Hello, Chef community!
On November 1, 2022, the OpenSSL Foundation released OpenSSL version 3.0.7. This release is a security fix and addresses two identified “HIGH” vulnerabilities. Progress has already conducted a thorough review of our products, including all Progress Chef products, and determined that none are using the impacted versions of OpenSSL as shipped and/or deployed.
No further action is necessary at this time with respect to your use of Progress Chef.
If you wish to read more about the vulnerabilities, the OpenSSL Foundation has published a blog about the release and security patch, as well as their official advisory of the CVEs.