By Drupal Security Team on

Update: Newer versions of Drupal 7 and 8 are now available. We will no longer post front page announcements for every release, but you can always follow the Drupal project page to find the latest release.

Drupal 8.0.4, Drupal 7.43, and Drupal 6.38, maintenance releases which contain fixes for security vulnerabilities, are now available for download.

See the Drupal 8.0.4, Drupal 7.43, and Drupal 6.38 release notes for further information.

Upgrading your existing Drupal 8, 7, and 6 sites is strongly recommended. There are no new features nor non-security-related bug fixes in these releases. For more information about the Drupal 8.0.x release series, consult the Drupal 8 overview. More information on the Drupal 7.x release series can be found in the Drupal 7.0 release announcement, and more information on the Drupal 6.x release series can be found in the Drupal 6.0 release announcement.

Security information

We have a security announcement mailing list and a history of all security advisories, as well as an RSS feed with the most recent security advisories. We strongly advise Drupal administrators to sign up for the list.

Drupal 8 and 7 include the built-in Update Manager module, which informs you about important updates to your modules and themes. Drupal 6 has reached its end of life (EOL) and will not get further updates.

Bug reports

Both Drupal 8.0.x and 7.x are being maintained, so given enough bug fixes (not just bug reports) more maintenance releases will be made available, according to our monthly release cycle.

Drupal 6 has reached its end of life (EOL), so it will not receive further bug fixes or official releases.

Change log

Drupal 8.0.4 is a security release only. For more details, see the 8.0.4 release notes. A complete list of all changes in the stable 8.0.x branch can be found in the git commit log.

Drupal 7.43 is a security release only. For more details, see the 7.43 release notes. A complete list of all changes in the stable 7.x branch can be found in the git commit log.

Drupal 6.38 is a security release only. For more details, see the 6.38 release notes. A complete list of all changes in the end-of-life 6.x branch can be found in the git commit log.

Security vulnerabilities

Drupal 8.0.4, 7.43, and 6.38 were released in response to the discovery of security vulnerabilities. Details can be found in the official security advisories:

To fix the security problem, please upgrade to either Drupal 8.0.4, Drupal 7.43, or Drupal 6.38.

Update notes

See the 8.0.4, 7.43, or 6.38 release notes for details on important changes in this release.

Known issues

See the 8.0.4, 7.43, or 6.38 release notes for a list of known issues affecting each release.