Skip to content

Commit c56c090

Browse files
SharpieSharpie
committed
Add CVE fixes to OpenVox release notes
This commit adds tables of CVE fixes to the `openvox-agent` release notes for releases made in 2026. These nodes were created by diffing library versions recorded in the Vanagon component info: https://github.com/OpenVoxProject/puppet-runtime/blob/main/component_info.json And then cross-referencing the results against notices published to https://nvd.nist.gov. Signed-off-by: Charlie Sharpsteen <charlie@overlookinfratech.com>
1 parent 264bdf1 commit c56c090

1 file changed

Lines changed: 69 additions & 2 deletions

File tree

‎docs/_openvox_8x/release_notes.markdown‎

Lines changed: 69 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -22,15 +22,15 @@ You can either upgrade to Puppet 7 and then switch to OpenVox 7 and then upgrade
2222

2323
Released April 18, 2026.
2424

25-
This is a bug-fix and security release of OpenVox.
25+
This is a bug-fix release of OpenVox.
2626

2727
All bug fixes, new features and other changes are provided on the [project's github release page](https://github.com/OpenVoxProject/openvox/releases/tag/8.26.2).
2828

2929
## OpenVox 8.26.1
3030

3131
Released April 16, 2026.
3232

33-
This is a bug-fix and security release of OpenVox.
33+
This is a bug-fix release of OpenVox.
3434

3535
All bug fixes, new features and other changes are provided on the [project's github release page](https://github.com/OpenVoxProject/openvox/releases/tag/8.26.1).
3636

@@ -42,10 +42,77 @@ This is a bug-fix and security release of OpenVox.
4242

4343
All bug fixes, new features and other changes are provided on the [project's github release page](https://github.com/OpenVoxProject/openvox/releases/tag/8.26.0).
4444

45+
### Security Issues Resolved in 8.26.0
46+
47+
|===================================================================|============|=====================================|
48+
| Identifier | CVSS Score | Resolved By |
49+
|===================================================================|============|=====================================|
50+
| [CVE-2026-27820](https://nvd.nist.gov/vuln/detail/CVE-2026-27820) | N/A | `pkg:gem/zlib@3.0.1` |
51+
|-------------------------------------------------------------------|------------|-------------------------------------|
52+
| [CVE-2026-3805](https://nvd.nist.gov/vuln/detail/CVE-2026-3805) | 7.5 | `pkg:github/curl/curl@8.19.0` |
53+
|-------------------------------------------------------------------|------------|-------------------------------------|
54+
| [CVE-2026-1965](https://nvd.nist.gov/vuln/detail/CVE-2026-1965) | 6.5 | `pkg:github/curl/curl@8.19.0` |
55+
|-------------------------------------------------------------------|------------|-------------------------------------|
56+
| [CVE-2026-3784](https://nvd.nist.gov/vuln/detail/CVE-2026-3784) | 6.5 | `pkg:github/curl/curl@8.19.0` |
57+
|-------------------------------------------------------------------|------------|-------------------------------------|
58+
| [CVE-2026-3783](https://nvd.nist.gov/vuln/detail/CVE-2026-3783) | 5.3 | `pkg:github/curl/curl@8.19.0` |
59+
|-------------------------------------------------------------------|------------|-------------------------------------|
60+
| [CVE-2026-31789](https://nvd.nist.gov/vuln/detail/CVE-2026-31789) | 9.8 | `pkg:github/openssl/openssl@3.0.20` |
61+
|-------------------------------------------------------------------|------------|-------------------------------------|
62+
| [CVE-2026-28387](https://nvd.nist.gov/vuln/detail/CVE-2026-28387) | 8.1 | `pkg:github/openssl/openssl@3.0.20` |
63+
|-------------------------------------------------------------------|------------|-------------------------------------|
64+
| [CVE-2026-28389](https://nvd.nist.gov/vuln/detail/CVE-2026-28389) | 7.5 | `pkg:github/openssl/openssl@3.0.20` |
65+
|-------------------------------------------------------------------|------------|-------------------------------------|
66+
| [CVE-2026-28390](https://nvd.nist.gov/vuln/detail/CVE-2026-28390) | 7.5 | `pkg:github/openssl/openssl@3.0.20` |
67+
|-------------------------------------------------------------------|------------|-------------------------------------|
68+
| [CVE-2026-28388](https://nvd.nist.gov/vuln/detail/CVE-2026-28388) | 7.5 | `pkg:github/openssl/openssl@3.0.20` |
69+
|-------------------------------------------------------------------|------------|-------------------------------------|
70+
| [CVE-2026-31790](https://nvd.nist.gov/vuln/detail/CVE-2026-31790) | 7.5 | `pkg:github/openssl/openssl@3.0.20` |
71+
|===================================================================|============|=====================================|
72+
73+
4574
## OpenVox 8.25.0
4675

