diff --git a/security/mbedtls/Makefile b/security/mbedtls/Makefile
index 3aebdafb95de..dddb74897e5f 100644
--- a/security/mbedtls/Makefile
+++ b/security/mbedtls/Makefile
@@ -1,39 +1,39 @@
 PORTNAME=	mbedtls
-PORTVERSION=	2.28.1
+PORTVERSION=	2.28.2
 DISTVERSIONPREFIX=${PORTNAME}-
 CATEGORIES=	security devel
 
 MAINTAINER=	tijl@FreeBSD.org
 COMMENT=	SSL/TLS and cryptography library
 WWW=		https://www.trustedfirmware.org/projects/mbed-tls/
 
 LICENSE=	APACHE20
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 USES=		gmake python:test shebangfix
 SHEBANG_FILES=	scripts/*.py tests/scripts/*.py
 
 USE_GITHUB=	yes
 GH_ACCOUNT=	Mbed-TLS
 
 ALL_TARGET=	no_test
 TEST_TARGET=	test
 MAKE_ENV=	PYTHON=${PYTHON_CMD} SHARED=1
 USE_LDCONFIG=	yes
 
 PORTSCOUT=	limit:^${PORTVERSION:R:S/./\./g}\.
 
 post-patch:
 	@${RM} ${WRKSRC}/include/mbedtls/*.orig
 	@${REINPLACE_CMD} \
 		-e 's/PREFIX/NAMEPREFIX/' \
 		-e 's/$$(DESTDIR)/&$$(PREFIX)/' \
 		${WRKSRC}/Makefile
 	@${REINPLACE_CMD} 's/-fpic//' ${WRKSRC}/library/Makefile
 
 post-install:
 	${FIND} ${STAGEDIR}${PREFIX}/bin -type f -not -name \*.sh \
 		-exec ${STRIP_CMD} {} +
 	${STRIP_CMD} ${STAGEDIR}${PREFIX}/lib/*.so
 
 .include <bsd.port.mk>
diff --git a/security/mbedtls/distinfo b/security/mbedtls/distinfo
index e4827a676d47..43dd01b48982 100644
--- a/security/mbedtls/distinfo
+++ b/security/mbedtls/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1657728458
-SHA256 (Mbed-TLS-mbedtls-mbedtls-2.28.1_GH0.tar.gz) = 82ff5fda18ecbdee9053bdbeed6059c89e487f3024227131657d4c4536735ed1
-SIZE (Mbed-TLS-mbedtls-mbedtls-2.28.1_GH0.tar.gz) = 3914438
+TIMESTAMP = 1671123364
+SHA256 (Mbed-TLS-mbedtls-mbedtls-2.28.2_GH0.tar.gz) = 1db6d4196178fa9f8264bef5940611cd9febcd5d54ec05f52f1e8400f792b5a4
+SIZE (Mbed-TLS-mbedtls-mbedtls-2.28.2_GH0.tar.gz) = 3934889