diff --git a/common/shlibs b/common/shlibs
index c9d97336a7a..df7119a220c 100644
--- a/common/shlibs
+++ b/common/shlibs
@@ -2052,7 +2052,7 @@ librrd_th.so.4 rrdtool-1.4.9_1
 libmosquitto.so.1 libmosquitto-1.4_1
 libmosquittopp.so.1 libmosquittopp-1.4_1
 libmpv.so.1 mpv-0.8.0_2
-libmbedtls.so.11 mbedtls-2.9.0_1
+libmbedtls.so.12 mbedtls-2.13.1_1
 libmbedcrypto.so.3 mbedtls-2.9.0_1
 libmbedx509.so.0 mbedtls-2.9.0_1
 libdmtx.so.0 libdmtx-0.7.4_1
diff --git a/srcpkgs/mbedtls/template b/srcpkgs/mbedtls/template
index 5e25ce068e5..ce315715cb7 100644
--- a/srcpkgs/mbedtls/template
+++ b/srcpkgs/mbedtls/template
@@ -1,10 +1,10 @@
 # Template file for 'mbedtls'
 pkgname=mbedtls
-version=2.12.0
+version=2.13.1
 revision=1
 wrksrc="mbedtls-mbedtls-${version}"
 build_style=cmake
-hostmakedepends="perl"
+hostmakedepends="python3 perl"
 configure_args="-DENABLE_TESTING=1 -DUSE_SHARED_MBEDTLS_LIBRARY=1"
 short_desc="Portable cryptographic TLS library"
 maintainer="Juan RP <xtraeme@voidlinux.eu>"
@@ -12,7 +12,7 @@ license="Apache-2.0"
 homepage="https://tls.mbed.org/"
 changelog="https://raw.githubusercontent.com/ARMmbed/mbedtls/development/ChangeLog"
 distfiles="https://github.com/ARMmbed/mbedtls/archive/mbedtls-${version}.tar.gz"
-checksum=05b126f25d4438f206d062b48cd2f2db2a1cd11bda58b21afe40b9b7cf6fca48
+checksum=e62fdea0110d3aa9082b3e1ccdbbaf520161830b1f3a57ae3124a7d5963c2a37
 
 pre_configure() {
 	sed -i include/mbedtls/config.h \