Upgraded OpenSSL to 3.0.8

[migarc1]

[ThomasDevoogdt]

Upgrade to 3.1.1 you mean? Fix your git message and pull request title.

[cla-assistant[bot]]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[vivek-datadog]

Hello @migarc1 👋 Reaching out here to check if there is a planned timeline for upgrading openssl from v3.0.8 to the latest in librdkafka.

I am particularly looking to understand when librdkafka would be free of the below CVEs that are currently exposed in openssl v3.0.8

• https://nvd.nist.gov/vuln/detail/CVE-2023-3817
• https://nvd.nist.gov/vuln/detail/CVE-2023-0464
• https://nvd.nist.gov/vuln/detail/CVE-2023-0465
• https://nvd.nist.gov/vuln/detail/CVE-2023-0466
• https://nvd.nist.gov/vuln/detail/CVE-2023-1255
• https://nvd.nist.gov/vuln/detail/CVE-2023-2650
• https://nvd.nist.gov/vuln/detail/CVE-2023-2975
• https://nvd.nist.gov/vuln/detail/CVE-2023-4807
• https://nvd.nist.gov/vuln/detail/CVE-2023-5363
• https://nvd.nist.gov/vuln/detail/CVE-2023-5678

[trapeznikov]

Is there any reason why this was not merged in almost a year? Does Confluent have SLAs for fixing High vulnerabilities?

[emasab]

Closed by #4215