diff --git a/Makefile b/Makefile
index b53e619d..7b584a2e 100644
--- a/Makefile
+++ b/Makefile
@@ -11,7 +11,7 @@ endif
 #===== Versioning ==============================================================
 
 ## OpenSSL version to build
-VERSION ?= 1.1.1k
+VERSION ?= 1.1.1u
 
 ## Extra version of the distributed package
 PACKAGE_VERSION ?= 1
diff --git a/Package.swift b/Package.swift
index 3fd017f8..33af5554 100644
--- a/Package.swift
+++ b/Package.swift
@@ -14,9 +14,9 @@ let package = Package(
     targets: [
         .binaryTarget(name: "openssl",
                       // update version in URL path
-                      url:"https://github.com/cossacklabs/openssl-apple/releases/download/1.1.11101/openssl-static-xcframework.zip",
+                      url:"https://github.com/cossacklabs/openssl-apple/releases/download/1.1.12101/openssl-static-xcframework.zip",
                       // Run from package directory:
                       // swift package compute-checksum output/openssl-static-xcframework.zip
-                      checksum: "ea9c1a3fa59a51c13a811f4f11ada330d9e3993c3bc225db102127595e2d97ba"),
+                      checksum: "2a2023e200e3472cb6b06ca42a5903e66b567e223d8b540ccb3767fa61abf62f"),
     ]
 )
diff --git a/build-libssl.sh b/build-libssl.sh
index 5348d093..e922bd06 100755
--- a/build-libssl.sh
+++ b/build-libssl.sh
@@ -25,7 +25,7 @@ set -u
 # SCRIPT DEFAULTS
 
 # Default version in case no version is specified
-DEFAULTVERSION="1.1.1k"
+DEFAULTVERSION="1.1.1u"
 
 # Default (=full) set of targets (OpenSSL >= 1.1.1) to build
 DEFAULTTARGETS=`cat <<TARGETS
@@ -488,6 +488,7 @@ OPENSSL_CHECKSUMS="
   1.1.1g ddb04774f1e32f0c49751e21b67216ac87852ceb056b75209af2443400636d46
   1.1.1h 5c9ca8774bd7b03e5784f26ae9e9e6d749c9da2438545077e6b3d755a06595d9
   1.1.1k 892a0875b9872acd04a9fde79b1f943075d5ea162415de3047c327df33fbaee5
+  1.1.1u e2f8d84b523eecd06c7be7626830370300fbcc15386bf5142d72758f6963ebc6
 "
 checksum_checked=false
 while read version expectedSHA256; do
diff --git a/carthage/openssl-dynamic-xcframework.json b/carthage/openssl-dynamic-xcframework.json
index 2f969ac4..8cc53984 100644
--- a/carthage/openssl-dynamic-xcframework.json
+++ b/carthage/openssl-dynamic-xcframework.json
@@ -1,4 +1,5 @@
 {
+    "1.1.12101": "https://github.com/cossacklabs/openssl-apple/releases/download/1.1.12101/openssl-dynamic-xcframework.zip",
     "1.1.11101": "https://github.com/cossacklabs/openssl-apple/releases/download/1.1.11101/openssl-dynamic-xcframework.zip",
     "1.1.10803": "https://github.com/cossacklabs/openssl-apple/releases/download/1.1.10803/openssl-dynamic-xcframework.zip",
 }
diff --git a/carthage/openssl-static-xcframework.json b/carthage/openssl-static-xcframework.json
index 972a1b2f..832cdb34 100644
--- a/carthage/openssl-static-xcframework.json
+++ b/carthage/openssl-static-xcframework.json
@@ -1,4 +1,5 @@
 {
+    "1.1.12101": "https://github.com/cossacklabs/openssl-apple/releases/download/1.1.12101/openssl-static-xcframework.zip",
     "1.1.11101": "https://github.com/cossacklabs/openssl-apple/releases/download/1.1.11101/openssl-static-xcframework.zip",
     "1.1.10803": "https://github.com/cossacklabs/openssl-apple/releases/download/1.1.10803/openssl-static-xcframework.zip",
 }