/
X-Road v7.6.4 Release Notes

X-Road v7.6.4 Release Notes

Release Info

Version number

7.6.4

Release date

03.07.2026

Supported versions

  • 7.8.2

  • 7.7.3

  • 7.6.4

Supported platforms

Central Server

  • Ubuntu 22.04 LTS

  • Ubuntu 24.04 LTS

Configuration Proxy

  • Ubuntu 22.04 LTS

  • Ubuntu 24.04 LTS

Security Server

  • Ubuntu 22.04 LTS

  • Ubuntu 24.04 LTS

  • RHEL 8

  • RHEL 9

  • Docker

Official documentation

https://github.com/nordic-institute/X-Road/tree/master/doc

Source code

https://github.com/nordic-institute/X-Road/tree/master

Software license

MIT

 

On this page:

 

Changes in This Release

Summary

  • Bug and security fixes.

  • Dependency updates.

Completed Issues

Issue ID

Type

Summary

Issue ID

Type

Summary

XRDDEV-3237

Fix

Fix a vulnerability in the Apache CXF library by updating it to version 4.2.2. X-Road was not affected because the vulnerable classes are not used in its implementation. More information about the vulnerability is available here:

https://nvd.nist.gov/vuln/detail/CVE-2026-49875

XRDDEV-3238

Fix

Fix a batch signature-related security vulnerability in the Security Server. Details of the vulnerability are available in the X-Road repository's GitHub Security Advisories.

Thanks to OffSeq for responsibly reporting this vulnerability.

XRDDEV-3244

Fix

Fix a global configuration-related security vulnerability in the Security Server. Details of the vulnerability are available in the X-Road repository's GitHub Security Advisories.

Thanks to OffSeq for responsibly reporting this vulnerability.

XRDDEV-3256

Fix

Fix a global configuration-related security vulnerability in the Configuration Proxy. Details of the vulnerability are available in the X-Road repository's GitHub Security Advisories.

XRDDEV-3259

Fix

Fix an issue with non-batch signature verification in the Security Server.

Thanks to @Evelynkaz for responsibly reporting this vulnerability.

Issue types: fix (bug fix or technical debt), improvement (improvement to an existing feature), new (a new feature).

 

New/Updated Dependencies

Dependency

Old Version

New Version

Dependency

Old Version

New Version

org.apache.cxf:cxf-rt-transports-http

4.1.0

4.2.2

org.apache.cxf:cxf-tools-validator

4.1.0

4.2.2

org.apache.tomcat.embed:tomcat-embed-core

 

10.1.55

org.apache.tomcat.embed:tomcat-embed-el

 

10.1.55

org.apache.tomcat.embed:tomcat-embed-websocket

 

10.1.55

Contributors

The following developers have contributed to the development of this release version. A contribution means at least one Git commit that is included in the release. The full list of contributors of different X-Road® versions is available here.

