Is CQ 5.6.0 Security Hotfix 3659 needed on a CQ 5.6.1 instance?

[stewart_leach]

I haven't been able to find any explicit information in the 5.6.1 release notes about which security hotfixes are included, so just wanted to confirm if the 5.6.0 Security Hotfix 3659 improvements are already part of the 5.6.1 release? Or should it also be installed on 5.6.1 instances?

I'd expect there would be a seperate hotfix, specific for 5.6.1, if this were the case, but seeing as I'm new to AEM, I just wanted to check.

Thanks

Stewart

[b_eger]

This is by no means an official statement - just what I found out while checking the same question:

Hotfix 3659 contains the bundle org.apache.sling.auth.core in version 1.1.4. AEM 5.6.1 has 1.1.2 so it would seem likely that the hotfix must be installed there too.

But still: official confirmation by Adobe would be nice 😉

[Peter_Klassen · Accepted solution]

Hi Benedict, hi Stewart,

pls expect the Security Update for AEM 5.6.1 to be released still this week under the title CQ 5.6.1 SECURITY UPDATE NPR-3707. All known AEM 5.6.1 customers will be informed via email.

thanks & regards

peter

peter klassen - @PeterKlassen - product manager web experience management platform & customer success - adobe