 8 are end-of-life and do not receive security coverage.
Important update information
- No changes have been made to the
.htaccess,web.config,robots.txt, or defaultsettings.phpfiles in this release, so updating custom versions of those files is not necessary if your site is already on the previous release.
VCS Label
9.3.6
Release type
Short description
Actively maintained with new features and backwards-compatible improvements every six months. Use this version for the best compatibility with future releases.
Packaged Git sha1
e205f31c36c6db950f50d473cfd24ad22ac98ae1
Release files
01adfb2ac9246f28c494486704c27680
Release file SHA-1 hash
5e6bcabdd7006902422728c51c61c2654b89eefa
Release file SHA-256 hash
81c98f54bbeaedff9f33623e8aca2c6333ef15503f8fb68a65f446e4bc440f19
953311ff7f6f4f49f3971df82ea64e60
Release file SHA-1 hash
7d8e5115b7db76f2a1c6394ae4e420ab6c342abb
Release file SHA-256 hash
8c43be4bd429c0880ca6fa7f8c620e4f927902141b14ed670bdb55d893a92bd6