This is a security release of the Drupal 9 series.

This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcements:

No other fixes are included.

Which release do I choose? Security coverage information

  • Drupal 9.3.x will receive security coverage until December 8, 2022.
  • Sites on 9.2.x or earlier should update immediately to Drupal 9.2.15 instead of this release.
  • Versions of Drupal 9 prior to 9.2.x are end-of-life and do not receive security coverage.
  • Versions of Drupal 8 are end-of-life and do not receive security coverage.

Important update information

  • No changes have been made to the .htaccess, web.config, robots.txt, or default settings.php files in this release, so updating custom versions of those files is not necessary if your site is already on the previous release.
VCS Label
9.3.8
Release type
Short description
Actively maintained with new features and backwards-compatible improvements every six months. Use this version for the best compatibility with future releases.
Packaged Git sha1
aabeae28aa10e9a22ca903d140704846c1df161a
Release files
6e3f6aacb8a587e5c576ac8468b2409c
Release file SHA-1 hash
b0659f17765f6b3f51156b194e07899d1c5c5b3b
Release file SHA-256 hash
9f889490b2ea187c968333a63e0fb9901fe1aeb74cbadcf03249e99ed5444e08
47c0b2e0557ec053ecc05b9fec8b8cbb
Release file SHA-1 hash
480b9d21165b3380d1a9c2e9156bc9ba3750b757
Release file SHA-256 hash
a381f8fdb40d407211a95ed5f24725f0096fa1bfd17aa9b862fa30fb3fd5662c