openssl: fix low-severity CVE-2023-1255