Download drupal-8.2.8.tar.gztar.gz 11.53 MB
MD5: 039507247f3712c3fb022805eb13faf4
SHA-1: 0b0c241fcc6648592265e17cdbc99775a8da3d2f
SHA-256: 84b729f45fe6c0f23e15aab7f2c9e57414edec00630ab09bed7dc9e79cac71bb
Download drupal-8.2.8.zipzip 19.16 MB
MD5: 4fb7fddfb34520f2a301b7b74a92f282
SHA-1: e9a9198bab68c2158f4fc2f56fa794f98957d48f
SHA-256: 76a65a2f1e913f6af7ae0ea4e80e9f73604fe19da5d124b53b3901f17a5abbff

Release info

Created by: xjm
Created on: 19 Apr 2017 at 17:27 UTC
Last updated: 18 Oct 2017 at 16:34 UTC
Core compatibility: 8.x
Release type: Security update

Release notes

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcements:

No other fixes are included.

No changes have been made to the .htaccess, web.config, robots.txt, or default settings.php files in this release, so upgrading custom versions of those files is not necessary.

After upgrading to Drupal 8.2.8, the site's "Available updates" page may still list Drupal 8.3.1 as an additional required security update, but this information is incorrect and can be ignored; both Drupal 8.2.8 and Drupal 8.3.1 contain the same security fix. However, the 8.2.x series is end-of-life and will not receive further updates, so you should also plan to update to Drupal 8.3.1 or later once you have had a chance to test thoroughly. See the Drupal 8.3.0 release notes for more information on the new minor release, including requirements for updating from 8.2.x releases.

Known issues

There are no known regressions in this release since 8.2.7.


The selected release is the release that will be used for automated testing. Optional projects are only used for testing.


No required projects


No optional projects