On the openssl side, I did not check earlier, but we cannot upgrade it yet because there's no 1.1.1 release after the one we already have. Something else related is that the 1.x line will be deprecated this September, and osquery has to move to 3.x by then.