diff --git a/core/openssl/.SRCINFO b/core/openssl/.SRCINFO
index 8aee6ac4d..39064af8b 100644
--- a/core/openssl/.SRCINFO
+++ b/core/openssl/.SRCINFO
@@ -1,6 +1,6 @@
 pkgbase = openssl
 	pkgdesc = The Open Source toolkit for Secure Sockets Layer and Transport Layer Security
-	pkgver = 3.1.4
+	pkgver = 3.2.0
 	pkgrel = 1
 	url = https://www.openssl.org
 	arch = x86_64
@@ -14,14 +14,14 @@ pkgbase = openssl
 	replaces = openssl-perl
 	replaces = openssl-doc
 	backup = etc/ssl/openssl.cnf
-	source = https://www.openssl.org/source/openssl-3.1.4.tar.gz
-	source = https://www.openssl.org/source/openssl-3.1.4.tar.gz.asc
+	source = https://www.openssl.org/source/openssl-3.2.0.tar.gz
+	source = https://www.openssl.org/source/openssl-3.2.0.tar.gz.asc
 	source = ca-dir.patch
 	validpgpkeys = 8657ABB260F056B1E5190839D9C4D26D0E604491
 	validpgpkeys = 7953AC1FBC3DC8B3B292393ED5E9E43F7DF9EE8C
 	validpgpkeys = A21FAB74B0088AA361152586B8EF1A6BA9DA2D5C
 	validpgpkeys = EFC0A467D613CB83C7ED6D30D894E2CE8B3D79F5
-	sha256sums = 840af5366ab9b522bde525826be3ef0fb0af81c6a9ebd84caa600fea1731eee3
+	sha256sums = 14c826f07c7e433706fb5c69fa9e25dab95684844b4c962a2cf1bf183eb4690e
 	sha256sums = SKIP
 	sha256sums = 0a32d9ca68e8d985ce0bfef6a4c20b46675e06178cc2d0bf6d91bd6865d648b7
 
diff --git a/core/openssl/PKGBUILD b/core/openssl/PKGBUILD
index 7bcdc4cad..7511eeeb5 100644
--- a/core/openssl/PKGBUILD
+++ b/core/openssl/PKGBUILD
@@ -4,7 +4,7 @@
 #  - set ARM architecture targets
 
 pkgname=openssl
-pkgver=3.1.4
+pkgver=3.2.0
 pkgrel=1
 pkgdesc='The Open Source toolkit for Secure Sockets Layer and Transport Layer Security'
 arch=('x86_64')
@@ -18,7 +18,7 @@ provides=('libcrypto.so' 'libssl.so')
 backup=('etc/ssl/openssl.cnf')
 source=("https://www.openssl.org/source/${pkgname}-${pkgver}.tar.gz"{,.asc}
         'ca-dir.patch')
-sha256sums=('840af5366ab9b522bde525826be3ef0fb0af81c6a9ebd84caa600fea1731eee3'
+sha256sums=('14c826f07c7e433706fb5c69fa9e25dab95684844b4c962a2cf1bf183eb4690e'
             'SKIP'
             '0a32d9ca68e8d985ce0bfef6a4c20b46675e06178cc2d0bf6d91bd6865d648b7')
 validpgpkeys=('8657ABB260F056B1E5190839D9C4D26D0E604491'
@@ -44,10 +44,8 @@ build() {
 		optflags='no-afalgeng'
 	fi
 
-	# mark stack as non-executable: http://bugs.archlinux.org/task/12434
 	./Configure --prefix=/usr --openssldir=/etc/ssl --libdir=lib \
-		shared enable-ktls ${optflags} "${openssltarget}" \
-		"-Wa,--noexecstack ${CPPFLAGS} ${CFLAGS} ${LDFLAGS}"
+		shared enable-ktls ${optflags} "${openssltarget}"
 
 	make depend
 	make