GitHub Username

GitHub Username

andresrosenthal

egidijusmwork

enelir

ricardas-buc

Other Notes

Package Repositories

Repository

URL

Repository

URL

Jammy

deb https://artifactory.niis.org/xroad-release-deb jammy-7.6.4 main

Noble

deb https://artifactory.niis.org/xroad-release-deb noble-7.6.4 main

RPM / RHEL8

https://artifactory.niis.org/xroad-release-rpm/rhel/8/7.6.4/

RPM / RHEL9

https://artifactory.niis.org/xroad-release-rpm/rhel/9/7.6.4/

Docker

https://hub.docker.com/r/niis/xroad-security-server-sidecar

Repository Sign Key Details

Download URL

https://artifactory.niis.org/api/gpg/key/public

Hash

935CC5E7FA5397B171749F80D6E3973B

Fingerprint

A01B FE41 B9D8 EAF4 872F A3F1 FB0D 532C 10F6 EC5B

3rd party key server

Ubuntu key server

Packages

Jammy

Package

SHA256 checksum

Package

SHA256 checksum

xroad-addon-hwtokens_7.6.4-1.ubuntu22.04_amd64.deb

3558fda1e8c7a4cbd1996f266ff4918adfb67ffb4658ed4d5ab930eac548fb69

xroad-addon-messagelog_7.6.4-1.ubuntu22.04_all.deb

2fa6050e2e28cc74d8cce769b75c4b71e841997e194f646b116a7027c58305fa

xroad-addon-metaservices_7.6.4-1.ubuntu22.04_all.deb

be62cc70374ae3aa87e084072ca675b20e5296a92f18aefbb2093414bf88581e

xroad-addon-wsdlvalidator_7.6.4-1.ubuntu22.04_all.deb

482ca5369f6ee42eb459bd8b34d03d82b2dbdcb78def8948a8bd8df3f7d6803c

xroad-addon-proxymonitor_7.6.4-1.ubuntu22.04_all.deb

2b5f217bc15a20cb8dc401e01286989fdc32bb66eaf9ede2dc2476b317be1353

xroad-addon-opmonitoring_7.6.4-1.ubuntu22.04_all.deb

d3d0a1a8dda933e5fcd601cd88bd80984ac82733c89aa94597199443ceedfb6a

xroad-base_7.6.4-1.ubuntu22.04_amd64.deb

d7c3c2fbd454bdfa29c8be84525c9a41cb72ae62f9f9a8775ae7fec7b13f2f77

xroad-autologin_7.6.4-1.ubuntu22.04_all.deb

bb2c93fb95b088d4a819bca1953c65414eaa11dad229ea00fcb63c3a994514ed

xroad-center_7.6.4-1.ubuntu22.04_all.deb

53b9597ab8b0dc15a8f57cf6a9f26c9507f728e0a46336f35f389d751dececf9

xroad-center-management-service_7.6.4-1.ubuntu22.04_all.deb

06c3075af6436c76cec058e7812dbe6e3ac54f8840af8bc525387d5986c37500

xroad-center-registration-service_7.6.4-1.ubuntu22.04_all.deb

4752e6c32e92452c61334d234c9719166201dbb13448015cfdf62e6822589896

xroad-centralserver-monitoring_7.6.4-1.ubuntu22.04_all.deb

1d2e09b50742139c29c16e0abdc930dadf605688cb22f0783f27408171f1162b

xroad-centralserver_7.6.4-1.ubuntu22.04_all.deb

f9cd9702fffb60ba8804c00afaeac9dda4001f0233ea838420bd509f99a8b84f

xroad-confclient_7.6.4-1.ubuntu22.04_amd64.deb

01440d9259c0cfb5eb80dd95a9c68fdc047ee2123208050fdff0a5781b1d7939

xroad-database-remote_7.6.4-1.ubuntu22.04_all.deb

7ea26cd3d5306c2ef04543f02c12889aa158933f90fc653c7222b028c5db1323

xroad-confproxy_7.6.4-1.ubuntu22.04_all.deb

