diff --git a/security/wolfssl/Makefile b/security/wolfssl/Makefile
index f4394249cd4d..37a0c09e6bdc 100644
--- a/security/wolfssl/Makefile
+++ b/security/wolfssl/Makefile
@@ -1,56 +1,57 @@
 PORTNAME=	wolfssl
 PORTVERSION=	5.7.6
+PORTREVISION=   1
 CATEGORIES=	security devel
 MASTER_SITES=	https://www.wolfssl.com/ \
 		LOCAL/fox
 
 MAINTAINER=	fox@FreeBSD.org
 COMMENT=	Embedded SSL C-Library
 WWW=		https://www.wolfssl.com/
 
 LICENSE=	GPLv2+
 LICENSE_FILE=	${WRKSRC}/COPYING
 
 USES=		cpe libtool zip
 USE_LDCONFIG=	yes
 
 GNU_CONFIGURE=	yes
 CONFIGURE_ARGS=	--disable-dependency-tracking \
 		--enable-certgen \
 		--enable-des3 \
 		--enable-dh \
 		--enable-dsa \
 		--enable-dtls \
 		--enable-ecc \
 		--enable-ipv6 \
 		--enable-keygen \
 		--enable-opensslall \
 		--enable-opensslextra \
 		--enable-ripemd \
 		--enable-sessioncerts \
 		--enable-sha512 \
 		--enable-shared \
 		--enable-sni \
 		--enable-ssh \
 		--enable-static \
 		--enable-tls13 \
 		--enable-tls13-draft18 \
 		--enable-context-extra-user-data
 TEST_TARGET=	check
 CFLAGS+=	-DWOLFSSL_ALT_NAMES
 
 OPTIONS_DEFINE=	DEBUG DOCS
 
 DEBUG_CONFIGURE_ON=	--enable-debug
 
 post-configure:
 	@${REINPLACE_CMD} \
 		-e 's|$${prefix}/cyassl/include|$${prefix}/include/cyassl|' \
 		-e 's|$${prefix}/cyassl/lib|$${prefix}/lib/cyassl|' \
 		-e '/^pkgconfigdir/s|(libdir)|&data|' \
 		${WRKSRC}/Makefile
 
 post-install-DEBUG-off:
 	@${STRIP_CMD} ${STAGEDIR}${PREFIX}/lib/libwolfssl.so
 
 .include <bsd.port.mk>
diff --git a/security/wolfssl/files/patch-wolfcrypt_src_cpuid.c b/security/wolfssl/files/patch-wolfcrypt_src_cpuid.c
index 3dbdc77ce299..7ccf472ff56e 100644
--- a/security/wolfssl/files/patch-wolfcrypt_src_cpuid.c
+++ b/security/wolfssl/files/patch-wolfcrypt_src_cpuid.c
@@ -1,15 +1,18 @@
 Fix the typo in the aarch64 macro
 
-https://github.com/wolfSSL/wolfssl/pull/8346
+https://github.com/wolfSSL/wolfssl/issues/8347
 
 --- wolfcrypt/src/cpuid.c.orig	2025-01-09 14:23:01 UTC
 +++ wolfcrypt/src/cpuid.c
-@@ -259,7 +259,7 @@
+@@ -259,8 +259,10 @@
  
              if (features & CPUID_AARCH64_FEAT_AES)
                  cpuid_flags |= CPUID_AES;
 -            if (features & CPUID_AARCH64_FEAT_PMULL)
-+            if (features & CPUID_AARCH64_FEAT_AES_PMULL)
++            if (features & CPUID_AARCH64_FEAT_AES_PMULL) {
++                cpuid_flags |= CPUID_AES;
                  cpuid_flags |= CPUID_PMULL;
++            }
              if (features & CPUID_AARCH64_FEAT_SHA256)
                  cpuid_flags |= CPUID_SHA256;
+             if (features & CPUID_AARCH64_FEAT_SHA256_512)