diff --git a/.gitignore b/.gitignore
index 18d5449..6148af3 100644
--- a/.gitignore
+++ b/.gitignore
@@ -27,3 +27,4 @@
 /mbedtls-2.16.6-apache.tgz
 /mbedtls-2.16.7.tar.gz
 /mbedtls-2.16.8.tar.gz
+/mbedtls-2.16.9.tar.gz
diff --git a/sources b/sources
index 5689e2a..6d20163 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (mbedtls-2.16.8.tar.gz) = 645d58d42594a2b547b904634acc1e7e8583465e075c190183e1179638f05e1f8f5c56561ab172fed8dcec4a1742429663abdfdc25d607410ea64a35fbb22168
+SHA512 (mbedtls-2.16.9.tar.gz) = 36f39ce2a057cd626c5e3eee7eb313691f35cf973022a349e61c4f7710f8bf92f2f5f787ce173e124a64bced615388d6bcc9cc1083b7124f83c7a740fb663451