Repository navigation
8.31.1
·
414 commits
to main
since this release
Immutable
release. Only release title and notes can be modified.
8.31.1
This tag was signed with the committer’s verified signature.
Fixed security issues
This release updates the openssl and Java trust store. It vendors the same certificates as the Mozilla NSS 3.131.1 release. Most notably is the removal of 3 emSign / eMudhra CA certificates because of their weak/leaked private keys (see also):
- emSign ECC Root CA - C3
- emSign ECC Root CA - G3
- emSign Root CA - C1
Fixed CVEs
| Identifier | CVSS 3.1 Score | Resolved By |
|---|---|---|
| CVE-2026-92392 | 8.1 | pkg:github/curl/curl@8.23.0 |
Open CVEs
| Identifier | CVSS 3.1 Score | Affects |
|---|---|---|
| CVE-2026-84782 | 8.2 | pkg:github/openssl/openssl@3.0.22 |
| CVE-2026-75806 | 5.3 | pkg:github/openssl/openssl@3.0.22 |
| CVE-2026-35189 | 5.3 | pkg:github/openssl/openssl@3.0.22 |
| CVE-2026-75805 | 5.3 | pkg:github/openssl/openssl@3.0.22 |
| CVE-2026-54872 | 3.7 | pkg:github/openssl/openssl@3.0.22 |
| CVE-2026-77696 | 3.7 | pkg:github/openssl/openssl@3.0.22 |
OpenSSL 3.0 is EoL and won't receive updates anymore. Please update to openvox-agent 9
What's Changed
Other Changes
- Promote puppet-runtime 2026.10.21.1 into 8.x by @OpenVoxProjectBot in #735
Full Changelog: 8.31.0...8.31.1
Contributors
OpenVoxProjectBot