Chef Server 12.1.1 was released today.
This is a bug fix release which fixes bugs related to upgrades from
Open Source 11, Enterprise Chef 11, and Chef Server 12.
This release also ships OpenSSL 1.0.1p; however, Chef Server was not
vulnerable to CVE-2015-1793 since no version of Chef Server shipped the
affected versions.