Release notes for Magnolia CMS 6.2.57

LTS release • Delivered on April 10, 2025 • Changelog: 16877

Magnolia 6.2.57 is primarily a bug-fixing and security release that delivers critical security fixes and also a breaking change in the SPA template annotations endpoint.

You can find which modules were updated, including a list of unbundled modules released, since the previous version of Magnolia.

We keep the details of security fixes private in line with our security policy. Contact our Support team if you need more information.

magnolia-dx-core-webapp-6.2.57.war
magnolia-dx-core-demo-webapp-6.2.57.war
magnolia-community-demo-webapp-6.2.57.war
mtk_2.0.6.zip (as a light module)

Breaking changes

Removal of the `bypassWorkspaceAcls` property

Due to security considerations, we’ve removed the bypassWorkspaceAcls property from the template annotations endpoint.

To maintain the ability to edit your SPA project, you can implement several solutions. The recommended one is the following:

Create a user in Magnolia specifically for the purpose of making requests from your frontend.
Assign it a role with write access to the website repository.
Update the frontend project to include the username and password via basic authentication when it makes requests to the Magnolia endpoints.

For the other solutions, see the bypassWorkspaceAcls property.

We also suggest enhancing the security of the author instance through additional measures, such as restricting access to specific IP addresses (through /server/IPConfig) or placing it behind a firewall.

PAGES-1698

Improvements

MGNLWORKFLOW-524 Performance issue for workflow creation and the Approve & publish action

Bug fixes

IMGREC-132 Error thrown when the asset isn’t an image, multiple calls made to recognize the same asset
MAGNOLIA-9527 Copy/Paste action doesn’t fill lastModified and lastModifiedBy properties
MAGNOLIA-9552 Handling Japanese characters properly in various places
MAGNOLIA-9569 Provide a signing/verification functionality in SecurityUtil and enable the usage of the EllipticCurve crypto algorithm
MGNLREST-850 StatusEndpoint#isDataStoreReady should unwrap test node from MgnlVersioningNodeWrapper
MGNLUI-9073 Find Bar search can throw errors when searching through many content pages

Third-party library updates

This release comes with third-party library updates; see the Magnolia Third-party library BOM 6.2.57.

Notable updates

BUILD-1340 Update webp-imageio to version 0.9.0

Updated modules

Bundled modules included with this release.

Community Edition 6.2.57
DX Core 6.2.57
Demo Projects 1.6.14
Image Recognition 1.2.7
Magnolia 6.2.57
Pages 6.2.42
REST Framework 2.2.30
Third-party library BOM 6.2.57
UI 6.2.57
Workflow 6.0.17

Unbundled modules

Unbundled modules released since Magnolia 6.2.56.

Content Translation Extended module 3.5.2 as released on April 9, 2025. For more information, see the changelog.
Frontify module 1.0.7 as released on April 7, 2025. For more information, see the changelog.
Live Copy 3.2.20 was released on March 26, 2025. For more information, see the changelog.

Acknowledgements

The Magnolia team would also like to thank everyone who reported issues, contributed patches or simply commented on issues for this release. Your continued interest helps us make Magnolia better.

Feedback

DX Core