New OpenVox-Server release! Edit

Published on Jan 16, 2026 by bastelfreak.

OpenVox-Server 8.12.0 got released!

After our testing period and the FIPS openvox-agent release, our new OpenVox-Server is available!

This version represents a significant change in how openvox-server is built. Most of this is under the hood, but should lower the bar to development and allow us to make changes more easily and rapidly.

In addition to the standard GitHub release notes, these are the important changes in this version.

  • Platform support
    • Removed: EL 7
    • Added: Amazon Linux 2, Fedora 42, Fedora 43, Redhatfips 8, Redhatfips 9 (Redhatfips 10 will come in the future)
    • Note that Amazon Linux 2 support will be removed when it goes EOL in June of 2026
    • Note that the platform name redhatfips is used since Puppet uses this nomenclature, but it should work on any FIPS-enabled Enterprise Linux-based platform.
  • Java 11 support has been removed, and either Java 17 or Java 21 must be used.
  • Removes Janino support. Logback removed support for it due to CVEs. This means that logbook evaluator filters are no longer supported. These were not commonly used so unless you specifically included tags in your logback config, you should not be affected.
  • Also due to the removal of Janino, Trapperkeeper’s ‘post-config-script’ option for injecting Java code directly into Jetty for controlling low-level Jetty settings that are not exposed by Trapperkeeper is no longer supported. This is also a feature not commonly used, and was a potential security risk in itself.
  • This version of openvox-server and all related components have now been migrated to the org.openvoxproject namespace and are available on Clojars, with fixed up testing and release workflows.
  • Lots and lots of dependency updates that you should not notice, but brings the code up to a more maintainable standard.
  • The following third-party components were updated to address CVEs (those are just the updates that resolve CVEs, we updated almost every dependency):
  • Additionally, this is the first FIPS release of OpenVox server, but compared to the baseline FIPS config from before the fork:
  • We added PrivateTmp=true to the systemd unit. This is a best practice since years, and theforeman/puppet does that since years. The next OpenVoxDB release will contain the same change.

A big thank you to Nick Burgan and Overlook InfraTech for all the work and the FIPS support!

Please provide feedback! Let us know if you used the beta period & if we should adjust it in the future. If you find any bugs or want to contribute, please come to our #openvox channel on IRC or slack.

What’s Changed

For a comprehensive look at what’s changed (including new features, bug fixes, and dependency updates), please see the release notes for 8.12.0.