This is a security release of the Drupal 9 series.
This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcement:
- Drupal core - Moderately critical - Information disclosure - SA-CORE-2023-002
- Drupal core - Moderately critical - Information disclosure - SA-CORE-2023-003
- Drupal core - Moderately critical - Access bypass - SA-CORE-2023-004
No other fixes are included.
Which release do I choose? Security coverage information
- Drupal 9.4.x will receive security coverage until June 2023 when Drupal 10.1.0 is released. Update to Drupal 9.5 soon, and plan to update to Drupal 10 by November 2023, to continue receiving security coverage.
- Versions of Drupal 9 prior to 9.4.x are end-of-life and do not receive security coverage.
- Drupal 8 is end-of-life and does not receive security coverage.
Known issues
- [#3348286]
VCS Label
9.4.12
Release type
Short description
Drupal 9.4.x will receive security coverage until June 2023 when Drupal 10.1.0 is released.
Packaged Git sha1
a8cff62ec3765d5647ae323cd5e6eeef2ebe7579
Release files
4c3347f12f7fe07bb0c39daa0023230a
Release file SHA-1 hash
d1ab8cd6c24f5fbcc43577bb9cf9cc6d032779df
Release file SHA-256 hash
b5ce2bf182b7ff79fe5e7496080204991ca723ed00691c0ab0d8c712a75c9d60
f57807f7b8b8b1494fd7a4744d071b11
Release file SHA-1 hash
39320f0342532dc2cc6bcdd601a1939ac6996ae6
Release file SHA-256 hash
1248340b9e84a37cc413b96ba4940bb1d9189510d58b48e42e3979d8af149666