b942c18b0edabfcf17963eab8ceff5cbfe07715be8a8f1a0acd46c0a759695e0

xroad-database-local_7.6.4-1.ubuntu22.04_all.deb

cf2cdf4fffa254438f6e9630a698e2a225fb61e43a9c4f88d1fdff0f8607f7a2

xroad-monitor_7.6.4-1.ubuntu22.04_all.deb

62e207f22a232dc95c443c795e935e61c157a41810c7fcb3fa4bb68232b7a248

xroad-nginx_7.6.4-1.ubuntu22.04_amd64.deb

7738d9847047163111d9ba33ed804f9fcab3296b6fa27609ea67acfbf48b9da1

xroad-opmonitor_7.6.4-1.ubuntu22.04_all.deb

d279b556045ec53c1655aa8e2cd95840d4c705200cd5d612b84ed3426a25052b

xroad-proxy_7.6.4-1.ubuntu22.04_all.deb

e0431549a725986da1b3de23ff3eb0cbf9b69deacb620c199ec1b93d1fb1ce1f

xroad-proxy-ui-api_7.6.4-1.ubuntu22.04_all.deb

f68ba99416656373641dccdc72463201601be80e1e14d1c9ae9005933beb9cd4

xroad-securityserver-is_7.6.4-1.ubuntu22.04_all.deb

82bd06229cc2433bb2b6878d92b6d6411101054b2e34229a45e85210287ac952

xroad-securityserver-fi_7.6.4-1.ubuntu22.04_all.deb

983e802a5fa5625637e3f3751eb9289e08cef22869afb3f8bed34669de15a5ac

xroad-securityserver-ee_7.6.4-1.ubuntu22.04_all.deb

1f11e62f76e3216c9fe26e2db9e5a4be00ceaa3e0012ca88bcafffbb51c1e160

xroad-securityserver_7.6.4-1.ubuntu22.04_all.deb

13fae48550bd9fabf1c249530e732b3ed9ad262175710efb0e576c8ee49c74cd

xroad-securityserver-fo_7.6.4-1.ubuntu22.04_all.deb

80ecb1fb13d2db2947e6e25e667d05d662e444dc0051bbcb8b2d2a20d1f9c13d

xroad-signer_7.6.4-1.ubuntu22.04_amd64.deb

a854cb60d4273ad7e6c9a1463b0a7b4fc00c74d0d5c2f5498ba083568a0c93da

Noble

Package

SHA256 checksum

Package

SHA256 checksum

xroad-addon-hwtokens_7.6.4-1.ubuntu24.04_amd64.deb

50d1e3d5f4521df66832eacbee2145a2e4268933dfca1a30efa2006785789689

xroad-addon-messagelog_7.6.4-1.ubuntu24.04_all.deb

623adf5b6a30a1fa40ee2ee8e5646ddab0db57d33ac018fb08598740c94224a5

xroad-addon-wsdlvalidator_7.6.4-1.ubuntu24.04_all.deb

54827dfb15203fcce0eed273ea817b09be3f5b56f53abaa9dd342535ff71891c

xroad-addon-opmonitoring_7.6.4-1.ubuntu24.04_all.deb

5b22e0234ee2117cd2df38786186aff8ddea896be5475048a77794dd4ce2a7aa

xroad-autologin_7.6.4-1.ubuntu24.04_all.deb

a2cac1ce2b97e6a0d36e165ecfda3f92540b9bbb1dfa03ff7727fcdac50dadbc

xroad-addon-proxymonitor_7.6.4-1.ubuntu24.04_all.deb

d88b512d2b10ff0a885c453b977f9c4a2d96804a759828d76633b43fd5dc766a

xroad-addon-metaservices_7.6.4-1.ubuntu24.04_all.deb

06f761bf616560ec41e890f8b2b9a77d44160a741f5ef6c233888a8b00ed41e0

xroad-base_7.6.4-1.ubuntu24.04_amd64.deb

4bb522eb11df2145d3c582e44c98dbb5bac52e041e5688da44b05c36d62ee9d3

xroad-center_7.6.4-1.ubuntu24.04_all.deb

b2a992197fec595f606694e6ae5e0221a64cbb1905514c996ead874b0cc65662

xroad-center-management-service_7.6.4-1.ubuntu24.04_all.deb

