diff --git a/extra/nss/checksums b/extra/nss/checksums
index 161dfd24..1fcf1d3c 100644
--- a/extra/nss/checksums
+++ b/extra/nss/checksums
@@ -1,4 +1,4 @@
-ed7130652dab7e7e24af8f8352d9d7c9f49e57ea1b6546c680ac955496e500ce9d
+df20fc8bc09ad7df7bf158d29af17a3fdabcf1338326e08da199c186013f41f82f
 1da24f15b6e64671614658955882a4eadbf07aea4148cdf7b43c983f7c3c72a895
 6e5c0c4e85223a16d966adaa43a9c8b3b44588dcda660241e0c16e78d2d6e9171a
 c3b17eed7fb3298ff5f4083478a1bdad6b220bdcbe93b0edf63d50b3b61fffe233
diff --git a/extra/nss/sources b/extra/nss/sources
index fa19cdfa..df33306a 100644
--- a/extra/nss/sources
+++ b/extra/nss/sources
@@ -1,4 +1,4 @@
-https://ftp.mozilla.org/pub/security/nss/releases/NSS_MAJOR_MINOR_RTM/src/nss-VERSION.tar.gz
+https://ftp.mozilla.org/pub/security/nss/releases/NSS_MAJOR_MINOR_PATCH_RTM/src/nss-VERSION.tar.gz
 files/certdata.sh nss/lib/ckfw/builtins
 files/generated.hash
 patches/no-perl.patch
diff --git a/extra/nss/version b/extra/nss/version
index f61418c8..880d3b35 100644
--- a/extra/nss/version
+++ b/extra/nss/version
@@ -1 +1 @@
-3.87 1
+3.88.1 1