New releases have been published. Just an update to openssl-3 this time.

does new releases mean r48?

No, r48 is scheduled for release on the first Monday of November, which is quite late this time - the 6th.

ah, thanks

omnios.org/rn/r46 and omnios.org/rn/r44 for these two, which are just updates to those two supported versions (r38, the other supported version does not have openssl 3)

how critical is this update? I'm about to go on vacation and would prefer not to make host changes right now unless they're critical.

You have to make your own judgement based on the security advisory but I think a fair summary is

The OpenSSL SSL/TLS implementation is not affected by this issue, it's a fault in an "uncommon operation" in a "recently introduced API".

thanks