Important security notice for Domibus users
To improve the security posture of Domibus deployments, secure deployment recommendations for Domibus were recently published. These recommendations can and should be complemented by further site-specific measures, but they already provide a good checklist for any installation.
Users are invited to assess their deployments against these recommendations and take measures to align with them at their earliest of convenience.
An important policy change, affecting all Domibus users, will be applicable approximately three months after the publication of this notice:
Key update effective 1st May 2024
From 1 May 2024, the eDelivery Building Block will modify its approach to releasing security patches for Domibus. Emergency security patches will only be released for vulnerabilities impacting installations that adhere to the Domibus Secure Deployment Recommendations. It is crucial to understand that vulnerabilities exploitable only in non-compliant deployments will be addressed with less urgency.
The update is part of eDelivery's ongoing efforts to enhance the security of Domibus installations and improve the efficiency of the emergency release process. We strongly advise all users to align their deployments with the Domibus Secure Deployment Recommendations by 1 May 2024.
The eDelivery Building Block
eDelivery is a Building Block that provides technical specifications and standards, installable software and ancillary services to allow projects to create a network of nodes for secure digital data exchange.
Domibus is the sample software provided by the European Commission to implement an eDelivery AS4 Access Point for the interoperable, secure and reliable data exchange. It is based on the eDelivery AS4 profile, an open technical specification for the secure, web-based, payload-agnostic exchange of data or documents.
Stay tuned for the latest updates on eDelivery services by checking the Building Block's X and web page. For more information, do not hesitate to register for personalised news. You can contact us via our portal (EU Login required) or by e-mail: EC-EDELIVERY-SUPPORT@ec.europa.eu.