/
X-Road v7.6.3 Release Notes

X-Road v7.6.3 Release Notes

Release Info

Version number

7.6.3

Release date

26.12.2025

Supported versions

  • 7.7.1

  • 7.6.3

  • 7.5.2

Supported platforms

Central Server

  • Ubuntu 22.04 LTS

  • Ubuntu 24.04 LTS

Configuration Proxy

  • Ubuntu 22.04 LTS

  • Ubuntu 24.04 LTS

Security Server

  • Ubuntu 22.04 LTS

  • Ubuntu 24.04 LTS

  • RHEL 8

  • RHEL 9

  • Docker

Official documentation

https://github.com/nordic-institute/X-Road/tree/master/doc

Source code

https://github.com/nordic-institute/X-Road/tree/master

Software license

MIT

 

On this page:

 

Changes in This Release

Summary

  • Fix a security vulnerability discovered and reported by Sivaaditya Panuganti.

Completed Issues

Issue ID

Type

Summary

Issue ID

Type

Summary

XRDDEV-3054

Fix

Resolve an issue that enabled path traversal attacks against connected REST services when access permissions were defined at the endpoint level and wildcard expressions were used in path definitions.

Issue types: fix (bug fix or technical debt), improvement (improvement to an existing feature), new (a new feature).

 

New/Updated Dependencies

Dependency

Old Version

New Version

Dependency

Old Version

New Version

ch.qos.logback:logback-classic

1.5.12

1.5.20

ch.qos.logback.access:logback-access-tomcat

2.0.3

2.0.7

org.apache.tika:tika-core

3.0.0

3.2.2

org.springframework.boot:spring-boot-dependencies

3.3.6

3.3.9

org.springframework.boot:spring-boot-starter-test

3.3.6

3.3.9

org.springframework.boot:spring-boot-starter-web

3.3.6

3.3.9

Contributors

The following developers have contributed to the development of this release version. A contribution means at least one Git commit that is included in the release. The full list of contributors of different X-Road® versions is available here.

