Release notes for Magnolia CMS 6.2.42

LTS release • Delivered on January 17, 2024 • Changelog: 22822

Magnolia CMS 6.2.42 is primarily a bug-fixing and security release. We keep the details of security fixes private in line with our security policy. Contact our Support team if you need more information.



  • MAGNOLIA-9236 HttpSessionListener to track MgnlUser sessions

  • MGNLSITE-209 External service interaction via HTTP header injection

  • SECURITY-77 Hide the migrated Security app from the UI

  • SECURITY-79 Session invalidation when superadmin changes a user’s password in the Security app

Bug fixes

  • ADMINCTR-511 Session invalidation upon changing password

  • MAGNOLIA-9233 Users whose usernames contain . (dot) can’t log in

  • MAGNOLIA-9239 App Launcher group names are always displayed in English

  • MGNLCACHE-357 4xx and 5xx errors shouldn’t be cached by Magnolia

  • MGNLDAM-1359 Downloading bulk assets doesn’t maintain the structure in MS Windows

  • MGNLUI-8640 JcrHasChildrenRule includes items that aren’t persisted

  • MGNLWORKFLOW-466 Tasks app in unstable state after canceling Show changes dialog

  • MULTISITE-186 Multisite DomainNamePathTransformer creates incorrect external links

  • SECURITY-76 Users whose usernames contain @ (at sign) can’t log in


  • MAGNOLIA-9230 Remove deprecated utility class ObservationUtil

  • MGNLTOMCAT-38 Update dependency org.apache.tomcat:tomcat to version 9.0.85

Third-party library updates

  • net.bytebuddy:byte-buddy to version 1.14.11

  • org.jetbrains.kotlin:kotlin-bom to version 1.9.22

  • org.jsoup:jsoup to version 1.17.2

  • to version 2.21.46

  • swaggerCoreVersion to version 2.2.20

Updated modules

  • AdminCentral 6.2.36

  • Barebones Tomcat Bundle 1.2.24

  • Cache 5.9.10

  • Community Edition 6.2.42

  • DAM 3.0.29

  • DX Core 6.2.42

  • Magnolia 6.2.42

  • Multisite 2.1.4

  • Pages 6.2.34

  • Security 6.2.20

  • Site 1.4.6

  • Third party library BOM 6.2.42

  • UI 6.2.42

  • Workflow 6.0.12


The Magnolia team would also like to thank everyone who reported issues, contributed patches or simply commented on issues for this release. Your continued interest helps us make Magnolia better.

Thanks a mill!

Special thanks go out to Tom Wespi.


DX Core



This widget lets you know where you are on the docs site.

You are currently perusing through the DX Core docs.

Main doc sections

DX Core Headless PaaS Legacy Cloud Incubator modules