Magnolia 4.5 reached end of life on June 30, 2016. This branch is no longer supported, see End-of-life policy.

Page tree
Skip to end of metadata
Go to start of metadata

Released on January 14, 2014

What has changed since Magnolia 4.4.12

Magnolia 4.4.13 delivers the following fixes and enhancements:

  • Fixed a URI security vulnerability.
  • Removed support for request attributes and parameters in PageMVCServlet and implemented a strict URL pattern.
  • Fixed cross-site security issues where sibling sites were accessible through the default site or through a particular path handle.
  • Denied editorial demo roles (editors, publishers) access to configuration and tools pages. 

An aggregated change log for 4.4.13 contains all the changes.

This release is a recommended update for all users of Magnolia 4.4.

Updated modules

This release includes the following new module versions:

  • Magnolia 4.4.13
  • Enterprise Edition 4.4.13
  • Extended Templating Kit 1.4.7
  • Standard Templating Kit 1.4.10

The Magnolia team would also like to thank everyone who reported issues, contributed patches, or simply commented on issues for this release. Your continued interest helps us make Magnolia better. Special thanks go to Frank Sommer and Peter Varga.

How to update from Magnolia 4.4.x and earlier

Follow the standard update process.

Are you running on Magnolia 4.4 or earlier? It’s time to move to 4.5 and then to 5. Contact us for migration support and look at the migration process.

Known issues

See: Known issues.