[Security-news] Drupal 8 is now end-of-life - PSA-2021-11-30

[security-news at drupal.org]

View online: https://www.drupal.org/psa-2021-11-30

Date: 2021-November-30
Description: 
As of November 17, 2021, the Drupal core version 8 series has reached
end-of-life. This means that all releases of Drupal 8 core (with 8.y.x
version numbers) and Drupal contributed project releases that are compatible
with only Drupal 8 will be marked unsupported as they no longer have security
team support.

Drupal 8.0.0 was first released on November 9, 2015.  The last version was
released on November 17, 2021.

All Drupal 8 site owners must upgrade to Drupal 9 [1] to receive security
updates and bug fixes. The Drupal Association will also disable testing with
unsupported versions of Drupal.

Security issues that only affect Drupal 8 (and not Drupal 9 or Drupal 7) will
be made public and sites are at risk of having these issues exploited if they
do not upgrade.

.... What about Drupal 7 and Drupal 9?

Contributed projects like themes and modules will still receive security
advisories if they are compatible with either Drupal 7 or 9 and have opted in
to security coverage.

Drupal 7's end-of-life is currently scheduled for November of 2022 [2], and
it will receive security updates until then. Drupal 9's end-of-life is
scheduled for November of 2023. For more information on release schedules,
see the core release cycle overview [3].


[1]
https://www.drupal.org/docs/upgrading-drupal/how-to-prepare-your-drupal-7-or-8-site-for-drupal-9/upgrading-a-drupal-8-site
[2] https://www.drupal.org/psa-2020-06-24
[3] https://www.drupal.org/core/release-cycle-overview