diff --git a/srcpkgs/gnutls/template b/srcpkgs/gnutls/template
index e87f46fc06e..76d259e5201 100644
--- a/srcpkgs/gnutls/template
+++ b/srcpkgs/gnutls/template
@@ -1,6 +1,6 @@
 # Template file for 'gnutls'
 pkgname=gnutls
-version=3.8.5
+version=3.8.6
 revision=1
 build_style=gnu-configure
 configure_args="--disable-static --disable-valgrind-tests
@@ -21,7 +21,7 @@ license="GPL-3.0-only, LGPL-2.1-or-later"
 homepage="https://gnutls.org"
 changelog="https://gitlab.com/gnutls/gnutls/-/raw/master/NEWS"
 distfiles="https://www.gnupg.org/ftp/gcrypt/gnutls/v${version%.*}/gnutls-${version}.tar.xz"
-checksum=66269a2cfe0e1c2dabec87bdbbd8ab656f396edd9a40dd006978e003cfa52bfc
+checksum=2e1588aae53cb32d43937f1f4eca28febd9c0c7aa1734fc5dd61a7e81e0ebcdd
 # same as $PASS in tests/cert-tests/certtool.sh
 make_check_pre="env GNUTLS_PIN=1234"