OpenSSL: update to 3.0.11

OpenSSL 3.0.11 addresses:

    POLY1305 MAC implementation corrupts XMM registers on Windows (CVE-2023-4807)

Relnotes:	Yes
Pull request:	https://github.com/freebsd/freebsd-src/pull/852
Sponsored by:	The FreeBSD Foundation

secure/lib/libcrypto/man/man3/BIO_s_mem.3

@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man 4.14 (Pod::Simple 3.40)
+.\" Automatically generated by Pod::Man 4.14 (Pod::Simple 3.42)
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -132,8 +132,8 @@
 .rm #[ #] #H #V #F C
 .\" ========================================================================
 .\"
-.IX Title "BIO_S_MEM 3"
-.TH BIO_S_MEM 3 "2023-08-01" "3.0.10" "OpenSSL"
+.IX Title "BIO_S_MEM 3ossl"
+.TH BIO_S_MEM 3ossl "2023-09-19" "3.0.11" "OpenSSL"
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -196,6 +196,8 @@ positive return value \fBv\fR should be set to a negative value, typically \-1.
 .PP
 \&\fBBIO_get_mem_data()\fR sets *\fBpp\fR to a pointer to the start of the memory BIOs data
 and returns the total amount of data available. It is implemented as a macro.
+Note the pointer returned by this call is informative, no transfer of ownership
+of this memory is implied.  See notes on \fBBIO_set_close()\fR.
 .PP
 \&\fBBIO_set_mem_buf()\fR sets the internal \s-1BUF_MEM\s0 structure to \fBbm\fR and sets the
 close flag to \fBc\fR, that is \fBc\fR should be either \s-1BIO_CLOSE\s0 or \s-1BIO_NOCLOSE.\s0
@@ -249,6 +251,10 @@ preceding that write operation cannot be undone.
 .PP
 Calling \fBBIO_get_mem_ptr()\fR prior to a \fBBIO_reset()\fR call with
 \&\s-1BIO_FLAGS_NONCLEAR_RST\s0 set has the same effect as a write operation.
+.PP
+Calling \fBBIO_set_close()\fR with \s-1BIO_NOCLOSE\s0 orphans the \s-1BUF_MEM\s0 internal to the
+\&\s-1BIO,\s0 _not_ its actual data buffer. See the examples section for the proper
+method for claiming ownership of the data pointer for a deferred free operation.
 .SH "BUGS"
 .IX Header "BUGS"
 There should be an option to set the maximum size of a memory \s-1BIO.\s0
@@ -289,9 +295,26 @@ Extract the \s-1BUF_MEM\s0 structure from a memory \s-1BIO\s0 and then free up t
 \& BIO_set_close(mem, BIO_NOCLOSE); /* So BIO_free() leaves BUF_MEM alone */
 \& BIO_free(mem);
 .Ve
+.PP
+Extract the \s-1BUF_MEM\s0 ptr, claim ownership of the internal data and free the \s-1BIO\s0
+and \s-1BUF_MEM\s0 structure:
+.PP
+.Vb 2
+\& BUF_MEM *bptr;
+\& char *data;
+\&
+\& BIO_get_mem_data(bio, &data);
+\& BIO_get_mem_ptr(bio, &bptr);
+\& BIO_set_close(mem, BIO_NOCLOSE); /* So BIO_free orphans BUF_MEM */
+\& BIO_free(bio);
+\& bptr\->data = NULL; /* Tell BUF_MEM to orphan data */
+\& BUF_MEM_free(bptr);
+\& ...
+\& free(data);
+.Ve
 .SH "COPYRIGHT"
 .IX Header "COPYRIGHT"
-Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved.
+Copyright 2000\-2023 The OpenSSL Project Authors. All Rights Reserved.
 .PP
 Licensed under the Apache License 2.0 (the \*(L"License\*(R").  You may not use
 this file except in compliance with the License.  You can obtain a copy