diff --git a/extra/nss/checksums b/extra/nss/checksums
index 1fcf1d3c..954e9498 100644
--- a/extra/nss/checksums
+++ b/extra/nss/checksums
@@ -1,4 +1,4 @@
-df20fc8bc09ad7df7bf158d29af17a3fdabcf1338326e08da199c186013f41f82f
+67dcff805424699241753fbccc76e5423487470af4dc8f1841b7e54859c4ffe425
 1da24f15b6e64671614658955882a4eadbf07aea4148cdf7b43c983f7c3c72a895
 6e5c0c4e85223a16d966adaa43a9c8b3b44588dcda660241e0c16e78d2d6e9171a
 c3b17eed7fb3298ff5f4083478a1bdad6b220bdcbe93b0edf63d50b3b61fffe233
diff --git a/extra/nss/sources b/extra/nss/sources
index 77ef4dd8..1273f2f4 100644
--- a/extra/nss/sources
+++ b/extra/nss/sources
@@ -1,4 +1,4 @@
-https://ftp.mozilla.org/pub/security/nss/releases/NSS_3_88_1_RTM/src/nss-3.88.1.tar.gz
+https://ftp.mozilla.org/pub/security/nss/releases/NSS_3_89_RTM/src/nss-3.89.tar.gz
 files/certdata.sh nss/lib/ckfw/builtins
 files/generated.hash
 patches/no-perl.patch
diff --git a/extra/nss/version b/extra/nss/version
index 880d3b35..7321c3f4 100644
--- a/extra/nss/version
+++ b/extra/nss/version
@@ -1 +1 @@
-3.88.1 1
+3.89 1