diff --git a/omnibus_overrides.rb b/omnibus_overrides.rb
index ea5e55bbe..cef3a2611 100644
--- a/omnibus_overrides.rb
+++ b/omnibus_overrides.rb
@@ -5,14 +5,6 @@ train_stable = /^train \((.*)\)/.match(`gem list ^train$ --remote`)[1]
 override "train", version: "v#{train_stable}"
 override "ruby", version: "3.1.2"
 
-# Mac Apple Silicon requires 1.1.1 series instead of 1.0.2 series
-if mac_os_x?
-  override "openssl", version: "1.1.1w"
-else
-  # Hopefully temporary, in October 2023 the default is 1.0.2zg which
-  # has an open high cve, while zi is available. Temporarily pin until
-  # default in omnibus-software has no cves.
-  override "openssl", version: "1.0.2zi"
-end
+override :openssl, version: "3.0.11"
 
 override "ruby-msys2-devkit", version: "3.1.2-1"