4ab66d84707cfd10cefd133e57d7d14912e0f8f8b33001c7684772f5a3bae5ae

xroad-center-registration-service_7.6.4-1.ubuntu24.04_all.deb

3a01d861afcf12c62de1c1be39cfaf94eaa34b07e8e539bba82362110a44f416

xroad-centralserver_7.6.4-1.ubuntu24.04_all.deb

585b856d8a1da382e7ad009e6966e2e68047baa95b8a5559e5c802367aa17546

xroad-centralserver-monitoring_7.6.4-1.ubuntu24.04_all.deb

059cbbc09d884d9be9e5d07b6562bfaa57e6690cd9d15e2edb24959a17fd42a9

xroad-confclient_7.6.4-1.ubuntu24.04_amd64.deb

e7137e20cbc7b6a6a1989d29fd16b03547ffe5c7d845f6b3e9551e2c908b9471

xroad-confproxy_7.6.4-1.ubuntu24.04_all.deb

dbd62aca0f441cad44aca768327f60eb74fd130592cbde7d1ae952c097e2724c

xroad-database-local_7.6.4-1.ubuntu24.04_all.deb

352c08f5c89631f386a0a669ca4c2732495e65e5342dd5c00d059f3567c6f914

xroad-database-remote_7.6.4-1.ubuntu24.04_all.deb

ed3378b30b86696464d5942988a2715b8875661bf32d055b5e6c3a6bc6384578

xroad-monitor_7.6.4-1.ubuntu24.04_all.deb

07aff9d6a954a19b15510c5dfb220a1c655ba21fba44a36a86553975ba63dcc6

xroad-nginx_7.6.4-1.ubuntu24.04_amd64.deb

d6b703cb756c78b9a580c100eae226df9ac1e6683a9256bc280ce56f0ab04610

xroad-opmonitor_7.6.4-1.ubuntu24.04_all.deb

3649bcc3250ed8f2354bc472bc3da5804716ff08d2b6fe25bfd545fcf505319e

xroad-proxy_7.6.4-1.ubuntu24.04_all.deb

72c9af44f6ce0b2634c36cb840f86bcd036d2274b4eddc3387e3ba3e7e4960b7

xroad-proxy-ui-api_7.6.4-1.ubuntu24.04_all.deb

34028a12c4039f2938c5488f8541a619eab26dca68feb1f9ba944a970d191519

xroad-securityserver-ee_7.6.4-1.ubuntu24.04_all.deb

03ade879f31f8f5ee68e62de67f87e11a3a652ea9859494ee093fa229220e42e

xroad-securityserver-fi_7.6.4-1.ubuntu24.04_all.deb

a797f2374d0f590b3f8a33a6551d50f6ad3ce33747fceaf9a05e18f999f12a93

xroad-securityserver-fo_7.6.4-1.ubuntu24.04_all.deb

d47c4439ac7bce419bfdf2ad4d5fec0ae7ea143c68accd604606347e8a12b6f9

xroad-securityserver_7.6.4-1.ubuntu24.04_all.deb

278426fd2c7e368a1d2fe24be82962f5c84c70665ff85bb7263425e335a9374e

xroad-securityserver-is_7.6.4-1.ubuntu24.04_all.deb

dd714745dad812a1cc187b24a53153c6f8fbb1c6cf68ed803de322d2dce2b7aa

xroad-signer_7.6.4-1.ubuntu24.04_amd64.deb

5cadf38df7d1536e6ed72837e7033c2feeaba7d688d8ff8e49240cb603a12ac2

RPM / RHEL8

Package

SHA256 checksum

Package

SHA256 checksum

xroad-addon-messagelog-7.6.4-1.el8.x86_64.rpm

b04d4b6a37a78d38c9d9f5d69fcc981d7a9b0cfb8133e610adde4064598c4c98

xroad-addon-metaservices-7.6.4-1.el8.x86_64.rpm

94ef99caa20f0860f8c08a92115657aaa79dc8074a679ffcdf88272d77443acd

xroad-addon-opmonitoring-7.6.4-1.el8.x86_64.rpm

34f23d47bef7d12a8e765f55b49fddc238c41ceae59b6fe218c319ee07d8ec42

xroad-addon-proxymonitor-7.6.4-1.el8.x86_64.rpm

0b4d5eb64483b3736920749d67212ca845a67291e8071b56c1e5de3650190729