4776
Released February 17, 2026.
4877

4978
This is a bug-fix and security release of OpenVox.
5079

5180
All bug fixes, new features and other changes are provided on the [project's github release page](https://github.com/OpenVoxProject/openvox/releases/tag/8.25.0).
81+
82+
### Security Issues Resolved in 8.25.0
83+
84+
|===================================================================|============|=====================================|
85+
| Identifier | CVSS Score | Resolved By |
86+
|===================================================================|============|=====================================|
87+
| [CVE-2025-24294](https://nvd.nist.gov/vuln/detail/CVE-2025-24294) | 5.3 | `pkg:gem/resolv@0.2.3` |
88+
|-------------------------------------------------------------------|------------|-------------------------------------|
89+
| [CVE-2025-61594](https://nvd.nist.gov/vuln/detail/CVE-2025-61594) | 7.5 | `pkg:gem/uri@0.12.5` |
90+
|-------------------------------------------------------------------|------------|-------------------------------------|
91+
| [CVE-2025-14017](https://nvd.nist.gov/vuln/detail/CVE-2025-14017) | 6.3 | `pkg:github/curl/curl@8.18.0` |
92+
|-------------------------------------------------------------------|------------|-------------------------------------|
93+
| [CVE-2025-13034](https://nvd.nist.gov/vuln/detail/CVE-2025-13034) | 5.9 | `pkg:github/curl/curl@8.18.0` |
94+
|-------------------------------------------------------------------|------------|-------------------------------------|
95+
| [CVE-2025-14819](https://nvd.nist.gov/vuln/detail/CVE-2025-14819) | 5.3 | `pkg:github/curl/curl@8.18.0` |
96+
|-------------------------------------------------------------------|------------|-------------------------------------|
97+
| [CVE-2025-15079](https://nvd.nist.gov/vuln/detail/CVE-2025-15079) | 5.3 | `pkg:github/curl/curl@8.18.0` |
98+
|-------------------------------------------------------------------|------------|-------------------------------------|
99+
| [CVE-2025-14524](https://nvd.nist.gov/vuln/detail/CVE-2025-14524) | 5.3 | `pkg:github/curl/curl@8.18.0` |
100+
|-------------------------------------------------------------------|------------|-------------------------------------|
101+
| [CVE-2025-15224](https://nvd.nist.gov/vuln/detail/CVE-2025-15224) | 3.1 | `pkg:github/curl/curl@8.18.0` |
102+
|-------------------------------------------------------------------|------------|-------------------------------------|
103+
| [CVE-2025-15467](https://nvd.nist.gov/vuln/detail/CVE-2025-15467) | 8.8 | `pkg:github/openssl/openssl@3.0.19` |
104+
|-------------------------------------------------------------------|------------|-------------------------------------|
105+
| [CVE-2025-69420](https://nvd.nist.gov/vuln/detail/CVE-2025-69420) | 7.5 | `pkg:github/openssl/openssl@3.0.19` |
106+
|-------------------------------------------------------------------|------------|-------------------------------------|
107+
| [CVE-2025-69421](https://nvd.nist.gov/vuln/detail/CVE-2025-69421) | 7.5 | `pkg:github/openssl/openssl@3.0.19` |
108+
|-------------------------------------------------------------------|------------|-------------------------------------|
109+
| [CVE-2025-69419](https://nvd.nist.gov/vuln/detail/CVE-2025-69419) | 7.4 | `pkg:github/openssl/openssl@3.0.19` |
110+
|-------------------------------------------------------------------|------------|-------------------------------------|
111+
| [CVE-2026-22795](https://nvd.nist.gov/vuln/detail/CVE-2026-22795) | 5.5 | `pkg:github/openssl/openssl@3.0.19` |
112+
|-------------------------------------------------------------------|------------|-------------------------------------|
113+
| [CVE-2026-22796](https://nvd.nist.gov/vuln/detail/CVE-2026-22796) | 5.3 | `pkg:github/openssl/openssl@3.0.19` |
114+
|-------------------------------------------------------------------|------------|-------------------------------------|
115+
| [CVE-2025-68160](https://nvd.nist.gov/vuln/detail/CVE-2025-68160) | 4.7 | `pkg:github/openssl/openssl@3.0.19` |
116+
|-------------------------------------------------------------------|------------|-------------------------------------|
117+
| [CVE-2025-69418](https://nvd.nist.gov/vuln/detail/CVE-2025-69418) | 4 | `pkg:github/openssl/openssl@3.0.19` |
118+
|===================================================================|============|=====================================|

0 commit comments

Comments
 (0)