Come together with the global Drupal community in Rotterdam, 28 Sept – 1 Oct 2026. Sessions, contribution, connection, and Early Bird savings until 8 June.Install
To start a new Drupal project with version 9.4.15:To update your site and all dependencies to the latest version of Drupal:
To update your site to this specific release:
Pinning to a specific release may make it more challenging to update your site in future, see composer documentation for managing pinned versions
Using Composer to manage Drupal site dependencies
Downloads
Download tar.gz
20.63 MB
MD5: faa88960efbebd4e7ea76e6663dd80b1
SHA-1: 92116427a868f4a39917ea5af97022b412d6a18c
SHA-256: 8789b6cc09c8b7c0af21797585321332c2dcbdce27855d2505852bdc1fc8f36b
Download zip
33.22 MB
MD5: cbde644bc3f400867b579f659c07b4f6
SHA-1: 8f2c88971bc45156dabccb8b602bc5851be911b5
SHA-256: 3f739149baf9b94ce20c9c956d0e9f94b3ea863932a9aebc7b21c2794ce67f8e
Release notes
This is a patch (bugfix) release of Drupal 9 and is ready for use on production sites. Learn more about Drupal 9.
This is an additional bugfix release of Drupal 9.4.x containing security hardening fixes. 9.4.x will receive security coverage until June 2023. Plan to upgrade to Drupal 9.5 or 10.0 soon to continue receiving bug fixes and new features.
If you are upgrading from Drupal 8, read upgrading a Drupal 8 site to Drupal 9, 9.0.0 release notes, and the 9.4.0 release notes before upgrading to this release. However, sites upgrading from Drupal 8 should upgrade to Drupal 9.5.x rather than 9.4.x.
Important changes in this release
laminas/laminas-diactoroshas been forked to fix a security issue while retaining compatibility with PHP 7.3 and 7.4. The forked package is calledlongwave/laminas-diactoros.
All changes since 9.4.14
- Issue #3357881 by longwave, alexpott: Update composer.lock hash for 9.4.x
- Issue #3356283 by longwave, szato, catch, Dave Reid, Spokje, effulgentsia, joelpittet, cmlara: Fork laminas/laminas-diactoros
- Issue #3357247 by Spokje: Update guzzlehttp/psr7
- Back to dev.
- Merged 9.4.14.
- Issue #3350972 by nod_, Spokje, xjm, quietone, lauriii: [random test failure] Drupal\Tests\layout_builder\FunctionalJavascript\LayoutBuilderUiTest::testReloadWithNoSections()
- Revert "Issue #3350972 by nod_: [random test failure] DrupalTestslayout_builderFunctionalJavascriptLayoutBuilderUiTest::testReloadWithNoSections"
- Issue #3350972 by nod_: [random test failure] DrupalTestslayout_builderFunctionalJavascriptLayoutBuilderUiTest::testReloadWithNoSections
- Issue #3351494 by catch, Spokje: Skip Drupal\Tests\media\FunctionalJavascript\MediaSourceFileTest
- Issue #3351596 by dww, catch: Skip Drupal\Tests\ckeditor5\FunctionalJavascript\MediaLibraryTest
- Issue #3351500 by catch: Skip Drupal\Tests\layout_builder\FunctionalJavascript\ContextualLinksTest
- Issue #3351607 by schlaukopf, xjm: Skip numerous functional JS tests that repeatedly break HEAD
- Issue #3351961 by longwave, Spokje: Update webpack
What’s next?
- Learn how to install Drupal
- Learn how to update Drupal
- Extend Drupal to do more
- Get training
- Check out what others built
Bug fixes
Insecure