xroad-addon-wsdlvalidator-7.6.4-1.el8.x86_64.rpm

5758110cb624a0bf1d9373198b308ace8d3c9600a7ca46e4665c7b2a10131282

xroad-autologin-7.6.4-1.el8.noarch.rpm

ad0072b43e3a690dbbe88b621ad8c1ba0f33fc058eb3dd33c2cb4b5f53744db5

xroad-base-7.6.4-1.el8.x86_64.rpm

6c9a520668dabe21b118d14861927290a984b0893cf9713a997690d58bf7f879

xroad-confclient-7.6.4-1.el8.x86_64.rpm

7fbec8b4647f02e7e96bfba151b46de3b0ffd13d6b08f319eeded8953a9040df

xroad-database-local-7.6.4-1.el8.noarch.rpm

1496aa0478c8b83bd17110436cc6b4ca2122de4524a5a086c85817deebd22f1c

xroad-database-remote-7.6.4-1.el8.noarch.rpm

6797215009c83a02e3299e25288dca362578259898664f0308683bdb8b9f1f88

xroad-monitor-7.6.4-1.el8.x86_64.rpm

e83d3486ca752a545ca283aa9ec6697e6081ae28cca17b849a5f52455d444b44

xroad-opmonitor-7.6.4-1.el8.x86_64.rpm

f629d80572fb6cd1a688ba9136948f1da8e4b54082a024b009db7e8049906406

xroad-proxy-7.6.4-1.el8.x86_64.rpm

cea3bd9ebd8166442f3a50b409e7f9d45e48e0a20cbd46fb46e93b7f86535e82

xroad-proxy-ui-api-7.6.4-1.el8.x86_64.rpm

07c87cb0d41e74239c925b3d2d6f2f1b12bed8a21eb6fe4b7e5dc8f7efb80b76

xroad-securityserver-7.6.4-1.el8.noarch.rpm

2702510a8c5ed665c57d04c7a3b989ff0f7310c0fb4f4d9e954b7b707aef9daf

xroad-securityserver-fi-7.6.4-1.el8.noarch.rpm

5deb4518cf330e75041d69c91dc66c0fd3d0394783a0f688149cc4e2ebbf42bd

xroad-securityserver-fo-7.6.4-1.el8.noarch.rpm

35c3c174a5ae4bfcd3a5dd50434e3802b70e6076321fb7b044b1aac937c2a3d0

xroad-securityserver-is-7.6.4-1.el8.noarch.rpm

97f60e344291c3cd3715ea47964a3c439c2ad987299dd2b59149225fac98fdf2

xroad-signer-7.6.4-1.el8.x86_64.rpm

283bb82b6876abc207624fd4ee0830d4edc388932a2f0e46bf8a5deebc1e97ad

RPM / RHEL9

Package

SHA256 checksum

Package

SHA256 checksum

xroad-addon-messagelog-7.6.4-1.el9.x86_64.rpm

ce5370d2f5a2bc215cb45920468b0692f79ceecdd77d88ba629bea8176e4aa13

xroad-addon-metaservices-7.6.4-1.el9.x86_64.rpm

9e1317772318b040862c6bf1551653c44e1d55c4b39772835558d5786ba12192

xroad-addon-opmonitoring-7.6.4-1.el9.x86_64.rpm

ca3ac784068d9fa137917b26349c27056c0d74dc6b7d1b269c25f371c92643b3

xroad-addon-proxymonitor-7.6.4-1.el9.x86_64.rpm

fa85dd8a92ba35a1f4e309ee11c22a317e9e944052491781fd69848d8d2bd07c

xroad-addon-wsdlvalidator-7.6.4-1.el9.x86_64.rpm

44f94675a3f861e24ea9222c75c78e70b35cf13e03d58ab028eb4c4d02deed6f

xroad-autologin-7.6.4-1.el9.noarch.rpm

3b8df282f3b212815edf3dd3f93802ffeefc088880a653807bf28a75767f4033

xroad-base-7.6.4-1.el9.x86_64.rpm

e0377ecc0c3d3cb5441a8605ba4400c39563ea20831d2deb3f47de42b3e63f14

xroad-confclient-7.6.4-1.el9.x86_64.rpm

95fe7998ea7f8d4dfcc0234406703871be7581b785ac5a522c9068e3b1c7ed9d

xroad-database-local-7.6.4-1.el9.noarch.rpm