OpenSSL 3.0.7 plan?

[vcunat]

OpenSSL 3.0.7 update (2022-11-01) FAQ

What is this post about? Tomorrow (2022-11-01) the OpenSSL team will release a critical security update to their 3.0 tree. See the official announcement. What does critical mean? Critical means, that the upcoming vulnerability is likely exploitable in a common configuration scenario. See /policies/general/security-policy.html for the full explanation. CVE-2022-3602 has meanwhile been downgraded to HIGH severity, as it is probably not exploitable How do I know if I am affected? The NixOS …