diff --git a/main/mbedtls/APKBUILD b/main/mbedtls/APKBUILD
index 2a357fc7c20..61cd57f21de 100644
--- a/main/mbedtls/APKBUILD
+++ b/main/mbedtls/APKBUILD
@@ -2,7 +2,7 @@
 # Contributor: Łukasz Jendrysik <scadu@yandex.com>
 # Maintainer: Natanael Copa <ncopa@alpinelinux.org>
 pkgname=mbedtls
-pkgver=2.28.6 # long-time support branch
+pkgver=2.28.7 # long-time support branch
 pkgrel=0
 pkgdesc="Light-weight cryptographic and SSL/TLS library"
 url="https://www.trustedfirmware.org/projects/mbed-tls/"
@@ -16,6 +16,9 @@ source="$pkgname-$pkgver.tar.gz::https://github.com/ARMmbed/mbedtls/archive/v$pk
 # https://tls.mbed.org/security
 
 # secfixes:
+#   2.28.7-r0:
+#     - CVE-2024-23170
+#     - CVE-2024-23775
 #   2.28.5-r0:
 #     - CVE-2023-43615
 #   2.28.1-r0:
@@ -86,5 +89,5 @@ static() {
 }
 
 sha512sums="
-a5c876489bf89908f34626c879f68e8f962d84b50756df17b6b75dfb93e08fe163ed3f32bf70e89bce9080d15257a4cbd2679b743bf8f2e2d7a04606c5811c05  mbedtls-2.28.6.tar.gz
+b61dd319606c88c834b3a8e8f9f85e68a22b6b21ca177b340a972dfabe9efee984b8a9f6ed5d3b1829f229c689394e9f393b94efb38d82bda3a1e53d1e7a2861  mbedtls-2.28.7.tar.gz
 "