diff --git a/config/blobs.yml b/config/blobs.yml
index e132afba..af8e317b 100644
--- a/config/blobs.yml
+++ b/config/blobs.yml
@@ -1,7 +1,7 @@
-haproxy/aws-lc-v4.0.0.tar.gz:
-  size: 130854647
-  object_id: d911b2d3-6b54-4621-7d49-fb71b48d0968
-  sha: sha256:dec49e5c38dd8d3b4c2700c692bbb457a149cd6d23ad99463ce3612720c23bb0
+haproxy/aws-lc-v4.2.0.tar.gz:
+  size: 130855470
+  object_id: 87dee5e4-759d-4927-7b05-6c301df84ae0
+  sha: sha256:45e1735cb55571eb69782dff6a196e8b63d330056f25d6636c815cea2b8fc58b
 haproxy/cmake-4.4.5-linux-x86_64.tar.gz:
   size: 64865573
   object_id: d5adb72a-dd49-4003-5e10-0fc6554a497d
diff --git a/src/aws-lc-versions.sh b/src/aws-lc-versions.sh
index c278ac4b..00d274b8 100644
--- a/src/aws-lc-versions.sh
+++ b/src/aws-lc-versions.sh
@@ -9,6 +9,6 @@
 # split, the aws-lc/cmake fingerprints only change when a crypto version does,
 # so the director reuses the cached compiled artifact across HAProxy bumps.
 # Maintained automatically by ci/scripts/autobump-dependencies.py — do not edit by hand.
-AWS_LC_VERSION=4.0.0  # https://github.com/aws/aws-lc/archive/refs/tags/v4.0.0.tar.gz (LTS line; builds both FIPS and non-FIPS)
+AWS_LC_VERSION=4.2.0  # https://github.com/aws/aws-lc/archive/refs/tags/v4.2.0.tar.gz
 CMAKE_VERSION=4.4.5  # https://github.com/Kitware/CMake/releases/download/v4.4.5/cmake-4.4.5-linux-x86_64.tar.gz
 GOLANG_VERSION=1.27.3  # https://go.dev/dl/go1.27.3.linux-amd64.tar.gz