Release notes for Magnolia CMS 6.2.65

LTS release • Delivered on September 26, 2025 • Changelog: 19945

Magnolia 6.2.65 is primarily a bug-fixing and security release, including an update to the default JDNI settings.

Improvements

  • MAGNOLIA-9743 Add ability to check the AuditLoggingManager is active for specific action

Security improvements

BUILD-1311, BUILD-1467, BUILD-1470, BUILD-1471, MAGNOLIA-9719, MGNLFORM-409, MGNLREST-880

We keep the details of security fixes private in line with our security policy. Stay informed on the latest security updates by subscribing to our Security Announcements list. Contact our Support team if you need more information.

JNDI disabled by default

You are only affected if you configured a custom contextFactoryClass or providerURL in your repository.xml file as these configurations are no longer supported by default.

To use JNDI, set the system property jackrabbit.jndi.enabled to true.

Example
export JAVA_OPTS="$JAVA_OPTS -Djackrabbit.jndi.enabled=true"
If enabled, ensure repository registration and lookup through JNDI is done through configuration values. Using user supplied values is a potential security risk and should be avoided.

Bug fixes

  • ADMINCTR-618 Stack overflow in Notifications app when publishing many assets

  • MAGNOLIA-9678 Users can’t edit their own profiles due to permissions

  • MGNLCTS-197 Area dialog fields missing from translation export when area is directly under page template

  • MGNLDAM-1937 Adding files during an ongoing upload duplicates entries and blocks uploads

Miscellaneous

  • MGNLTOMCAT-61 Update org.apache.tomcat:tomcat to version 9.0.109

Third-party library updates

This release comes with third-party library updates, see the Magnolia Third-party library BOM 6.2.65.

Notable updates

  • BUILD-1453 Use commons-lang 3.1.18 in info.magnolia.ocm:jackrabbit-ocm

Updated modules

Bundled modules included with this release.

  • Admincentral 6.2.46

  • Barebones Tomcat Bundle 1.2.40

  • Cache 5.9.23

  • Community Edition 6.2.65

  • Content Editor 1.3.19 and 2.1.15

  • Content Translation Support 2.5.12

  • DAM 3.0.46

  • DX Core 6.2.65

  • Form 2.7.9

  • Magnolia 6.2.65

  • Pages 6.2.44

  • Personalization 2.1.20

  • REST Framework 2.2.34

  • Third-party library BOM 6.2.65

  • UI 6.2.65

  • Vaadin Compatibility Addons 1.3.20

Unbundled modules

Unbundled modules released since Magnolia 6.2.64.

Acknowledgements

The Magnolia team would also like to thank everyone who reported issues, contributed patches or simply commented on issues for this release. Your continued interest helps us make Magnolia better.

Thanks a mill!

Special thanks go out to Vinit Mevada.

Feedback

DX Core

×

Location

This widget lets you know where you are on the docs site.

You are currently perusing through the DX Core docs.

Main doc sections

DX Core Headless PaaS Legacy Cloud Incubator modules