Sonatype IQ Server 208.1 removes trust in root certificates affected by the eMudhra certificate authority compromise from its UI and backend container images, preventing connections that depend on compromised certificate chains. Sonatype released this self-managed IQ Server version on October 22, 2026.
eMudhra certificate authority compromise protections
The 208.1 change updates certificate trust protections in two product areas: the UI container image and the backend container image. In both locations, IQ Server no longer trusts the root certificates identified as affected by the eMudhra certificate authority compromise.
When a connection relies on a compromised certificate chain, IQ Server prevents that connection. The change addresses certificate-chain trust at the product-image level rather than adding a new policy, report, dashboard, or waiver workflow.
The scope of 208.1 is the eMudhra certificate trust update:
- UI container image: affected root certificates are no longer trusted.
- Backend container image: affected root certificates are no longer trusted.
- Connection handling: chains relying on compromised certificates are blocked.
Based on the official Sonatype release notes.
How Merito helps
Merito can support upgrade planning and validation for self-managed IQ Server deployments through implementation services and Sonatype expertise.
Merito is an authorized Sonatype reseller and services partner. Our Sonatype IQ Server team can scope licensing, sizing, and rollout for 208.1, and our enterprise upgrade services help you plan and validate the upgrade with minimal disruption to release schedules.