GitHub Username

GitHub Username

ricardas-buc

Other Notes

Package Repositories

Repository

URL

Repository

URL

Jammy

deb https://artifactory.niis.org/xroad-release-deb jammy-7.6.3 main

Noble

deb https://artifactory.niis.org/xroad-release-deb noble-7.6.3 main

RPM / RHEL8

https://artifactory.niis.org/xroad-release-rpm/rhel/8/7.6.3/

RPM / RHEL9

https://artifactory.niis.org/xroad-release-rpm/rhel/9/7.6.3/

Docker

https://hub.docker.com/r/niis/xroad-security-server-sidecar

Repository Sign Key Details

Download URL

https://artifactory.niis.org/api/gpg/key/public

Hash

935CC5E7FA5397B171749F80D6E3973B

Fingerprint

A01B FE41 B9D8 EAF4 872F A3F1 FB0D 532C 10F6 EC5B

3rd party key server

Ubuntu key server

Packages

Jammy

Package

SHA256 checksum

Package

SHA256 checksum

xroad-addon-hwtokens_7.6.3-1.ubuntu22.04_amd64.deb

7a1d449ddab41ace0c580cc4bf354d711eb4cf14acb7ea34f3e95d2c319237e5

xroad-addon-messagelog_7.6.3-1.ubuntu22.04_all.deb

e10446e955d5069b15b398b8374c87068fbf4e99c4620394fa06f4fc7c436c58

xroad-autologin_7.6.3-1.ubuntu22.04_all.deb

9d8a2d1265f6ac524e06bd4d5f5052d10a4149e070edbc4b98e50d59017b520c

xroad-addon-wsdlvalidator_7.6.3-1.ubuntu22.04_all.deb

6a792ab3dfe08c28926e7aefbef2dcab6d6a816382c455445f2847c63d84a18c

xroad-addon-metaservices_7.6.3-1.ubuntu22.04_all.deb

fa359c756ee99d9da5c536406ea91525b049a6941f26256d345dc9ef4cb4c7f7

xroad-addon-proxymonitor_7.6.3-1.ubuntu22.04_all.deb

c9e378d5bbb1972aa75176c22a477cbd6e8cc88f4f15c373b167e41fd81ff628

xroad-addon-opmonitoring_7.6.3-1.ubuntu22.04_all.deb

7cd77c3b6b5e1b3f747ee8e005c29f36ca7626781e60ce915b5d6847b2e39f0a

xroad-base_7.6.3-1.ubuntu22.04_amd64.deb

bae13f3db95c2665baea3220aa4b37dbc782e7a6afd9166f8a74deadf6cebb9f

xroad-center_7.6.3-1.ubuntu22.04_all.deb

90ef550a3d9c9f8e3c30915dc7bfca05f0078958bac11478d86a71637c4fabc6

xroad-center-management-service_7.6.3-1.ubuntu22.04_all.deb

61e26d5ae76a5533b98d2635c2723f845e58d4ea1f04d53e57ee885374ca3201

xroad-center-registration-service_7.6.3-1.ubuntu22.04_all.deb

25ba96c05849135719e870958b5c62b7a6e71d2de7ca3bb4802dacffd0a43841

xroad-centralserver-monitoring_7.6.3-1.ubuntu22.04_all.deb

244009fb65328059438977c15b384efef706c0a8f9ad59582b4f5b8a791e7b6d

xroad-centralserver_7.6.3-1.ubuntu22.04_all.deb

b2e779042e2b27ea6b61218e2091208ad77ebc9fcbd4e312e34933934df782fe

xroad-confclient_7.6.3-1.ubuntu22.04_amd64.deb

1819c0bcdb11af07563bd06128677bb3c66bfea6405f11a2f3b78de684d36c1d

xroad-database-local_7.6.3-1.ubuntu22.04_all.deb

4b26dab5b489fbd91ac7accfe547da13792fbaeef3a55a13364001439608ac87

xroad-confproxy_7.6.3-1.ubuntu22.04_all.deb

68df388d654890d63c79d654941a59c3f5a1e7fdaec9fdf8b6b2540354f89edf

xroad-database-remote_7.6.3-1.ubuntu22.04_all.deb

19e75de4c96e6d527b656fbd640ef0ea8ee38e20bde689c52113f72162f23be8

xroad-monitor_7.6.3-1.ubuntu22.04_all.deb

c5a3cdbb1828bc9378a1becab9bcce4ddd59bfd4e5d7889098f8a131120ccbd8

