Domibus 5.1.3 released

Domibus version 5.1.3 is now available. This release brings important security enhancements and fixes to mark another step forward in our commitment to providing a robust and secure eDelivery Access Point sample implementation.

In version 5.1.3, we have addressed specific challenges related to security in environments where multiple users access the system simultaneously (known as multitenancy). These improvements include:

• Resolving an issue where different user domains could mistakenly mix up, ensuring that each user's data remains distinct and secure.
• Fixing a problem with logback configurations in multitenant setups, which now requires the actual domain name to be specified in configuration files.
• Correcting an issue with EU Login, where users with the role USER faced difficulties switching between domains.
• Enhancing Domibus' security by investigating and fixing vulnerabilities identified by the OWASP standards.

Moreover, Domibus 5.1.3 introduces several bug fixes that enhance its overall reliability and user experience. These include solutions to issues with logging after updates, domain switching for EU Login users, and the application of security fixes related to domain mixing. We have also made strides in addressing OWASP vulnerabilities, ensuring that Domibus remains secure against known threats.

For a smooth upgrade to Domibus 5.1.3, please follow our migration documentation (especially in case of a multitenancy setup).

For those new to Domibus or looking to deepen their understanding, we have resources are designed to support users in deploying, configuring and integrating Domibus into their systems effectively.

We are pleased to announce that Domibus 5.0.8 is now available. This latest release in the 5.0.x line of the sample implementation of the eDelivery Access Point includes several enhancements aimed at improving performance, fixing bugs and addressing security vulnerabilities. We strongly recommend you upgrade to this version to benefit from these improvements.

At the heart of this update is a focus on performance enhancements. Key improvements include refined query performance for payload handling and an optimised Messages page, ensuring quicker access and smoother navigation. By eliminating inefficient cross joins and enhancing the partitions retention mechanism, Domibus 5.0.8 delivers a more responsive and reliable solution.

We recognise the importance of security: this update introduces fixes to several security vulnerabilities, thereby fortifying Domibus' defence against potential threats. Furthermore, the 5.0.8 version provides a more robust mechanism for handling authentication errors, now logging them with a WARN status to improve issue tracking and resolution.

Domibus 5.0.8 is backward compatible with 5.0.7 and earlier 5.0 versions, with the exception for those using Access Points in PULL mode. For these Access Points, a fix in the validation of the party roles means that pre-5.0.8 PModes may not be compatible with Domibus 5.0.8. We have provided a way to temporarily bypass this validation until you can update your PMode. For detailed steps on what to do, please check the upgrade documentation. The upgrade is not mandatory but highly recommended.

We have also made Domibus tougher against issues that can happen during the upgrade process. Now, if your current version is not set up correctly or if there are problems during the upgrade, the migration scripts will not run or will stop to prevent bigger issues.

For release resources that detail new features and fixed bugs, as well as include upgrade steps, see Domibus v5.1.3.

As always, the eDelivery team is ready to assist with any questions or support needs. Contact us via our portal or by email for further assistance.

For further assistance or more information, please contact us via our portal or e-mail: EC-EDELIVERY-SUPPORT@ec.europa.eu.

eDelivery Building Block   

eDelivery is a Building Block that provides technical specifications and standards, installable software and ancillary services to allow projects to create a network of nodes for secure digital data exchange.

Domibus is the sample software provided by the European Commission to implement an eDelivery AS4 Access Point for the interoperable, secure and reliable data exchange. It is based on the eDelivery AS4 profile, an open technical specification for the secure, web-based, payload-agnostic exchange of data or documents.

Stay tuned for the latest updates on eDelivery services by checking the Building Block's X and web page. For more information, do not hesitate to register for personalised news or contact us via our portal or by e-mail: EC-EDELIVERY-SUPPORT@ec.europa.eu.