Details are listed here: https://www.openssl.org/news/secadv/20240627.txt
Highlights are:
- rated
low
- haven't released a fix yet
Puppet-agent 7.31.0 has OpenSSL version 1.1.1v (patched of course) and puppet-agent 8.7.0 has OpenSSl version 3.0.13. When a fix for this CVE is released we should patch the former and upgrade the later.