diff --git a/extra/nss/checksums b/extra/nss/checksums
index 27f1ad2e..ddef1b36 100644
--- a/extra/nss/checksums
+++ b/extra/nss/checksums
@@ -1,4 +1,4 @@
-d31fd119ab71bdd2d963ac976f0a47c7767fc0ea58596503eadca6dd3d02695260
+f334ca6343286784ed18cc521650fbc4590ce0d4fcb98d0de05368ee5e9e6de830
 1da24f15b6e64671614658955882a4eadbf07aea4148cdf7b43c983f7c3c72a895
 a428e9bfc45ddd9eba248719b92bcfa62faff1ea09aa23376e405b971975b925f8
 c3b17eed7fb3298ff5f4083478a1bdad6b220bdcbe93b0edf63d50b3b61fffe233
diff --git a/extra/nss/sources b/extra/nss/sources
index 83b91ca4..1e869b67 100644
--- a/extra/nss/sources
+++ b/extra/nss/sources
@@ -1,4 +1,4 @@
-https://ftp.mozilla.org/pub/security/nss/releases/NSS_3_96_RTM/src/nss-3.96.tar.gz
+https://ftp.mozilla.org/pub/security/nss/releases/NSS_3_96_1_RTM/src/nss-3.96.1.tar.gz
 files/certdata.sh nss/lib/ckfw/builtins
 files/generated.hash
 patches/no-perl.patch
diff --git a/extra/nss/version b/extra/nss/version
index a6c0b29c..b2e71dac 100644
--- a/extra/nss/version
+++ b/extra/nss/version
@@ -1 +1 @@
-3.96 1
+3.96.1 1