Release notes for Magnolia CMS 6.3.14

LTS release • Delivered on August 14, 2025 • Changelog: 19318

Magnolia 6.3.14 is primarily a bug-fixing and security release that also externalizes the ipSecurity filter to the MicroProfile config to ensure no risk of lockout, as it does not rely on JCR accessibility. Additionally, the Assets app now allows users to select folders for bulk downloads and displays a progress bar during the upload of multiple assets.

We keep the details of security fixes private in line with our security policy. Contact our Support team if you need more information.

Improvements

MAGNOLIA-9676 Externalize IpSecurityManager configuration out of JCR into the MicroProfile Config

For more, see IP and HTTP permissions.
MGNLDAM-1858 Assets app: Enable folder selection for bulk downloads
MGNLDAM-1883 Show a progress bar when uploading multiple assets
MGNLREST-877 Introduce @JacksonJsr310 annotation for enabling and handling Java 8 support for date/time formatting

Security improvements

BUILD-1437, MGNLREST-875, MGNLTOMCAT-59

We keep the details of security fixes private in line with our security policy. Stay informed on the latest security updates by subscribing to our Security Announcements list. Contact our Support team if you need more information.

Security hardening for delivery endpoints

MGNLREST-875 introduces automatic encoding of content output for REST delivery endpoints. Content escaping is now enabled by default on delivery endpoints so that the resulting JSON can be parsed correctly by recipients.

See also the new magnolia.delivery.escaping property on the Configuration management page for more details.

Bug fixes

CONTTAGS-144 In Tags, show the full label of content and the tagged content list
TASKMGMT-36 Scheduled pages don’t publish if scheduled during a downtime

For more, see Rescheduling tasks after downtime.

Updated modules

Bundled modules included with this release.

Admincentral 6.3.7
Barebones Tomcat Bundle 1.2.39
CKEditor 5 Build 1.0.7
Community Edition 6.3.14
Content Tags 3.0.1
DAM 4.0.9
DX Core 6.3.14
Demo Projects 6.3.14
Magnolia 6.3.14
REST Framework 3.1.4
Task Management 2.0.2
Third-party library BOM for Extensions 6.3.14
Third-party library BOM 6.3.14
UI 6.3.14
Workflow 7.0.6

Unbundled modules

Unbundled modules released since Magnolia 6.3.13.

AI Accelerator 2.2.7
Blossom module 3.6.7

Image Recognition 3.0.0-beta2 (technical preview)

This 3.0.0-beta2 release is compatible with Magnolia 6.3 only when used with the technical preview of DAM 5 (5.0.0-beta2). Do not upgrade to the Image Recognition module 3.0.0-beta2 if you’re not testing the DAM 5 technical preview.

Acknowledgements

The Magnolia team would also like to thank everyone who reported issues, contributed patches or simply commented on issues for this release. Your continued interest helps us make Magnolia better.

Feedback

DX Core