Debian upstream had froze the openssl/libssl package to 1.1.1n. You are right that it is out of date, it's just Linux distributions like Debian deliberately don't roll releases.