/
X-Road v7.5.2 Release Notes

X-Road v7.5.2 Release Notes

Release Info

Version number

7.5.2

Release date

26.12.2025

Supported versions

  • 7.7.1

  • 7.6.3

  • 7.5.2

Supported platforms

Central Server

  • Ubuntu 20.04 LTS

  • Ubuntu 22.04 LTS

  • Ubuntu 24.04 LTS

Configuration Proxy

  • Ubuntu 20.04 LTS

  • Ubuntu 22.04 LTS

  • Ubuntu 24.04 LTS

Security Server

  • Ubuntu 20.04 LTS

  • Ubuntu 22.04 LTS

  • Ubuntu 24.04 LTS

  • RHEL 7

  • RHEL 8

  • RHEL 9

  • Docker

Official documentation

https://github.com/nordic-institute/X-Road/tree/master/doc

Source code

https://github.com/nordic-institute/X-Road/tree/master

Software license

MIT

 

On this page:

 

Changes in This Release

Summary

  • Fix a security vulnerability discovered and reported by Sivaaditya Panuganti.

Completed Issues

Issue ID

Type

Summary

Issue ID

Type

Summary

XRDDEV-3054

Fix

Resolve an issue that enabled path traversal attacks against connected REST services when access permissions were defined at the endpoint level and wildcard expressions were used in path definitions.

Issue types: fix (bug fix or technical debt), improvement (improvement to an existing feature), new (a new feature).

New/Updated Dependencies

Dependency

Old Version

New Version

Dependency

Old Version

New Version

ch.qos.logback:logback-classic

1.4.14

 1.5.20

ch.qos.logback:logback-access

1.4.14

 

ch.qos.logback.access:logback-access-tomcat

 

2.0.7

org.apache.tika:tika-core

2.9.2

3.2.2

org.postgresql:postgresql

42.7.3

42.7.5

org.springframework.boot:spring-boot-dependencies

3.3.1

3.3.9

org.springframework.boot:spring-boot-starter-test

3.3.1

3.3.9

org.springframework.boot:spring-boot-starter-web

3.3.1

3.3.9

Contributors

The following developers have contributed to the development of this release version. A contribution means at least one Git commit that is included in the release. The full list of contributors of different X-Road® versions is available here.

