drupal 8.9.5

Install

To start a new Drupal project with version 8.9.5:

To update your site and all dependencies to the latest version of Drupal:

To update your site to this specific release:

Pinning to a specific release may make it more challenging to update your site in future, see composer documentation for managing pinned versions

Using Composer to manage Drupal site dependencies

Downloads

Download drupal-8.9.5.tar.gztar.gz 18.87 MB

MD5: 52cd8e69c6a89a96426de990b29f8a61

SHA-1: bae0c20f405db4ed86a2e46835d55ea581f3b921

SHA-256: 6258877862205fe775424886fe862570aeb1409767b8d7199e4362612d5f479e

Download drupal-8.9.5.zipzip 30.23 MB

MD5: b2f0caf6c5d5ee14c78f85bcb88c2a03

SHA-1: b931ae8eae8727a8c81e4c6655400636b0ab7709

SHA-256: 71cbd04f728ae8ee140954739cdd9aac27af380dec7fbe9e522e36ea63b319aa

Release notes

This is a patch (bugfix) release of Drupal 8 and is ready for use on production sites. Learn more about Drupal 8.

Drupal 8.9 is the final minor release of the 8.x series. It is a long-term support (LTS) version, and will receive security coverage until November 2021. It provides the same public API as Drupal 9.0 aside from deprecated code and dependency changes. (Learn more about Drupal 9.)

If you are upgrading to this release from 8.8.x, read the Drupal 8.9.0 release notes before you upgrade.

Important update information

This release provides hotfixes for two issues:

Yesterday, Symfony issued a security advisory for their symfony/http-client component, which is not used by Drupal. The Symfony release also updated some compatibility code in the symfony/http-kernel component.

Although Drupal is not affected by this vulnerability, some site owners reported automated security scanners flagging the http-kernel update as a security update, breaking continuous integration builds, etc. For simplicity, this release updates Drupal's metapackages to use the latest release of symfony/http-kernel (version 3.4.44).
A regression in Drupal 9.0.4 and 8.9.4 caused Paragraphs modal dialogs to not be displayed correctly due to a CSS change in core. The issue that introduced this change has been reverted (#3070375: Hidden buttons in off-canvas dialog are not being hidden) so Paragraphs should again work as expected.