diff --git a/.patch/mbedtls/0003-openorbis.patch b/.patch/mbedtls/0003-openorbis.patch
new file mode 100644
index 0000000000..46cfbd408f
--- /dev/null
+++ b/.patch/mbedtls/0003-openorbis.patch
@@ -0,0 +1,13 @@
+diff --git a/library/entropy_poll.c b/library/entropy_poll.c
+index 611768c..8950ee4 100644
+--- a/library/entropy_poll.c
++++ b/library/entropy_poll.c
+@@ -118,7 +118,7 @@ static int getrandom_wrapper(void *buf, size_t buflen, unsigned int flags)
+  *
+  * Documentation: https://netbsd.gw.com/cgi-bin/man-cgi?sysctl+7
+  */
+-#if (defined(__FreeBSD__) || defined(__NetBSD__)) && !defined(HAVE_GETRANDOM)
++#if (defined(__FreeBSD__) || defined(__NetBSD__)) && !defined(HAVE_GETRANDOM) && !defined(__OPENORBIS__)
+ #include <sys/param.h>
+ #include <sys/sysctl.h>
+ #if defined(KERN_ARND)
diff --git a/externals/cpmfile.json b/externals/cpmfile.json
index 6bb140fc4e..aa58c9b7f1 100644
--- a/externals/cpmfile.json
+++ b/externals/cpmfile.json
@@ -104,7 +104,8 @@
         "skip_updates": true,
         "patches": [
             "0001-aesni-fix.patch",
-            "0002-arm64-aes-fix.patch"
+            "0002-arm64-aes-fix.patch",
+            "0003-openorbis.patch"
         ]
     },
     "enet": {