GitHub Username

GitHub Username

ricardas-buc

Other Notes

Package Repositories

Repository

URL

Repository

URL

Focal

deb https://artifactory.niis.org/xroad-release-deb focal-7.5.2 main

Jammy

deb https://artifactory.niis.org/xroad-release-deb jammy-7.5.2 main

Noble

deb https://artifactory.niis.org/xroad-release-deb noble-7.5.2 main

RPM / RHEL7

https://artifactory.niis.org/xroad-release-rpm/rhel/7/7.5.2/

RPM / RHEL8

https://artifactory.niis.org/xroad-release-rpm/rhel/8/7.5.2/

RPM / RHEL9

https://artifactory.niis.org/xroad-release-rpm/rhel/9/7.5.2/

Docker

https://hub.docker.com/r/niis/xroad-security-server-sidecar

Repository Sign Key Details

Download URL

https://artifactory.niis.org/api/gpg/key/public

Hash

935CC5E7FA5397B171749F80D6E3973B

Fingerprint

A01B FE41 B9D8 EAF4 872F A3F1 FB0D 532C 10F6 EC5B

3rd party key server

Ubuntu key server

Packages

Focal

Package

SHA256 checksum

Package

SHA256 checksum

xroad-addon-hwtokens_7.5.2-1.ubuntu20.04_amd64.deb

931d57f7f5510f1c029fa39dd4a89f02fb85ac09c89c7cb259a0e1d41b3ab658

xroad-addon-messagelog_7.5.2-1.ubuntu20.04_all.deb

e9a52cac533fcbd0243b529a670c62b86a294816cd2139d6ba7166cd4b3238c9

xroad-addon-proxymonitor_7.5.2-1.ubuntu20.04_all.deb

6a269de0e20f4c0748ea345fa293d1590079ebcd760fad921c41699444a210de

xroad-addon-metaservices_7.5.2-1.ubuntu20.04_all.deb

f16b533195bb1ecef82f52fdb8ad7d1e074715e7b7343182449b1d8ce01f8e57

xroad-base_7.5.2-1.ubuntu20.04_amd64.deb

ed2ba4de54c5132bcd839cb86b4fc110263dd495071fa79aa1b03a90eea9d105

xroad-addon-wsdlvalidator_7.5.2-1.ubuntu20.04_all.deb

0c8673d4411b84a6689399404786a85df67baa2cab036ba75e32c1da83a242f7

xroad-addon-opmonitoring_7.5.2-1.ubuntu20.04_all.deb

96e593044a9d58aace2293b8c8bedae85981212c9378df3fc13b1ac12cfd6080

xroad-autologin_7.5.2-1.ubuntu20.04_all.deb

f8265c4554a94c171acbdc28473b257403ccec9f6d7150201f4455a08c8a52d7

xroad-center_7.5.2-1.ubuntu20.04_all.deb

a7ac9a0227439c5dbf6345e507089d5551b98a8be05406abe3c5df9f29ff4ab6

xroad-center-management-service_7.5.2-1.ubuntu20.04_all.deb

d9eb4c9155a9b52a1adb721febf059df0fc0add612e02275330c40321f0a3f90

xroad-center-registration-service_7.5.2-1.ubuntu20.04_all.deb

422b30da71fafa01a851fda1479ec367cd8612e0a393591aada0cc3637031933

xroad-centralserver_7.5.2-1.ubuntu20.04_all.deb

b58ba310f349518fa28b0354e1f00f853a66caed2c043b4d379cdfc678e16283

xroad-confclient_7.5.2-1.ubuntu20.04_amd64.deb

55175168b2c644f0489a9458f10bbb21f3db8aa2dd8ec524ea396c9676743ed8

xroad-centralserver-monitoring_7.5.2-1.ubuntu20.04_all.deb

9ec447ad21247432f886cde3d42d3d0c50cb301178fe05fdda2e1d1ca8fc4496

xroad-confproxy_7.5.2-1.ubuntu20.04_all.deb

380ba62793fe72027eeb64807a7aec9995d9e412cec0b01819e9b45ee6ee35ae

xroad-database-remote_7.5.2-1.ubuntu20.04_all.deb

