OpenVox Server: Release Notes

OpenVox Server 8.15.1

Released July 22, 2026.

This is a bug-fix release of OpenVox Server.

All bug fixes, new features and other changes are provided on the project’s GitHub release page.

Known Issues in 8.15.1

Carried over from previous release

The issue with resolv timeouts when using multiple IPv6 nameservers is also present in this release. See OpenVox Server 8.15.0 Known Issues for details and a workaround.

OpenVox Server 8.15.0

This is an enhancement, bug-fix, and security release of OpenVox Server.

All bug fixes, new features and other changes are provided on the project’s GitHub release page.

Security Issues Resolved in 8.15.0

Known Issues in 8.15.0

resolv times out when /etc/resolv.conf contains multiple IPv6 nameservers

The JRuby 9.4.15.0 upgrade included in this release updated the Ruby resolv library to a newer version. This newer resolv version introduced a mismatch where queries to IPv6 DNS servers are sent using compressed addresses (e.g. 2001:db8::1), while responses arrive from un-compressed addresses (e.g. 2001:db8:0:0:0:0:0:1). This mis-match means that queries to IPv6 servers are never seen as “answered” and the library returns an empty [] response after waiting for 160 seconds.

This issue only occurs when /etc/resolv.conf is configured exclusively with two or more IPv6 nameservers. For example:

# cat /etc/resolv.conf
# Google Public DNS (IPv6)
nameserver 2001:4860:4860::8888
nameserver 2001:4860:4860::8844

This issue will affect modules that use the Resolv library to look up DNS records, notably: puppet-dnsquery.

The following command can be used to test if an OpenVox Server is affected by the issue:

/opt/puppetlabs/bin/puppetserver ruby -rtimeout -rresolv -e 'Timeout.timeout(10) { puts Resolv::DNS.new.getaddresses("voxpupuli.org") }'

The command will take several seconds to run, as a JVM is launched, but should print a list of DNS addresses to STDOUT:

104.21.84.238
172.67.198.227
2606:4700:3035::ac43:c6e3
2606:4700:3035::6815:54ee

The command will print a Timeout::Error if the issue is present:

Timeout::Error: execution expired
  timeout at uri:classloader:/META-INF/jruby.home/lib/ruby/stdlib/timeout.rb:199
   <main> at -e:1

See OpenVoxProject/openvox-server#535 for more details and subscribe for updates on a fix. Recommended workaround is to downgrade the openvox-server package to version 8.14.1.

OpenVox Server 8.14.1

Released June 24, 2026.

This is a bug-fix release of OpenVox Server.

All bug fixes, new features and other changes are provided on the project’s GitHub release page.

OpenVox Server 8.14.0

This is an enhancement, bug-fix, and security release of OpenVox Server.

All bug fixes, new features and other changes are provided on the project’s GitHub release page.

Security Issues Resolved in 8.14.0

OpenVox Server 8.13.0

Released May 4, 2026.

This is an enhancement and bug-fix release of OpenVox Server.

All bug fixes, new features and other changes are provided on the project’s GitHub release page.

Security Issues Resolved in 8.13.0

Known Issues in 8.13.0

jruby-openssl 0.15.4 Fails to Parse EC Keys

The openssl JRuby library included in this release may fail to parse some PEM files that previous versions were able to parse, resulting in errors such as:

java.lang.NoSuchMethodError: 'org.bouncycastle.asn1.ASN1Primitive org.bouncycastle.asn1.sec.ECPrivateKey.getParameters()'

Not all files are affected, the error seems to be triggered by specific patterns in ASN.1 content. This issue is fixed in version 8.14.1.

OpenVox Server 8.12.1

Released January 21, 2025.

This is a bug-fix release of OpenVox Server, addressing a performance regression introduced in 8.12.0.

All bug fixes, new features and other changes are provided on the project’s GitHub release page.

OpenVox Server 8.12.0

Released January 21, 2025.

This is a major release of OpenVox Server. Java 11 support has been removed; Java 17 or 21 is now required. The build system has been significantly overhauled with new platform support (Amazon Linux 2, Fedora 42/43, RHEL FIPS variants), migration to the org.openvoxproject namespace on Clojars, and numerous security dependency updates addressing CVEs in JRuby, Jetty, Jackson, Logback, and Bouncy Castle.

All bug fixes, new features and other changes are provided on the project’s GitHub release page.

OpenVox Server 8.11.0

Released August 24, 2024.

This is a bug-fix and enhancement release of OpenVox Server.

All bug fixes, new features and other changes are provided on the project’s GitHub release page.

OpenVox Server 8.10.0

Released July 31, 2024.

This is an enhancement release of OpenVox Server, adding Java 21 support and security dependency updates.

All bug fixes, new features and other changes are provided on the project’s GitHub release page.

OpenVox Server 8.9.0

Released July 19, 2024.

This is the initial OpenVox Server release. It switches packaging to OpenVoxProject releases, replaces the puppetserver-ca gem with openvoxserver-ca, and removes the analytics/dropsonde integration.

All bug fixes, new features and other changes are provided on the project’s GitHub release page.