Release notes for Magnolia CMS 6.3.15

LTS release • Delivered on September 16, 2025 • Changelog: 19582

Magnolia 6.3.15 is a maintenance release focused on stability and usability for developers and administrators, primarily enhancing CKEditor 5 integration and fixing content translation issues. Several security improvements are also included in this release.

Improvements

Enhanced styles in CKEditor 5

Vaadin-compatible styling is moved to the UI framework module. This ensures that only the Vaadin richTextField is affected by the Vaadin-compatible styling. It won’t impact the richTextField in accessible forms or other presentation layers where richTextField instances also rely on CKEditor 5.

MGNLUI-9242

Security improvements

BUILD-1311, BUILD-1446, BUILD-1467, BUILD-1470, MAGNOLIA-9688, MGNLCKE-49, MGNLFORM-409, MGNLREST-880

We keep the details of security fixes private in line with our security policy. Stay informed on the latest security updates by subscribing to our Security Announcements list. Contact our Support team if you need more information.

AuditLoggingManager implementation cannot be overridden

MAGNOLIA-9688 introduces a warning to indicate that the AuditLoggingManager implementation cannot be overridden by other modules. To interact with audit logging events, use event listeners instead of attempting to modify the implementation directly.

Bug fixes

  • MAGNOLIA-9678 Users can’t edit their own profiles due to permissions

  • MGNLCTS-197 Area dialog fields missing from translation export when area is directly under a page template

  • MGNLDAM-1907 Adding files during an ongoing upload duplicates entries and blocks uploads

  • MGNLUI-9243 Reverse deprecation of ConfiguredFormDefinition implementationClass

Miscellaneous

  • MGNLCE-423 Allow direct access to component variants on author by default

    This update sets the value of magnolia.personalization.rest.allowVariants to true in the magnolia.properties file on author instances.

  • MGNLTOMCAT-61 Update org.apache.tomcat:tomcat to 9.0.109

Third-party library updates

This release comes with third-party library updates, see the Magnolia Third-party library BOM 6.3.15.

Notable updates

  • BUILD-1311 Update Vaadin to 8.28.2 or later

  • BUILD-1453 Use commons-lang version 3.1.18 in info.magnolia.ocm:jackrabbit-ocm

Updated modules

Bundled modules included with this release.

  • Barebones Tomcat Bundle 1.2.40

  • CKEditor 5 Build 1.0.9

  • Community Edition 6.3.15

  • Content Editor 3.0.4

  • Content Translation Support 3.0.1

  • DAM 4.0.10

  • DX Core 6.3.15

  • Demo Projects 6.3.15

  • Diff 3.0.2

  • Form 3.0.1

  • Magnolia 6.3.15

  • Pages 6.3.8

  • Personalization 3.0.7

  • REST Framework 3.1.5

  • Solr Search Provider 9.0.1

  • Third-party library BOM for Extensions 6.3.15

  • Third-party library BOM 6.3.15

  • UI 6.3.15

  • Vaadin Compatibility Addons 1.3.20

Unbundled modules

Unbundled modules released since Magnolia 6.3.14.

Acknowledgements

The Magnolia team would also like to thank everyone who reported issues, contributed patches or simply commented on issues for this release. Your continued interest helps us make Magnolia better.

Feedback

DX Core

×

Location

This widget lets you know where you are on the docs site.

You are currently perusing through the DX Core docs.

Main doc sections

DX Core Headless PaaS Legacy Cloud Incubator modules