Release notes for Magnolia CMS 6.3.15

LTS release • Delivered on September 16, 2025 • Page updated on October 15, 2025 • Changelog: 19582

Avoid upgrading to Magnolia 6.3.15 or 6.3.16 in production environments.

Instead, upgrade to Magnolia 6.3.17 or a later version.

Issue summary: A UI freeze in the Rich Text editor (CKEditor 5) occurs, especially when switching tabs or languages, disrupting routine content editing.

The fix is tracked in the ticket MGNLUI-9284.

Magnolia 6.3.15 is a maintenance release focused on stability and usability for developers and administrators, primarily enhancing CKEditor 5 integration and fixing content translation issues. Several security improvements are also included in this release.

Improvements

Enhanced styles in CKEditor 5

Vaadin-compatible styling is moved to the UI framework module. This ensures that only the Vaadin richTextField is affected by the Vaadin-compatible styling. It won’t impact the richTextField in accessible forms or other presentation layers where richTextField instances also rely on CKEditor 5.

MGNLUI-9242

Security improvements

BUILD-1311, BUILD-1446, BUILD-1467, BUILD-1470, MAGNOLIA-9688, MGNLCKE-49, MGNLFORM-409, MGNLREST-880

We keep the details of security fixes private in line with our security policy. Stay informed on the latest security updates by subscribing to our Security Announcements list. Contact our Support team if you need more information.

AuditLoggingManager implementation cannot be overridden

MAGNOLIA-9688 introduces a warning to indicate that the AuditLoggingManager implementation cannot be overridden by other modules. To interact with audit logging events, use event listeners instead of attempting to modify the implementation directly.

Bug fixes

  • MAGNOLIA-9678 Users can’t edit their own profiles due to permissions

  • MGNLCTS-197 Area dialog fields missing from translation export when area is directly under a page template

  • MGNLDAM-1907 Adding files during an ongoing upload duplicates entries and blocks uploads

  • MGNLUI-9243 Reverse deprecation of ConfiguredFormDefinition implementationClass

Miscellaneous

  • MGNLCE-423 Allow direct access to component variants on author by default

    This update sets the value of magnolia.personalization.rest.allowVariants to true in the magnolia.properties file on author instances.

  • MGNLTOMCAT-61 Update org.apache.tomcat:tomcat to 9.0.109

Third-party library updates

This release comes with third-party library updates, see the Magnolia Third-party library BOM 6.3.15.

Notable updates

  • BUILD-1311 Update Vaadin to 8.28.2 or later

  • BUILD-1453 Use commons-lang version 3.1.18 in info.magnolia.ocm:jackrabbit-ocm

Updated modules

Bundled modules included with this release.

  • Barebones Tomcat Bundle 1.2.40

  • CKEditor 5 Build 1.0.9

  • Community Edition 6.3.15

  • Content Editor 3.0.4

  • Content Translation Support 3.0.1

  • DAM 4.0.10

  • DX Core 6.3.15

  • Demo Projects 6.3.15

  • Diff 3.0.2

  • Form 3.0.1

  • Magnolia 6.3.15

  • Pages 6.3.8

  • Personalization 3.0.7

  • REST Framework 3.1.5

  • Solr Search Provider 9.0.1

  • Third-party library BOM for Extensions 6.3.15

  • Third-party library BOM 6.3.15

  • UI 6.3.15

  • Vaadin Compatibility Addons 1.3.20

Unbundled modules

Unbundled modules released since Magnolia 6.3.14.

Acknowledgements

The Magnolia team would also like to thank everyone who reported issues, contributed patches or simply commented on issues for this release. Your continued interest helps us make Magnolia better.

Feedback

DX Core

×

Location

This widget lets you know where you are on the docs site.

You are currently perusing through the DX Core docs.

Main doc sections

DX Core Headless PaaS Legacy Cloud Incubator modules