Try a hosted Drupal demo

Install

To start a new Drupal project with version 10.5.8:

To update your site and all dependencies to the latest version of Drupal:

To update your site to this specific release:
Pinning to a specific release may make it more challenging to update your site in future, see composer documentation for managing pinned versions

Using Composer to manage Drupal site dependencies

Downloads

Download tar.gz 20.32 MB
MD5: 01438ad46f4b689b5bda5b1176886265
SHA-1: b66428c4de69362ecf7c7cfdfffe74d601f1bb23
SHA-256: 3be80b5bae94ec320165a3cae9aa28117580a81f4c2b5640b3663fd3fd7a98a0
Download zip 33.58 MB
MD5: eeb2df0ccb4524f14057e52807c24d16
SHA-1: c315baa211aab8e6ce6eca9969665cca5f03ddc1
SHA-256: 686af5301e0f7bb54ed67fc1b004d810b40e18041f003edf459177e2bf5b79c7

Release notes

This is a patch (bugfix) release of Drupal 10 and is ready for use on production sites. Learn more about the latest version of Drupal.

Drupal 10.5.x will receive security support until June 2026. Drupal 10.4.x will continue to receive security support until December 2025.

Drupal 10.3.x security support has ended. Sites on any Drupal version prior to 10.4.x should upgrade to a supported release as soon as possible.

Important update information

Symfony packages were previously updated in Drupal 10.5.6 as a security hardening for CVE-2025-64500, but Drupal 10.5.7 accidentally downgraded these packages. This release again updates the packages. No other changes are included.

While Drupal does not expose the above vulnerability, it is still recommended that sites using Drupal 10.5.7 either update to 10.5.8 or ensure that the symfony/http-foundation package is on at least version 6.4.29.

What’s next?

  1. Learn how to install Drupal
  2. Learn how to update Drupal
  3. Extend Drupal to do more
  4. Get training
  5. Check out what others built
Created by: xjm
Created on: 9 Dec 2025 at 19:35 UTC
Last updated: 18 Dec 2025 at 14:27 UTC
Git tag 10.5.8
Bug fixes
Insecure

Other releases