diff --git a/mbedtls/.footprint b/mbedtls/.footprint
index 7301c8d4b..daf9b05d7 100644
--- a/mbedtls/.footprint
+++ b/mbedtls/.footprint
@@ -162,6 +162,7 @@ drwxr-xr-x	root/root	usr/include/psa/
 -rw-r--r--	root/root	usr/include/psa/build_info.h
 -rw-r--r--	root/root	usr/include/psa/crypto.h
 -rw-r--r--	root/root	usr/include/psa/crypto_adjust_auto_enabled.h
+-rw-r--r--	root/root	usr/include/psa/crypto_adjust_config_dependencies.h
 -rw-r--r--	root/root	usr/include/psa/crypto_adjust_config_key_pair_types.h
 -rw-r--r--	root/root	usr/include/psa/crypto_adjust_config_synonyms.h
 -rw-r--r--	root/root	usr/include/psa/crypto_builtin_composites.h
@@ -191,16 +192,16 @@ drwxr-xr-x	root/root	usr/lib/cmake/MbedTLS/
 -rw-r--r--	root/root	usr/lib/libeverest.a
 -rw-r--r--	root/root	usr/lib/libmbedcrypto.a
 lrwxrwxrwx	root/root	usr/lib/libmbedcrypto.so -> libmbedcrypto.so.16
-lrwxrwxrwx	root/root	usr/lib/libmbedcrypto.so.16 -> libmbedcrypto.so.3.6.0
--rwxr-xr-x	root/root	usr/lib/libmbedcrypto.so.3.6.0
+lrwxrwxrwx	root/root	usr/lib/libmbedcrypto.so.16 -> libmbedcrypto.so.3.6.1
+-rwxr-xr-x	root/root	usr/lib/libmbedcrypto.so.3.6.1
 -rw-r--r--	root/root	usr/lib/libmbedtls.a
 lrwxrwxrwx	root/root	usr/lib/libmbedtls.so -> libmbedtls.so.21
-lrwxrwxrwx	root/root	usr/lib/libmbedtls.so.21 -> libmbedtls.so.3.6.0
--rwxr-xr-x	root/root	usr/lib/libmbedtls.so.3.6.0
+lrwxrwxrwx	root/root	usr/lib/libmbedtls.so.21 -> libmbedtls.so.3.6.1
+-rwxr-xr-x	root/root	usr/lib/libmbedtls.so.3.6.1
 -rw-r--r--	root/root	usr/lib/libmbedx509.a
 lrwxrwxrwx	root/root	usr/lib/libmbedx509.so -> libmbedx509.so.7
--rwxr-xr-x	root/root	usr/lib/libmbedx509.so.3.6.0
-lrwxrwxrwx	root/root	usr/lib/libmbedx509.so.7 -> libmbedx509.so.3.6.0
+-rwxr-xr-x	root/root	usr/lib/libmbedx509.so.3.6.1
+lrwxrwxrwx	root/root	usr/lib/libmbedx509.so.7 -> libmbedx509.so.3.6.1
 -rw-r--r--	root/root	usr/lib/libp256m.a
 drwxr-xr-x	root/root	usr/lib/pkgconfig/
 -rw-r--r--	root/root	usr/lib/pkgconfig/mbedcrypto.pc
diff --git a/mbedtls/.signature b/mbedtls/.signature
index a321c77c5..4970f5cab 100644
--- a/mbedtls/.signature
+++ b/mbedtls/.signature
@@ -1,6 +1,6 @@
 untrusted comment: verify with /etc/ports/contrib.pub
-RWSagIOpLGJF308hhfjgV+gGzg2seWlnOQK4tii7hJX/AzsEbJ2legI3Q1I+WesGDZircWIacsCxcLq3Cufep7pAh9627RLewQM=
-SHA256 (Pkgfile) = 58816931c74ba441984ee1ffe472a0f114b3d983494f8361e8a2af0f904465c3
-SHA256 (.footprint) = e471890d80aad2fe8b532a02c19ed07c7dbba51a9a590a998729c14b8470b2b5
-SHA256 (mbedtls-3.6.0.tar.gz) = b527b4e859c1dd38c0f3ecc4fd784ce53326f19996f9328af75ce46f88136627
-SHA256 (mbedtls-framework-750634d3a51eb9d61b59fd5d801546927c946588.tar.gz) = 4845b5ae123c036cf9ec9e0ff0478a24b2be95450fc36a0fb80e2748518b424f
+RWSagIOpLGJF36NhE/1McZWToSvlj0DlVwbukzgbod/PgfevRrc98RIouOvaHmcT8p0KYHU5GqJ46afezprHXBEFIQ62k6DuEAc=
+SHA256 (Pkgfile) = eb88ac2070f3fe7b9601ae4cdc21786209cf7f02055992ac9d633850b065e0cf
+SHA256 (.footprint) = 9e800d2809898f2c25aac6a1378b4c8f6a5e4ed55169ba957cfe4b00920fd368
+SHA256 (mbedtls-3.6.1.tar.gz) = db75d2f7f35e29cf09f7bd6734d8ee3325f29c298ef071350c5e70a40dd4f0f9
+SHA256 (mbedtls-framework-94599c0e3b5036e086446a51a3f79640f70f22f6.tar.gz) = 632d5aa4dd2e4179f9d648be12af9a9c3158d7f503a93e70e651751b5f31257c
diff --git a/mbedtls/Pkgfile b/mbedtls/Pkgfile
index 029264a64..3b8af1663 100644
--- a/mbedtls/Pkgfile
+++ b/mbedtls/Pkgfile
@@ -4,9 +4,9 @@
 # Depends on: python3-jsonschema python3-jinja2
 
 name=mbedtls
-version=3.6.0
+version=3.6.1
 release=1
-_framework=750634d3a51eb9d61b59fd5d801546927c946588
+_framework=94599c0e3b5036e086446a51a3f79640f70f22f6
 source=(https://github.com/ARMmbed/mbedtls/archive/$name-$version.tar.gz
   https://github.com/Mbed-TLS/mbedtls-framework/archive/$_framework/mbedtls-framework-$_framework.tar.gz)