Early Bird Registration for DrupalCon Portland 2024 is open! Register by 23:59 PST on 31 March 2024, to get $100 off your ticket.
Install
To start a new Drupal project with version 8.9.19:To update your site and all dependencies to the latest version of Drupal:
To update your site to this specific release:
Pinning to a specific release may make it more challenging to update your site in future, see composer documentation for managing pinned versions
Using Composer to manage Drupal site dependencies
Downloads
Download drupal-8.9.19.tar.gztar.gz
18.92 MB
MD5: bb55af6c141dfc79b993570ba7a93c1f
SHA-1: 802896935433ee21e2769f077910e74a61bf3942
SHA-256: e7c54d56a191635068527bcb36d9232249951b05106c3bdf75ddbdacceffb04b
Download drupal-8.9.19.zipzip
30.33 MB
MD5: 699a159ea308870dddb7a7bdb01430de
SHA-1: 04f60a862e1023ec4b1c66488ba92e8a6379a19d
SHA-256: 902a1b5965f49bde431c91918f17f1598db74366d5cb8529e7984cc492373380
Release notes
Maintenance and security release of the Drupal 8 series.
This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement:
- Drupal core - Moderately critical - Cross Site Request Forgery - SA-CORE-2021-006
- Drupal core - Moderately critical - Cross Site Request Forgery - SA-CORE-2021-007
- Drupal core - Moderately critical - Access Bypass - SA-CORE-2021-008
- Drupal core - Moderately critical - Access Bypass - SA-CORE-2021-009
- Drupal core - Moderately critical - Access Bypass - SA-CORE-2021-010
No other fixes are included.
Which release do I choose? Security coverage information
- Sites on 8.9.x should update immediately to this release, but update to Drupal 9 as soon as possible afterward because Drupal 8 is end-of-life in six weeks! Starting in November 2021, Drupal 8 sites will no longer receive security updates. It is essential to update your Drupal 8 sites as soon as possible.
- Versions of Drupal 8 prior to 8.9.x are end-of-life and do not receive security coverage.
Important update information
-
No changes have been made to the
.htaccess
,web.config
,robots.txt
, or defaultsettings.php
files in this release, so upgrading custom versions of those files is not necessary if your site is already on the previous release.