diff --git a/.gitignore b/.gitignore
index 97708a7..8fec1b1 100644
--- a/.gitignore
+++ b/.gitignore
@@ -36,3 +36,4 @@
 /v2.28.3.tar.gz
 /v2.28.4.tar.gz
 /mbedtls-2.28.5.tar.gz
+/mbedtls-2.28.7.tar.gz
diff --git a/mbedtls.spec b/mbedtls.spec
index f56e579..e9895d3 100644
--- a/mbedtls.spec
+++ b/mbedtls.spec
@@ -3,8 +3,8 @@
 %endif
 
 Name: mbedtls
-Version: 2.28.5
-Release: 4%{?dist}
+Version: 2.28.7
+Release: 1%{?dist}
 Summary: Light-weight cryptographic and SSL/TLS library
 License: Apache-2.0
 URL: https://www.trustedfirmware.org/projects/mbed-tls
@@ -43,7 +43,7 @@ BuildArch:      noarch
 The %{name}-doc package contains documentation.
 
 %prep
-%autosetup -n mbedtls-mbedtls-2.28.5
+%autosetup
 
 sed -i 's|//\(#define MBEDTLS_HAVEGE_C\)|\1|' include/mbedtls/config.h
 sed -i 's|//\(#define MBEDTLS_THREADING_C\)|\1|' include/mbedtls/config.h
@@ -95,6 +95,9 @@ chmod 755 %{buildroot}%{_libdir}/*.so.*
 %doc apidoc/*
 
 %changelog
+* Tue Feb 06 2024 Morten Stevens <mstevens@fedoraproject.org> - 2.28.7-1
+- Update to 2.28.7
+
 * Tue Feb 06 2024 Morten Stevens <mstevens@fedoraproject.org> - 2.28.5-4
 - Disabled testing due to build issues with GCC 14
 
diff --git a/sources b/sources
index 15e7d89..50a5ca0 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (mbedtls-2.28.5.tar.gz) = 339911d244b4e6e4d77b344c796f018d9ad4c56249530b8a56e0dc305ddf30bc709dca96a19c5a06710e92d167ef22893e9e17e20837e9daee0d0be00a8ccae9
+SHA512 (mbedtls-2.28.7.tar.gz) = b61dd319606c88c834b3a8e8f9f85e68a22b6b21ca177b340a972dfabe9efee984b8a9f6ed5d3b1829f229c689394e9f393b94efb38d82bda3a1e53d1e7a2861