The OpenSSL 1.1.1r and 3.0.6 releases have been withdrawn. Apparently there is a regression that isn't security relevant but bad enough for them to recommend to downgrade. If failure to encrypt is LOW severity, no-one knows how bad things actually are... What a mess. https://marc.info/?l=openssl-announce&m=166558438331847&w=2