Security update

This is a security release of the Drupal 9 series.

This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcements:

• Drupal core - Moderately critical - Third-party libraries - SA-CORE-2022-011

No other fixes are included.

This release contains only the fix to SA-CONTRIB-2022-022.

Changes since 7.x-2.2:

This is a security release of the Drupal 9 series.

This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcement:

• Drupal core - Moderately critical - Third-party libraries - SA-CORE-2022-010

No other fixes are included.

This is a security release of the Drupal 9 series.

This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcements:

• Drupal core - Moderately critical - Third-party libraries - SA-CORE-2022-010

No other fixes are included.

Embed - Moderately critical - Cross Site Scripting - SA-CONTRIB-2022-042

Contributors (3)

recrit, Shashwat Purav, mstrelan

Changelog

Issues: 3 issues resolved.

Changes since 8.x-1.4:

Apigee Edge - Moderately critical - Access bypass - SA-CONTRIB-2022-045

Github milestone: 8.x-1.26

Changelog:

Update Cache-Control parameters to no-store, via PR #709.