xroad-nginx_7.6.3-1.ubuntu22.04_amd64.deb

e645cdb5e8afd669eec798f18b185c11d3d713417e5332986c16ba29d99e9c06

xroad-opmonitor_7.6.3-1.ubuntu22.04_all.deb

26dd563e3d5d3369b284697e2990a31e68ab7cb1dcee54e87a57d4ab69986c40

xroad-proxy_7.6.3-1.ubuntu22.04_all.deb

9cf1d950adefa07cf5a1e753ed42be009b5a1950d7e405fd489bc16a587e92ae

xroad-proxy-ui-api_7.6.3-1.ubuntu22.04_all.deb

a89c0a0b89add53c37f5d89215da28f665fab1f150b35125fc7577e5048da4ca

xroad-securityserver-fi_7.6.3-1.ubuntu22.04_all.deb

3ea823bf4f5affbffd6099a738607ee70ecd7db5ea1b2c4d5920a77f767ea2aa

xroad-securityserver-fo_7.6.3-1.ubuntu22.04_all.deb

7068005fe9a9c2e9b8db944f67eb512db0e7856198533a1c4feec939bba13587

xroad-securityserver_7.6.3-1.ubuntu22.04_all.deb

b5ed825f0f40b842905b35134321779f51d1ddea8457fa0229a3dce37bc2e2b6

xroad-securityserver-is_7.6.3-1.ubuntu22.04_all.deb

d93497d7a2cf6606d62f7ae8fe1bba45b27448d1fd9ebb0a6d9d8dde693a6417

xroad-securityserver-ee_7.6.3-1.ubuntu22.04_all.deb

f6c2b3dd9e69f7ba1c9a4d411cdcb3b70e5bb0037a5d9660f6d9274dab0b7e6f

xroad-signer_7.6.3-1.ubuntu22.04_amd64.deb

0b583fc1b4b3f684ebbac18f010839e918bd87c05884beb8cf4dce3dd19bdfd8

Noble

Package

SHA256 checksum

Package

SHA256 checksum

xroad-addon-hwtokens_7.6.3-1.ubuntu24.04_amd64.deb

bd06f7048b9d9d7c98653375f23a8b1bd0eed61515a2615ef3485224627c3417

xroad-addon-messagelog_7.6.3-1.ubuntu24.04_all.deb

169fbbfe7c4b7e61dae077566235b8864ea6f04894e11cb6740d0d36fb88ed2d

xroad-autologin_7.6.3-1.ubuntu24.04_all.deb

17d254cec064448e5bcf20aeacf55f68346a5246162c6268caae65cbdba93c71

xroad-addon-opmonitoring_7.6.3-1.ubuntu24.04_all.deb

1cb27291f05d7029aefe0a577565e6c20631216831ecd765021cca0f888c08a7

xroad-addon-proxymonitor_7.6.3-1.ubuntu24.04_all.deb

4ff596cab5f1027275b12e98aaf7bdf098726611dc83e31aed3d8f7c720644b4

xroad-addon-metaservices_7.6.3-1.ubuntu24.04_all.deb

f29de4d6b391dec91d5c126e5015a7328e098c28623d52ec8e07716e6ec7a8ac

xroad-addon-wsdlvalidator_7.6.3-1.ubuntu24.04_all.deb

289ceb364e533456120a21d54704726142757612181a0f2f63f8ebbad4d76840

xroad-base_7.6.3-1.ubuntu24.04_amd64.deb

331a3bd7614f5f165f6ae64f223ffc3e256097730b2bb003b41aa3abad3628a1

xroad-center_7.6.3-1.ubuntu24.04_all.deb

e6106272823c31a2dc12b51f201b7f9fc7c65f0429187aca58570ff0fab75e4b

xroad-center-management-service_7.6.3-1.ubuntu24.04_all.deb

6f7ffe524bcca3e34529f501e38a4519a43a1ad7f9c101bd5e9122af805100a4

xroad-center-registration-service_7.6.3-1.ubuntu24.04_all.deb

02d48106daddadbc0276840ae3130bcd7f84a2b511e9ee3802b2c38033d0a0e7

xroad-centralserver_7.6.3-1.ubuntu24.04_all.deb

6f20511398324699a990ff34fd401bc6af5b32120852a91b03ef4de01214c3b8

xroad-centralserver-monitoring_7.6.3-1.ubuntu24.04_all.deb

a4d1f5d5f0189903ac578526850471fbd9837543addd87d123db9381134287f4

xroad-confclient_7.6.3-1.ubuntu24.04_amd64.deb

3fa3cabfb3da31cee60f7141c94895380d214125283b3d07744528510099692f

