diff --git a/changelogs/unreleased/bump-openssl-to-111n.md b/changelogs/unreleased/bump-openssl-to-111n.md
new file mode 100644
index 0000000000000000000000000000000000000000..2a968c4ddb5e56f80d1233345a4bf97c56ec17d8
--- /dev/null
+++ b/changelogs/unreleased/bump-openssl-to-111n.md
@@ -0,0 +1,3 @@
+## feature/build
+
+* Bump OpenSSL from 1.1.1f to 1.1.1n for static build (gh-6947).
diff --git a/static-build/CMakeLists.txt b/static-build/CMakeLists.txt
index f3bb28ad0339f06b713372fc01922bc492a25617..c830daf013a7797ace4f0399c6fae55f369db355 100644
--- a/static-build/CMakeLists.txt
+++ b/static-build/CMakeLists.txt
@@ -12,8 +12,8 @@ set(LIBICU_VERSION release-71-1/icu4c-71_1)
 set(LIBICU_HASH e06ffc96f59762bd3c929b217445aaec)
 set(LIBICONV_VERSION 1.16)
 set(LIBICONV_HASH 7d2a800b952942bb2880efb00cfd524c)
-set(OPENSSL_VERSION 1.1.1f)
-set(OPENSSL_HASH 3f486f2f4435ef14b81814dbbc7b48bb)
+set(OPENSSL_VERSION 1.1.1n)
+set(OPENSSL_HASH 2aad5635f9bb338bc2c6b7d19cbc9676)
 set(ZLIB_VERSION 1.2.11)
 set(ZLIB_HASH 1c9f62f0778697a09d36121ead88e08e)
 set(NCURSES_VERSION 6.2)