Drupal Core Security Release Window Moved to November 12, 2025
The Drupal Security Team has announced a schedule change for its upcoming core security release window. Originally planned for November 19, 2025, the window has been moved up to November 12, 2025. The release, if it occurs, will follow the standard time window of 1600 UTC to 2200 UTC.
The adjustment was made to avoid overlap with DrupalCon Vienna and DrupalCon Nara, which are scheduled close to the October and November security release windows. The team aims to prevent conflicts that would make it difficult for site owners and developers attending these events to also manage security updates.
This is a routine rescheduling and not triggered by any urgent or highly critical vulnerability. There are no special release procedures in place.
The team also noted that December is typically avoided for core security releases due to its proximity to minor core releases and year-end holidays. Skipping November would have resulted in a four-month gap between regular release windows, which the team wanted to avoid.
As always, the presence of a security release window does not guarantee that a release will occur-it simply means one is possible.
For official details, see the public service announcement: PSA-2025-11-03.
ASK: Drupal Community Needs Your Support
View all →
Disclosure: This content is produced with the assistance of AI.
Note: The vision of this web portal is to help promote news and stories around the Drupal community and promote and celebrate the people and organizations in the community. We strive to create and distribute our content based on these content policy. If you see any omission/variation on this please reach out to us at #thedroptimes channel on Drupal Slack and we will try to address the issue as best we can.