xroad-confproxy_7.6.3-1.ubuntu24.04_all.deb

22f163bf8bd541532535c333725d9ccacc1f966d8047849b413c154744cca722

xroad-database-remote_7.6.3-1.ubuntu24.04_all.deb

28a800d81df37ad4288abd4dd52439c03f1314c4911735913b3e666bcf3954c2

xroad-database-local_7.6.3-1.ubuntu24.04_all.deb

7c5e6b4e4398edece47ace6a1e8464e62d37b2315a680e53ba86b81718fa32e6

xroad-monitor_7.6.3-1.ubuntu24.04_all.deb

b15799f57350f0b81d3896e94e1407ab771f43a173472a270e5237b5bfe0db34

xroad-nginx_7.6.3-1.ubuntu24.04_amd64.deb

8a41192aa3b7d0a53cb6ef7ff53beec9f59d900b8f21719ec28d6b08cddfbd1c

xroad-opmonitor_7.6.3-1.ubuntu24.04_all.deb

07c7156ac645091c73c61f0ca68a22dcb6bcf2e6c3fb95069f9d303222589396

xroad-proxy_7.6.3-1.ubuntu24.04_all.deb

5f5c31bcd94e15793e2ea3c0e8260d4e269aacc26cea13bad14deaa07ab57a99

xroad-proxy-ui-api_7.6.3-1.ubuntu24.04_all.deb

c4348c5833474d7c16260004a582604c9e4330010591901e3708e02b40cbe440

xroad-securityserver-fi_7.6.3-1.ubuntu24.04_all.deb

64c737e40cd11661b1f7f7e9c5dacdd6c0c36d793ea67cf9aa28edf938a03ca8

xroad-securityserver-is_7.6.3-1.ubuntu24.04_all.deb

972f2580012a1d74198f91f27c80aa4c4cbcf952c9dffe493303d25b384c278e

xroad-securityserver-ee_7.6.3-1.ubuntu24.04_all.deb

0cc66ccf8bd694637c13cdcdfc5ec347ec943c820b80130f88fb8f735d5bfec5

xroad-securityserver_7.6.3-1.ubuntu24.04_all.deb

cc870c9ebb51ebbf1f1a79d9a316f1cbadebacb3c2573c5f6be1eacfd617f31c

xroad-securityserver-fo_7.6.3-1.ubuntu24.04_all.deb

db6a0c73f6bebee294324bf65a7d5cbdeb8f6e7ebabd3ab533b77d03fcbe967d

xroad-signer_7.6.3-1.ubuntu24.04_amd64.deb

8c8b24f9bcadd5ae7a8d9c1912d116939565f0d47e2119a1493e89415f8f777e

RPM / RHEL8

Package

SHA256 checksum

Package

SHA256 checksum

xroad-addon-messagelog-7.6.3-1.el8.x86_64.rpm

6ccd33a5319f0925fc055621429009a69ecebbe16063e451fb91b203d4fc9485

xroad-addon-metaservices-7.6.3-1.el8.x86_64.rpm

953255527ee35b51bf000090f0928ee6d3b2ecef7907748906968bba81c3a561

xroad-addon-opmonitoring-7.6.3-1.el8.x86_64.rpm

32bbca8606c2c9f29f226ba0f8eac8e390de154beca99a1385cd8c440f8a999b

xroad-addon-proxymonitor-7.6.3-1.el8.x86_64.rpm

8f60fdf58732f80ef3839b9ee1b0878e50a0b1822ff4250a91646d8084bb56d2

xroad-addon-wsdlvalidator-7.6.3-1.el8.x86_64.rpm

15352fa80484d43777bb2fef4667b332bcce549a87f453188674d3d48c5b2113

xroad-autologin-7.6.3-1.el8.noarch.rpm

76346b6a8c4bc0ec9d29d6051479e2ccf74ba452bf1e2dbe6d42fe3e55c1191c

xroad-base-7.6.3-1.el8.x86_64.rpm

990302cb53df692f4890915a689f7589094c89e4e2d3b51083481541d59e72b2

xroad-confclient-7.6.3-1.el8.x86_64.rpm

917b53e3dd4fcfeaf744712176561c63fa0f7c4829f1a0069c6a15c97d17ee5b

xroad-database-local-7.6.3-1.el8.noarch.rpm

a7ea935fdcf0817cbf0e6a8c9d201639291d5e58ad58fc15a5077938f0a1687f

xroad-database-remote-7.6.3-1.el8.noarch.rpm

9549ecd657dc175d6766bef40eb6da284e6275a680bf6bf0d24c639e898b1bca

xroad-monitor-7.6.3-1.el8.x86_64.rpm

5bdd347804b4662ca88c82bbd3232179ae5a9133387350af97da8bad750b39bc

