New OpenVox Agent Releases
partyfrog 9.1.1 & 8.31.1
These releases update the openssl trust store (and Java trust store on OpenVox 8). They vendor the same certificates as the Mozilla NSS 3.131.1 release. Most notably is the removal of 3 emSign / eMudhra CA certificates because of their weak/leaked private keys (see also):
emSign ECC Root CA - C3
emSign ECC Root CA - G3
emSign Root CA - C1
The 8.31.1 release also updates curl to fix a CVE. The packages are available on our mirrors. Checkout the full release notes at
https://github.com/OpenVoxProject/openvox/releases/tag/9.1.1 &
https://github.com/OpenVoxProject/openvox/releases/tag/8.31.1