diff --git a/security/mbedtls3/Makefile b/security/mbedtls3/Makefile
index aa85ef10248c..84cec01d0833 100644
--- a/security/mbedtls3/Makefile
+++ b/security/mbedtls3/Makefile
@@ -1,45 +1,45 @@
 PORTNAME=	mbedtls
-DISTVERSION=	3.6.1
+DISTVERSION=	3.6.2
 CATEGORIES=	security devel
 MASTER_SITES=	https://github.com/Mbed-TLS/${PORTNAME}/releases/download/${DISTNAME}/
 PKGNAMESUFFIX=	3
 
 MAINTAINER=	tijl@FreeBSD.org
 COMMENT=	SSL/TLS and cryptography library
 WWW=		https://www.trustedfirmware.org/projects/mbed-tls/
 
 LICENSE=	APACHE20 GPLv2+
 LICENSE_COMB=	dual
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 USES=		cmake:testing python:build,test shebangfix tar:bz2
 USE_LDCONFIG=	yes
 
 SHEBANG_FILES=	scripts/*.py tests/scripts/*.py
 
 CMAKE_ON=	CMAKE_BUILD_RPATH_USE_ORIGIN \
 		ENABLE_PROGRAMS \
 		LINK_WITH_PTHREAD \
 		USE_SHARED_MBEDTLS_LIBRARY
 CMAKE_OFF=	ENABLE_TESTING
 CMAKE_TESTING_ON=	ENABLE_TESTING
 CMAKE_TESTING_PARALLEL_LEVEL=	1
 
 PORTSCOUT=	limit:^${DISTVERSION:R:S/./\./g}\.
 
 PLIST_SUB=	DISTVERSION=${DISTVERSION}
 
 pre-configure:
 	@${WRKSRC}/scripts/config.py set MBEDTLS_SSL_DTLS_SRTP
 	@${WRKSRC}/scripts/config.py set MBEDTLS_THREADING_C
 	@${WRKSRC}/scripts/config.py set MBEDTLS_THREADING_PTHREAD
 
 post-install:
 	${RM} -r ${STAGEDIR}${PREFIX}/include/everest
 	${RM} ${STAGEDIR}${PREFIX}/lib/libeverest.a \
 		${STAGEDIR}${PREFIX}/lib/libp256m.a
 	@cd ${STAGEDIR}${PREFIX}/bin && for f in *; do \
 		${MV} "$$f" "mbedtls_$$f"; \
 	done
 
 .include <bsd.port.mk>
diff --git a/security/mbedtls3/distinfo b/security/mbedtls3/distinfo
index 0e772062e9c8..dab4f786bde0 100644
--- a/security/mbedtls3/distinfo
+++ b/security/mbedtls3/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1725116841
-SHA256 (mbedtls-3.6.1.tar.bz2) = fc8bef0991b43629b7e5319de6f34f13359011105e08e3e16eed3a9fe6ffd3a3
-SIZE (mbedtls-3.6.1.tar.bz2) = 4977592
+TIMESTAMP = 1734949114
+SHA256 (mbedtls-3.6.2.tar.bz2) = 8b54fb9bcf4d5a7078028e0520acddefb7900b3e66fec7f7175bb5b7d85ccdca
+SIZE (mbedtls-3.6.2.tar.bz2) = 4979769