doc: add OpenSSL 3.0.7 assessment (#4899)

Author: RafaelGSS

locale/en/blog/vulnerability/openssl-november-2022.md

@@ -0,0 +1,51 @@
+---
+date: 2022-10-28T19:00:01.316Z
+category: vulnerability
+title: OpenSSL november security release
+slug: openssl-november-2022
+layout: blog-post.hbs
+author: Rafael Gonzaga
+---
+
+### Summary
+
+The Node.js project may be releasing new versions across all of its supported
+release lines in the first week of November to incorporate upstream patches
+from OpenSSL. Please read on for full details.
+
+### OpenSSL
+
+The OpenSSL project
+[announced](https://mta.openssl.org/pipermail/openssl-announce/2022-October/000238.html)
+will release OpenSSL 3.0.7 on the 1th of
+November 2022 between 1300-1700 UTC. The release will fix security defects on which
+the _highest_ severity issue is CRITICAL.
+
+[security policy](https://www.openssl.org/policies/secpolicy.html).
+
+Node.js v16.x, v18.x and v19.x use OpenSSL v3.
+Therefore all active LTS release lines are impacted by this update.
+
+At this stage, due to embargo, the exact nature of these defects is uncertain
+as well as the impact they will have on Node.js users.
+
+After assessing the impact on Node.js, it will be decided whether the issues
+fixed require immediate security releases of Node.js, or whether they can be
+included in the normally scheduled updates.
+
+Please monitor the **nodejs-sec** Google Group for updates, including a
+decision within 24 hours after the OpenSSL release regarding release timing,
+and full details of the defects upon eventual release:
+https://groups.google.com/forum/#!forum/nodejs-sec
+
+### Contact and future updates
+
+The current Node.js security policy can be found at
+<https://github.com/nodejs/node/blob/HEAD/SECURITY.md#security>,
+including information on how to report a vulnerability in Node.js.
+
+Subscribe to the low-volume announcement-only **nodejs-sec** mailing list at
+https://groups.google.com/forum/#!forum/nodejs-sec to stay up to date on
+security vulnerabilities and security-related releases of Node.js and the
+projects maintained in the
+[nodejs GitHub organization](https://github.com/nodejs).