diff --git a/third_party/mbedtls/Makefile b/third_party/mbedtls/Makefile
index 968a45af8..10e4a699e 100644
--- a/third_party/mbedtls/Makefile
+++ b/third_party/mbedtls/Makefile
@@ -5,7 +5,7 @@ INSTALL_PREFIX=$(BUILDDIR)/mbedtls
 
 URL=https://github.com/ARMmbed/mbedtls
 
-BRANCH=v2.28.7
+BRANCH=v2.28.8
 
 # get the hash of the remote github repository (for the given branch)
 HASH=$(shell git ls-remote $(URL) -b $(BRANCH) | cut -f1 )