Fixed security issues
This release updates the openssl and Java trust store. It vendors the same certificates as the Mozilla NSS 3.131.1 release. Most notably is the removal of 3 emSign / eMudhra CA certificates because of their weak/leaked private keys (see also):
- emSign ECC Root CA - C3
- emSign ECC Root CA - G3
- emSign Root CA - C1
Fixed CVEs
| Identifier | CVSS 3.1 Score | Resolved By |
|---|---|---|
| CVE-2026-92392 | 8.1 | pkg:github/curl/curl@8.23.0 |
Open CVEs
| Identifier | CVSS 3.1 Score | Affects |
|---|---|---|
| CVE-2026-84782 | 8.2 | pkg:github/openssl/openssl@3.0.22
|
| CVE-2026-75806 | 5.3 | pkg:github/openssl/openssl@3.0.22
|
| CVE-2026-35189 | 5.3 | pkg:github/openssl/openssl@3.0.22
|
| CVE-2026-75805 | 5.3 | pkg:github/openssl/openssl@3.0.22
|
| CVE-2026-54872 | 3.7 | pkg:github/openssl/openssl@3.0.22
|
| CVE-2026-77696 | 3.7 | pkg:github/openssl/openssl@3.0.22
|
OpenSSL 3.0 is EoL and won't receive updates anymore. Please update to openvox-agent 9
What's Changed
Other Changes
- Promote puppet-runtime 2026.10.21.1 into 8.x by @OpenVoxProjectBot in #735
Full Changelog: 8.31.0...8.31.1