Magnolia 5.7 reached extended end of life on May 31, 2022. Support for this branch is limited, see End-of-life policy. Please note that to cover the extra maintenance effort, this EEoL period is a paid extension in the life of the branch. Customers who opt for the extended maintenance will need a new license key to run future versions of Magnolia 5.7. If you have any questions or to subscribe to the extended maintenance, please get in touch with your local contact at Magnolia.
Magnolia CMS 5.7.32 is the thirteenth Extended end-of-life (EEoL) maintenance release, which brings security and library updates.
We keep the details of security fixes private in line with our security policy. Contact our Support team if you need more information.
Should you require access to the updates of 5.7 under the EEoL conditions, please contact your sales representative.
Security improvements
PatternLayout
of the Log4j2 configurations in CE and DX Core webapps uses the built-in%encode
function with theCRLF
encoding scheme (MGNLCE-363).- Safer serialization in
info.magnolia.cms.core.version.BaseVersionManager
(MAGNOLIA-8987).
Third-party library updates
- CKEditor to version
1.3.14
(MGNLVA-32). com.squareup.okio:okio
to version3.4.0
andcom.nmote.oembed:nmote-oembed
to version0.9-magnolia-BUILD-1115
(BUILD-1115).org.apache.tomcat:tomcat
to version9.0.79
(MGNLTOMCAT-34).
Others
If you are upgrading from an earlier version, read Upgrading to Magnolia 5.7.x first and check the Known issues section on the page.
Changelog
See the 5.7.32 changelog for all the changes.
- Barebones Tomcat Bundle
1.1.19
- Community Edition
5.7.32
- Enterprise Edition
5.7.32
- Magnolia
5.7.32
- Third-party library BOM
5.7.29
- UI
5.7.32
- Vaadin Compatibility Addons
1.3.14
Acknowledgements
The Magnolia team would also like to thank everyone who reported issues, contributed patches or simply commented on issues for this release.