OpenSSL 1.1.1* upgrade (Security)

[dnutan (Marc)]

I’d say no. That comes from upstream (CentOS / Red Hat) which keep what they consider stable versions (even if older), applying security patches to the packages.
Newer version available on CentOS 8.

Better explained:

Using 3rd Parties to keep up with package evolution?

CentOS keeps the same major/minor versions of (at least) any significant packages through a release’s life cycle, which does result in some pretty old versions of software. They do backport security fixes for those packages, though, so you aren’t left with vulnerable software. And for packages where you might really want a newer version (like PHP or MariaDB), Software Collections let you install newer versions alongside the default packages. I’d be concerned that using third-party repos for c…