Security update

This is a security release of the Drupal 9 series.

This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcements:

• Drupal core - Moderately critical - Information Disclosure - SA-CORE-2022-012
• Drupal core - Moderately critical - Access Bypass - SA-CORE-2022-013
• Drupal core - Critical - Arbitrary PHP code execution - SA-CORE-2022-014
• Drupal core - Moderately critical - Multiple vulnerabilities - SA-CORE-2022-015

No other changes are included.

See Entity Print - Moderately critical - Multiple: Remote Code Execution, Information disclosure - SA-CONTRIB-2022-048.

Fixes an access bypass SA-CONTRIB-2022-047

Security Update fix.

See Lottiefiles Field - Moderately critical - Cross Site Scripting - SA-CONTRIB-2022-046.

This is a release candidate for the next minor version (feature release) of Drupal 9. Release candidates are not supported for production sites, but they are intended for widespread testing in preparation for the upcoming stable release. More information on release candidates.

This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcements:

• Drupal core - Moderately critical - Third-party libraries - SA-CORE-2022-011

This is a security release of the Drupal 9 series.

This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcement:

• Drupal core - Moderately critical - Third-party libraries - SA-CORE-2022-011

No other fixes are included.