Re: OpenSSL Security Advisory, 1 Nov 2022

Hello, Chef community!

On November 1, 2022, the OpenSSL Foundation released OpenSSL version 3.0.7. This release is a security fix and addresses two identified “HIGH” vulnerabilities. Progress has already conducted a thorough review of our products, including all Progress Chef products, and determined that none are using the impacted versions of OpenSSL as shipped and/or deployed.

No further action is necessary at this time with respect to your use of Progress Chef.

If you wish to read more about the vulnerabilities, the OpenSSL Foundation has published a blog about the release and security patch, as well as their official advisory of the CVEs.