diff --git a/third_party/nixpkgs/patches/openssl-1.1.1k.patch b/third_party/nixpkgs/patches/openssl-1.1.1k.patch
new file mode 100644
index 0000000000..4f13ec026b
--- /dev/null
+++ b/third_party/nixpkgs/patches/openssl-1.1.1k.patch
@@ -0,0 +1,15 @@
+diff --git a/pkgs/development/libraries/openssl/default.nix b/pkgs/development/libraries/openssl/default.nix
+index 2edf02e738f30..49ac7954169ff 100644
+--- a/pkgs/development/libraries/openssl/default.nix
++++ b/pkgs/development/libraries/openssl/default.nix
+@@ -160,8 +160,8 @@ in {
+   };
+ 
+   openssl_1_1 = common {
+-    version = "1.1.1j";
+-    sha256 = "1gw17520vh13izy1xf5q0a2fqgcayymjjj5bk0dlkxndfnszrwma";
++    version = "1.1.1k";
++    sha256 = "1rdfzcrxy9y38wqdw5942vmdax9hjhgrprzxm42csal7p5shhal9";
+     patches = [
+       ./1.1/nix-ssl-cert-file.patch
+ 
diff --git a/third_party/nixpkgs/patches/series b/third_party/nixpkgs/patches/series
index bd8d0ba6ce..68b750d4e0 100644
--- a/third_party/nixpkgs/patches/series
+++ b/third_party/nixpkgs/patches/series
@@ -1,2 +1,3 @@
 various.patch
 patch-cherrypy.patch
+openssl-1.1.1k.patch
diff --git a/third_party/nixpkgs/pkgs/development/libraries/openssl/default.nix b/third_party/nixpkgs/pkgs/development/libraries/openssl/default.nix
index 2edf02e738..49ac795416 100644
--- a/third_party/nixpkgs/pkgs/development/libraries/openssl/default.nix
+++ b/third_party/nixpkgs/pkgs/development/libraries/openssl/default.nix
@@ -160,8 +160,8 @@ in {
   };
 
   openssl_1_1 = common {
-    version = "1.1.1j";
-    sha256 = "1gw17520vh13izy1xf5q0a2fqgcayymjjj5bk0dlkxndfnszrwma";
+    version = "1.1.1k";
+    sha256 = "1rdfzcrxy9y38wqdw5942vmdax9hjhgrprzxm42csal7p5shhal9";
     patches = [
       ./1.1/nix-ssl-cert-file.patch