diff --git a/gnutls/.footprint b/gnutls/.footprint
index fe1c38ca4..844014183 100644
--- a/gnutls/.footprint
+++ b/gnutls/.footprint
@@ -34,9 +34,9 @@ lrwxrwxrwx	root/root	usr/lib/libgnutls-openssl.so -> libgnutls-openssl.so.27.0.2
 lrwxrwxrwx	root/root	usr/lib/libgnutls-openssl.so.27 -> libgnutls-openssl.so.27.0.2
 -rwxr-xr-x	root/root	usr/lib/libgnutls-openssl.so.27.0.2
 -rwxr-xr-x	root/root	usr/lib/libgnutls.la
-lrwxrwxrwx	root/root	usr/lib/libgnutls.so -> libgnutls.so.30.39.0
-lrwxrwxrwx	root/root	usr/lib/libgnutls.so.30 -> libgnutls.so.30.39.0
--rwxr-xr-x	root/root	usr/lib/libgnutls.so.30.39.0
+lrwxrwxrwx	root/root	usr/lib/libgnutls.so -> libgnutls.so.30.40.0
+lrwxrwxrwx	root/root	usr/lib/libgnutls.so.30 -> libgnutls.so.30.40.0
+-rwxr-xr-x	root/root	usr/lib/libgnutls.so.30.40.0
 -rwxr-xr-x	root/root	usr/lib/libgnutlsxx.la
 lrwxrwxrwx	root/root	usr/lib/libgnutlsxx.so -> libgnutlsxx.so.30.0.0
 lrwxrwxrwx	root/root	usr/lib/libgnutlsxx.so.30 -> libgnutlsxx.so.30.0.0
@@ -328,6 +328,7 @@ drwxr-xr-x	root/root	usr/share/man/man3/
 -rw-r--r--	root/root	usr/share/man/man3/gnutls_hash_get_len.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/gnutls_hash_init.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/gnutls_hash_output.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/gnutls_hash_squeeze.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/gnutls_heartbeat_allowed.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/gnutls_heartbeat_enable.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/gnutls_heartbeat_get_timeout.3.gz
@@ -524,6 +525,7 @@ drwxr-xr-x	root/root	usr/share/man/man3/
 -rw-r--r--	root/root	usr/share/man/man3/gnutls_pkcs12_export2.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/gnutls_pkcs12_generate_mac.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/gnutls_pkcs12_generate_mac2.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/gnutls_pkcs12_generate_mac3.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/gnutls_pkcs12_get_bag.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/gnutls_pkcs12_import.3.gz
 -rw-r--r--	root/root	usr/share/man/man3/gnutls_pkcs12_init.3.gz
diff --git a/gnutls/.signature b/gnutls/.signature
index e0722f459..206fb3a1d 100644
--- a/gnutls/.signature
+++ b/gnutls/.signature
@@ -1,5 +1,5 @@
 untrusted comment: verify with /etc/ports/opt.pub
-RWSE3ohX2g5d/YUpKzy6sN+DPNWdztgN+yI3d2RG5Be3AxDHKaMp1nOf5sxIa9QjQQB+ZZa9CDyA7MM2Omuu5PeSIDd9lrDb+wA=
-SHA256 (Pkgfile) = 00961a7d860eb109c2554cf61a66ff6740c69ae4d7027331a7402a852cc69757
-SHA256 (.footprint) = b0313534ddf52e4c7c63a3a5a1a2502fdcb6c4eedabcf1f48437f510404f3ac5
-SHA256 (gnutls-3.8.5.tar.xz) = 66269a2cfe0e1c2dabec87bdbbd8ab656f396edd9a40dd006978e003cfa52bfc
+RWSE3ohX2g5d/aLH5fXROt0mB06JWqV9RI+plLCi1zu5g4fF7dNYXPQsH6yCAc0VUZg27qbuH+i7tGq55pRAt7vjWqYItpwfHg0=
+SHA256 (Pkgfile) = 17f08da9dfe94f2d3edfb816816a6b7d078008d86a4a17791b83f10fd8d10d41
+SHA256 (.footprint) = 0ecf389b907b51b4dd969f9e00d76584b8a4457f0e134e4a5f5e6c3cb7150f62
+SHA256 (gnutls-3.8.6.tar.xz) = 2e1588aae53cb32d43937f1f4eca28febd9c0c7aa1734fc5dd61a7e81e0ebcdd
diff --git a/gnutls/Pkgfile b/gnutls/Pkgfile
index b9f62f6bf..fdeb8f9a7 100644
--- a/gnutls/Pkgfile
+++ b/gnutls/Pkgfile
@@ -5,7 +5,7 @@
 # Optional: brotli libidn2 tpm2-tss
 
 name=gnutls
-version=3.8.5
+version=3.8.6
 release=1
 source=(https://www.gnupg.org/ftp/gcrypt/$name/v${version:0:3}/$name-$version.tar.xz)