e38665e37ed199b52d5d2685f759f1d8bacf4c071ed5366e7cfe15d372883686

xroad-database-local_7.5.2-1.ubuntu20.04_all.deb

b4f941b20222bc77a0377680ce9822a87f0836d3173017109c59599b877bd535

xroad-nginx_7.5.2-1.ubuntu20.04_amd64.deb

4c557021ac7bb8d5c9158a97ae9a5eea4901f7634b978cc8302f8cc27144b74b

xroad-monitor_7.5.2-1.ubuntu20.04_all.deb

e54277a23f2b6e1ec3b424749e15ac62d4ab28ef00a7e669efd67c338ded4088

xroad-opmonitor_7.5.2-1.ubuntu20.04_all.deb

7e47fbbea50406627d8e869e9d13458fa25d2606acc8915b56db61b1a8aa926b

xroad-proxy_7.5.2-1.ubuntu20.04_all.deb

e589e545a05fcb23f8d3dd0994f899b287ae0988603f65121263e3871d9996b5

xroad-proxy-ui-api_7.5.2-1.ubuntu20.04_all.deb

803fbc5bbc834877303346b03f8744d66436e8af020598a10c7b325535e6fd8d

xroad-securityserver-is_7.5.2-1.ubuntu20.04_all.deb

ce1aa33378c3044c235ae79e430ff9b1ac424a5b73c227521195e9bf517d0368

xroad-securityserver_7.5.2-1.ubuntu20.04_all.deb

30f1c103b3ddd7668ac56b7201685cea685a8c8f8af5961629ea26f1ef2bd2a9

xroad-securityserver-fi_7.5.2-1.ubuntu20.04_all.deb

480554af74102e2bdeee37ffd4071f4d35b0a830afd5fcf8d189301f0a56ca8c

xroad-securityserver-fo_7.5.2-1.ubuntu20.04_all.deb

e9ca17db3e562d2068ef6d3c129159d200e94b362d1425cb84783e451391751e

xroad-securityserver-ee_7.5.2-1.ubuntu20.04_all.deb

18a3806bddeb3b0dfdc98d22be82d4e83d6590d1e9446b1849d26555acbb1d8c

xroad-signer_7.5.2-1.ubuntu20.04_amd64.deb

605a54a9774d7fc97559fae457f5f15c4ed1eb079a3d04f9273c0e280346e8c5

Jammy

Package

SHA256 checksum

Package

SHA256 checksum

xroad-addon-hwtokens_7.5.2-1.ubuntu22.04_amd64.deb

3ba96b4ff59256025ee17989699a5f2da5afc9c701075d63769a7472723821a6

xroad-addon-messagelog_7.5.2-1.ubuntu22.04_all.deb

c421ccf9533045a9e221c3c7c5c5f6872274af0a513f67ec5023f82fb5e74b60

xroad-addon-proxymonitor_7.5.2-1.ubuntu22.04_all.deb

7eeb8e301238ed5a39351561e18ccb8c57bae1589ae7f0fa03f7f50ceb68d592

xroad-addon-opmonitoring_7.5.2-1.ubuntu22.04_all.deb

0b1f7e22a091e2ff6b336719c31054e414ba07b43e961cdab5426365e37d1bc8

xroad-base_7.5.2-1.ubuntu22.04_amd64.deb

9d6464300e163824950bbb5ec99b3adf0de2468355b15c58c0d749049a0f74a8

xroad-addon-wsdlvalidator_7.5.2-1.ubuntu22.04_all.deb

3254426548f7f062a3fe1b338738fc1b94e2df666c42a2ca92e283655ee84a7f

xroad-autologin_7.5.2-1.ubuntu22.04_all.deb

1d6d68fe9d02d6f40ef12fe85122a313ba7b419772de7e3321e53d3aedec54a6

xroad-addon-metaservices_7.5.2-1.ubuntu22.04_all.deb

d17080fdc79bfd8f4938c45aff6caafd3d69e9ec16518384ae5117406e159a95

xroad-center_7.5.2-1.ubuntu22.04_all.deb

bcbf5058f6231c0d86926a4b407a09ae740977f2f3870cd0cd0f3413e8864ba9

xroad-center-management-service_7.5.2-1.ubuntu22.04_all.deb

37c02c7be12480b3c276b89318e21bc49dab34af9fac66084a880556f9c6f4d5

xroad-center-registration-service_7.5.2-1.ubuntu22.04_all.deb

91c5919eaeb29ce68c5d60a93adbce24611d4ab765f1e4443b970bc4f28a4dbb

