This is a security release of the Drupal 9 series.
This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcement:
- Drupal core - Moderately critical - Information disclosure - SA-CORE-2023-002
- Drupal core - Moderately critical - Information disclosure - SA-CORE-2023-003
- Drupal core - Moderately critical - Access bypass - SA-CORE-2023-004
No other fixes are included.
Which release do I choose? Security coverage information
- Drupal 9.5.x will receive security coverage until November 1, 2023 when Drupal 9 is end-of-life.
- Sites on 9.4.x or earlier should update immediately to Drupal 9.4.12 instead of this release, but update to 9.5 or higher soon.
- Versions of Drupal 9 prior to 9.4.x are end-of-life and do not receive security coverage.
- Drupal 8 is end-of-life and does not receive security coverage.
Known issues
- [#3348286]
VCS Label
9.5.5
Release type
Short description
Supported until November 2023. Use this version for Drupal 9 sites with modules that are not Drupal 10-ready.
Packaged Git sha1
f30e9d4a573a7c7ee764b15a212d8f1919ab713b
Release files
34f3c4c2a4737cae9cb89f0da26f8fc8
Release file SHA-1 hash
f118a8651c9c4a88ad54950a5b22bf23c1304137
Release file SHA-256 hash
678209a4e2bbe2e10f7bdbb29685f8aa4b05b30f74e34dbeadab72940b23b216
dd301ca9b1380caf2a89e0174a447435
Release file SHA-1 hash
0298c5f8ac4e24e4b0b4dc85ad50a12eba1d14a6
Release file SHA-256 hash
6239470e0f2d7f173b2125191e1e5934b615ed2114be3edc788529151eb8e8a9