xroad-opmonitor-7.6.3-1.el8.x86_64.rpm

70e097b2d8f2899a197fb28a3a14b43841e442fb7c0c2e36d2dadb92505a3d81

xroad-proxy-7.6.3-1.el8.x86_64.rpm

419b8c2982aead81060e671c8514d2b2196aced0c774f400068157e13da59c42

xroad-proxy-ui-api-7.6.3-1.el8.x86_64.rpm

5bee3df27432a9ddc80e714d318280cfa422aabec2e39792fec31b5600c20c62

xroad-securityserver-7.6.3-1.el8.noarch.rpm

b4c04045b585fe3f0ed8fc494fa04827527df8e05e111d582b89ab622fa6a3b8

xroad-securityserver-fi-7.6.3-1.el8.noarch.rpm

3f7b07be36f661b54447e0f3d48b4dd0a185caf887283d6276cb3ede6aa92f3d

xroad-securityserver-fo-7.6.3-1.el8.noarch.rpm

a4412839ba5423b24b357aea13168c9f8196c77d83c2d9fdc35dd518780bc8cd

xroad-securityserver-is-7.6.3-1.el8.noarch.rpm

8f8a9981aab032467c4fa7a8087cfabbace613bb3a4bf3ee40a97f14a5080836

xroad-signer-7.6.3-1.el8.x86_64.rpm

7e28a58852d7385e923ad12a3e91dd2751f42b446de0cc93a693aac10cc38e3b

RPM / RHEL9

Package

SHA256 checksum

Package

SHA256 checksum

xroad-addon-messagelog-7.6.3-1.el9.x86_64.rpm

af25b949aef348367e16603c22dc24a6260f0a27aaeef43396ce34dc66f1691f

xroad-addon-metaservices-7.6.3-1.el9.x86_64.rpm

65598018a651b84f595c293adc6f6f7673f200b754495b646645314750c209f3

xroad-addon-opmonitoring-7.6.3-1.el9.x86_64.rpm

1721ee5ac21998d74f9433cd06532880291b8243062d3d717448363da635a0db

xroad-addon-proxymonitor-7.6.3-1.el9.x86_64.rpm

61e0c772800265299cb881cf0b666157388b1bd02382356a951549b241eca87c

xroad-addon-wsdlvalidator-7.6.3-1.el9.x86_64.rpm

d11d4d2c0e2f600db54c9b0a66e5aa4c9a7b4a2f70291ab45566a640ea8f5b18

xroad-autologin-7.6.3-1.el9.noarch.rpm

aa910641f060ce7561dd26244c2b5bd1285391aca23835cdeffb058df3fffc3f

xroad-base-7.6.3-1.el9.x86_64.rpm

54bb800af13e5b5affe22fc9b10189a67ef06d401b0b2afa7f38b4dad3557bfa

xroad-confclient-7.6.3-1.el9.x86_64.rpm

a6dc621f12034a75af90c2b242dd259d97ac26811469f2e35e8efae21c942c45

xroad-database-local-7.6.3-1.el9.noarch.rpm

84a83d2aa4ff58e59848e9dea4a49252fc4269d7af8cd55d669256139b7c2143

xroad-database-remote-7.6.3-1.el9.noarch.rpm

42c676125fffa73bff4cacb032b6dbbd4de585ec45a8b12dd86d1aa55d85e42d

xroad-monitor-7.6.3-1.el9.x86_64.rpm

06dad937b17903154ebacccc95719890c85d4756d5e62d57a14f467ceb1285a1

xroad-opmonitor-7.6.3-1.el9.x86_64.rpm

bff144da34a357781087b2d48550b2336329f26edfaeffc264f4871d415fd8b1

xroad-proxy-7.6.3-1.el9.x86_64.rpm

82d11eee351f0fa7d540d04ec0ebbd058949cb85ad643f756dfe02850d1729a2

xroad-proxy-ui-api-7.6.3-1.el9.x86_64.rpm

ed916258e45a5d4b18a6731df5c941c179adaa17bccdf848aff55b2d90435d20

xroad-securityserver-7.6.3-1.el9.noarch.rpm

064e8e8e89c291995625bcd761b944259525cb418a3e001b1b707d48354877f9

xroad-securityserver-fi-7.6.3-1.el9.noarch.rpm

01f298abbbe8157760d68904a94c080fd92a5ed04b317eb5a44e8daefc368eb8

xroad-securityserver-fo-7.6.3-1.el9.noarch.rpm

19654688e5e8f6ae7fb3e8efde3c7f628d98c2d053246299e5df4b569773506a

xroad-securityserver-is-7.6.3-1.el9.noarch.rpm