Domibus

1. Current release

This page collects the resources for Domibus version 5.1.9, released in July 2025.

Description

We are happy to announce the release of Domibus 5.1.9 sample implementation of the eDelivery Access Point.

The Domibus 5.1.9 release includes improvements and bug fixes as well as it addresses the latest vulnerabilities reported and we strongly recommend the upgrade:

• Added new properties domibus.msh.retry.maxMessageCount and domibus.messages.stuck.maxMessageCount to limit the number of messages that can be retried in a single run. They are useful to prevent excessive load on the system when there are many messages in the WAITING_FOR_RETRY or SEND_ENQUEUED status.

• Merged the deprecated ongoing messages sanitizer with the newer unsent messages sanitizer job
• Improved logic of the retry worker to ignore the retry policies of PULL messages and to avoid conflicts with the sanitizer job

• Added new properties in Domibus to limit the maximum number of days taken into account for the earchiving jobs

• Added possibility to opt-out from eArchiving-related alerts

• Added new properties domibus.diagnostics.cron and domibus.diagnostics.list for configuring regular diagnostics data in the logs (by default diagnostics are disabled)

• Fixed error preventing the user from clicking 'Resend all' in the Messages page of the Admin Console

Please also note that 5.1.9 release uses org.infinispan library that presents a vulnerability (CVE-2025-0736) in the following configuration that should be avoided:

The vulnerability occurs when cluster nodes discover each other via a shared database (JGroups with JDBC_PING), instead of using multicast (UDP) or static configurations.

Default configuration of org.infinispan library in Domibus is not exposed to the vulnerability.

Domibus 5.1.9 is backward compatible with 5.1.8 and the upgrade is not mandatory, but it is highly recommended.

Supported platforms:

• Application servers:

  • WildFly 26.1.x

  • WebLogic 12.2.1.4 (tested version, future versions might work)

  • Apache Tomcat 9.0.x

• Database:

  • MySQL 8 (future versions might work)

  • Oracle 12c R2 and Oracle 19c

•  Java 8 features for compile, tested to run correctly with:

  • • Oracle JDK 8 for WebLogic
    • OpenJDK 11 for WildFly and Tomcat

Security Note 1: To ensure your setup’s security, users installing any of the Domibus packages labelled as “Full Distribution” have the responsibility to update the application servers to the latest version after the installation.

Security Note 2: Please consult this page for essential guidelines and best practices for ensuring a secure and robust deployment of the Domibus Access Point -https://ec.europa.eu/digital-building-blocks/sites/display/DIGITAL/Domibus+Secure+Deployment+Recommendations

Technical Documentation

Upgrade from 5.1.8 to 5.1.9

In order to upgrade to Domibus 5.1.9, please follow the steps from the Domibus upgrade procedure, click here

Release notes

Please find below the list of new features, improvements, and solved bugs. 

Improvements 

EDELIVERY-15245 Improve the StuckMessageSanitiser
EDELIVERY-15323 SendRetryWorker should only consider the max retry timeout for PUSH messages
EDELIVERY-15235 [EARCHIVE] Implement a timeWindowLimit for sanitizer and continuous earchiving processes
EDELIVERY-15250 Domibus diagnostic data optional job
EDELIVERY-15307 Improve the RetryWorker - 5.1.9
EDELIVERY-15308 [EARCHIVE] [SANITIZER] Opt out of createEventOnNonFinalMessages - 5.1.9

Bug fixes

EDELIVERY-15309 [CCNEB] - [INC03902778] - Domibus/5.1.8: this.getFiltersAsObject is not a function when resending all from console
EDELIVERY-15305 [EARCHIVE] Sanitizer end date is wrong for check nonFinalMessages - 5.1.9

Known Bugs

EDELIVERY-13917 Possibility to upload a keystore with a keystore password that is not the same as the password for the private keys

For more information, please contact us via our portal or by e-mail: EC-EDELIVERY-SUPPORT@ec.europa.eu

Access the eDelivery videos