xroad-centralserver_7.5.2-1.ubuntu22.04_all.deb

7f712fa9f6a0d42d0f1abb0b90ce30dad0e31c34d6c937c201422a06bfcb0c65

xroad-confclient_7.5.2-1.ubuntu22.04_amd64.deb

3a5dfac94f25e651df720532f7f1861ba225d9c5e1a5eae44936fe897c99f637

xroad-centralserver-monitoring_7.5.2-1.ubuntu22.04_all.deb

a0a09233423f2f16b02878e5fb4f04bdf8054ef356146043578e7a334fdbe0da

xroad-confproxy_7.5.2-1.ubuntu22.04_all.deb

0e419a59a6ee5482eddb64a10a158fbb5eef28fbe5293b8ee58bb8b6e876e054

xroad-database-local_7.5.2-1.ubuntu22.04_all.deb

81090345e56241b37281524fa1108b152be930718efeb33f4bdd2a430f4b552c

xroad-database-remote_7.5.2-1.ubuntu22.04_all.deb

c07abea9f30665b57db14dd2771d240895cf34f58f8e439663b39d00e5e24924

xroad-monitor_7.5.2-1.ubuntu22.04_all.deb

fbaad3aca074ca4241c8fc60cf7131649e43a8fe6b6bc1ee077675a4a93b62b7

xroad-nginx_7.5.2-1.ubuntu22.04_amd64.deb

4f19d16ce0717c1e7fd6be1cd6eef6535d48ce6efe513fae468e65d9920cf14b

xroad-opmonitor_7.5.2-1.ubuntu22.04_all.deb

9bf1f8bba8fd920e12dc71c20751d5d49fc2bbc86244d9d190ef5abc41792dac

xroad-proxy_7.5.2-1.ubuntu22.04_all.deb

2a439736c9fe270483ff78c4b4196ed84c6ba2b0ca73a551e4328ab9e6472642

xroad-proxy-ui-api_7.5.2-1.ubuntu22.04_all.deb

c653184cf89683d40772a1f6fa368c1e8a5295921e9763902b19695655684333

xroad-securityserver-is_7.5.2-1.ubuntu22.04_all.deb

56b44e77637a77f568cfdba08e639c312b8e8f4ae54528962d452d8ca9d4e591

xroad-securityserver-fi_7.5.2-1.ubuntu22.04_all.deb

522c742ef542e4950317af03028bdf1c50d9dc75d1f5f7e7ee372e4e80a9e033

xroad-securityserver_7.5.2-1.ubuntu22.04_all.deb

3092e17205cd51cc4d051421a4e98a6c6c4c36c787880b89bc12a3d28b536ec5

xroad-securityserver-ee_7.5.2-1.ubuntu22.04_all.deb

6a1be3b643a70b6659b38d3e7f4c5751d512a5117c973e4fe4d6f5696411f3c7

xroad-securityserver-fo_7.5.2-1.ubuntu22.04_all.deb

b1453e1b08270c3dbecc50705f8f884dbdd72a212043d4776452bdf94ae83b50

xroad-signer_7.5.2-1.ubuntu22.04_amd64.deb

c92cf7a56a9f8034755fa545c8cf51835fdc34a86a23489890262945e67a167c

Noble

Package

SHA256 checksum

Package

SHA256 checksum

xroad-addon-hwtokens_7.5.2-1.ubuntu24.04_amd64.deb

7f73c579daf09cbd20cea6efbcb3c56eeaebc02f9ff5e3288500252ed6a57fd7

xroad-addon-messagelog_7.5.2-1.ubuntu24.04_all.deb

d106c89779aba7560f317f97c1e2e523e8ff94e11387577a7b54203cf00521b6

xroad-addon-metaservices_7.5.2-1.ubuntu24.04_all.deb

95839025df0b410fb4d851a1558df246857893848574ac77f65fc12d7d2e2e85

xroad-addon-wsdlvalidator_7.5.2-1.ubuntu24.04_all.deb

5033d55a4b974a905a07a585f83ed7c5e13aa30e4379b6fde2feb479b1a6b09a

xroad-addon-proxymonitor_7.5.2-1.ubuntu24.04_all.deb

d1a91e2649d99f33f08dc449fcdb1111ab616ec9d1fbd2d3ad9fd441598cd748

xroad-autologin_7.5.2-1.ubuntu24.04_all.deb

d533e0050619c59476f2601b5233e55e5d10cef53c39d30861c6458deab144e3

xroad-base_7.5.2-1.ubuntu24.04_amd64.deb

6130fce6eca18a2a470cc89462497fcc04682347a6c1ce1ddabf6eed21b2f0c2

