Release notes for Magnolia CMS 6.2.58

LTS release • Delivered on April 22, 2025 • Changelog: 17374

Magnolia 6.2.58 is primarily a bug-fixing and security release, introducing key enhancements for performance and efficiency. Notable updates include support for Elliptic Curve (EC) cryptography to sign publication requests and the new canSkipProperty and excludeProperty indexing rules, which significantly optimize indexing.

We keep the details of security fixes private in line with our security policy. Contact our Support team if you need more information. You can find which modules were updated, including a list of unbundled modules released, since the previous version of Magnolia.

magnolia-dx-core-webapp-6.2.58.war
magnolia-dx-core-demo-webapp-6.2.58.war
magnolia-community-demo-webapp-6.2.58.war
mtk_2.0.6.zip (as a light module)

Improvements

New signature mechanism for publication tasks

You can now configure Elliptic Curve cryptography (ECC) to sign publication requests. Due to ECC’s shorter key length, it is more performant than RSA signing. With the addition of this signature mechanism, it’s also possible to use cipher algorithms other than RSA for data encryption.

EEPUBLISH-75
PUBLISHING-381
PUBLISHING-382

For more, see How to change the signature algorithm for publication tasks.

New `canSkipProperty` and `excludeProperty` indexing rules

The canSkipProperty and excludeProperty indexing rules allow fine-grained control over which properties are excluded from indexing, improving performance and storage efficiency.

This is an experimental feature. It’s disabled by default and must be enabled in the magnolia.properties configuration file of the Magnolia instance where you want to apply indexing optimization.

magnolia.repositories.jackrabbit.indexing.optimization=true

For more, see Skipping properties.

MAGNOLIA-9632 Implement a rule to exclude properties from indexing

Other improvements

MGNLPN-831 Restrict access to component variants on public instances

Two default voters prevent direct rendering of mgnl:variant nodes via URL. See restricting node type rendering.

Bug fixes

ADMINCTR-490 Screen is blocked after rejecting a publication request
ADMINCTR-578 Performance issue in the Notifications app with many long messages
MAGNOLIA-9579 MgnlVersioningNodeWrapper#remove triggers JCR session save
MAGNOLIA-9592 MgnlPropertySettingSessionWrapper may trigger re-indexing twice

Miscellaneous

Magnolia CLI version 4 reached end-of-life (EOL) on April 16, 2025 and will receive no further updates, including security fixes.

Use CLI v5, which was released on October 16, 2024 and is fully supported. Version 5 is a plugin-based CLI designed for developers seeking modularity and the ability to extend functionalities through custom CLI commands.

Third-party library updates

This release comes with third-party library updates; see the Magnolia Third-party library BOM 6.2.58.

Notable updates

BUILD-1347 Update Apache POI to version 5.4.1
MGNLTOMCAT-53 Update org.apache.tomcat:tomcat to version 9.0.104

Updated modules

Bundled modules included with this release.

Admincentral 6.2.44
DAM 3.0.42
Barebones Tomcat Bundle 1.2.35
Community Edition 6.2.58
DX Core 6.2.58
Magnolia 6.2.58
Personalization 2.1.17
Publishing Transactional 1.2.6
Publishing 1.3.20
Third-party library BOM 6.2.58
UI 6.2.58

Unbundled modules

Unbundled modules released since Magnolia 6.2.57.

E-commerce module 1.3.9 was released on April 10, 2025. For more information, see the changelog.

Acknowledgements

The Magnolia team would also like to thank everyone who reported issues, contributed patches or simply commented on issues for this release. Your continued interest helps us make Magnolia better.

Feedback

DX Core