This is a security release of the Drupal 9 series.

This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcements:

No other fixes are included.

Which release do I choose? Security coverage information

  • Drupal 9.3.x will receive security coverage until December 8, 2022.
  • Sites on 9.2.x or earlier should update immediately to Drupal 9.2.16 instead of this release.
  • Versions of Drupal 9 prior to 9.2.x are end-of-life and do not receive security coverage.
  • Versions of Drupal 8 are end-of-life and do not receive security coverage.

Important update information

  • No changes have been made to the .htaccess, web.config, robots.txt, or default settings.php files in this release, so updating custom versions of those files is not necessary if your site is already on the previous release.
VCS Label
9.3.9
Release type
Short description
Actively maintained with new features and backwards-compatible improvements every six months. Use this version for the best compatibility with future releases.
Packaged Git sha1
cce59c58baffd5b1f31102b480e0dd33c2d56f43
Release files
09ff49df4ee07a1afc8339e5f22c2c14
Release file SHA-1 hash
484255091ab44d345b955014f70e17c2819aa74d
Release file SHA-256 hash
f0d96e718655b850f0f24d94e2035adc6a07636af0eae1c74b0f49ca5834eca2
c58b3e696c69126096ff72387b5653cd
Release file SHA-1 hash
b57d1793ce368c983da21cca8b860eda4f10fb21
Release file SHA-256 hash
54f12a165a4dd7d407adfd0a1da13a558f8a280f62be2a8ab78e32628841b58c