OpenSSL 3.0.7 tarballs are posted here: It appears based on release notes that this is overblown. Would require a vulnerable TLS client to connect to a malicious server - more phishing-based attack versed remote RCE. #openssl