xroad-addon-opmonitoring_7.5.2-1.ubuntu24.04_all.deb

60100b4e767cd6ce1a43adc61c5c53cb61f65057b75ad8883db8bf3472ac0460

xroad-center_7.5.2-1.ubuntu24.04_all.deb

bddfad5d440c8e33c0b74549dcb1002329d6b9b13b4fbc6c38b1cb32679f2e26

xroad-center-management-service_7.5.2-1.ubuntu24.04_all.deb

1a44628bbc09a127e7dd0b754d5a188f0be436937baaa3b86fe692840edc05c7

xroad-center-registration-service_7.5.2-1.ubuntu24.04_all.deb

6d2af91d3e393e13bd9a79c03edfbc6c5c9cd19a087954dbfc41c33d79638df6

xroad-confclient_7.5.2-1.ubuntu24.04_amd64.deb

bb34937d00b6865e4223ee195d66cea08b332e4905d32e6bc0a7f2c941419ada

xroad-centralserver_7.5.2-1.ubuntu24.04_all.deb

e20ecd5edf6087d65d797a98dd94d513adf3906e7fedd0b0befd9dafb6531952

xroad-centralserver-monitoring_7.5.2-1.ubuntu24.04_all.deb

cfdbd35bb1b8eba71a117efe9453ac930a6f2ec8f4e3a68741143f64c5337bed

xroad-confproxy_7.5.2-1.ubuntu24.04_all.deb

7df914b822afbea79021ca6f8307b257fb696304e53a752d912821d305f0f779

xroad-database-local_7.5.2-1.ubuntu24.04_all.deb

edc0b2751734f2721881f1c31a3477d3c6847295da71e490dec2a17bba075138

xroad-database-remote_7.5.2-1.ubuntu24.04_all.deb

4ba6e962b6dca1ca401139536317223095e289a524a280e836546b8b5248145d

xroad-monitor_7.5.2-1.ubuntu24.04_all.deb

f8b419718274948541d30b006ffa0f345a5cd0ee217dbedab5a00614d8549414

xroad-nginx_7.5.2-1.ubuntu24.04_amd64.deb

d116d31d513857510673c25b3137f59a88f967fa96b2fb1fe67ab3fa6ff4a1a8

xroad-opmonitor_7.5.2-1.ubuntu24.04_all.deb

0898c89a4c4facdf5f78c37cc72292089b74ac9538c4627bbde29ad8c92b1ae4

xroad-proxy_7.5.2-1.ubuntu24.04_all.deb

3cfd1f0385d642054276ad22ed1576cd0124f5fab7b7813e0e6d1765671d6c6f

xroad-proxy-ui-api_7.5.2-1.ubuntu24.04_all.deb

0790d732f3712003e863b32b22024f55d96231e6ab433604a1fccc486d60f1af

xroad-securityserver-fo_7.5.2-1.ubuntu24.04_all.deb

96719061b101230adbc1d938399a376cd299938b29712a479cc7ed44afd58efe

xroad-securityserver-is_7.5.2-1.ubuntu24.04_all.deb

44641e14194679f1c391b8b73fdb088f4ae78fd007dac37144b3fa7bd77c202b

xroad-securityserver-ee_7.5.2-1.ubuntu24.04_all.deb

c0cc44baf81f619343652dcac9833c6b51f8c02a8a6f8f068fbd025bd53a5865

xroad-securityserver-fi_7.5.2-1.ubuntu24.04_all.deb

cbaee1a0a441b7a836d4b249f7207394bbf38e5b04cf69ea91057039a3fbcaa5

xroad-securityserver_7.5.2-1.ubuntu24.04_all.deb

b97871daa3da6768384f8f27618523bd853efc9d3cd00cb2b2b098fef6008e92

xroad-signer_7.5.2-1.ubuntu24.04_amd64.deb

bc34c15ada0bce245a347bc1380ff8fa9ed9a5f9df5052aae9d0f5fe08abf000

RPM / RHEL7

Package

SHA256 checksum

Package

SHA256 checksum

xroad-addon-messagelog-7.5.2-1.el7.x86_64.rpm

2527d8dfe1641320dcae3f9ebff7e3af1ee138f3508f55524aca02bf70d33226

xroad-addon-metaservices-7.5.2-1.el7.x86_64.rpm

ed1dde3d05f9db2cc6fd3406a2f23ce155c722c0daf24a50bcc7d9114bec9bb2

xroad-addon-opmonitoring-7.5.2-1.el7.x86_64.rpm