OpenSSL 3.0.7 released

The much-anticipated OpenSSL 3.0.7 release, which fixes some high-risksecurity problems, is available. The releasenotes list two vulnerabilities (CVE-2022-3786 and CVE-2022-3602) thathave not yet been documented on the OpenSSLvulnerabilities page. LWN commenter mat2 has provided the relevant information, though. Itis worth updating quickly, but many sites do not appear to be at immediaterisk.

Update: the associated securityadvisory is now available.