Particle.news
Download on the App Store

Drupal Schedules Emergency Core Security Release Today

The project warns attackers could weaponize the flaw within hours of disclosure.

Overview

  • Drupal plans a coordinated core update Wednesday between 17:00 and 21:00 UTC, urging administrators to be ready to install fixes as soon as they drop.
  • Patches will be provided for supported branches 11.3.x, 11.2.x, 10.6.x, and 10.5.x.
  • Drupal will ship best‑effort fixes for 11.1.x and 10.4.x and manual patch files for 9.5 and 8.9, though they may not apply cleanly, and Drupal 7 is not affected.
  • Site owners are told to pre‑update now to each branch’s latest patch, including 11.1.9 or 10.4.9, and to plan a move from Drupal 8 or 9 to at least 10.6.
  • No technical details will be shared before the announcement, so admins should distrust unofficial claims and note that Drupal Steward blocks known attack paths but an update is still advised.