diff --git a/mozilla-nss.changes b/mozilla-nss.changes
index b74d074..d0f1b48 100644
--- a/mozilla-nss.changes
+++ b/mozilla-nss.changes
@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Mon Feb 19 07:03:50 UTC 2024 - Martin Sirringhaus <martin.sirringhaus@suse.com>
+
+- update to NSS 3.90.2
+  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
+     decryption in TLS.
+  * bmo#1867408 - add a defensive check for large ssl_DefSend
+     return values.
+
 -------------------------------------------------------------------
 Mon Dec 11 07:12:57 UTC 2023 - Martin Sirringhaus <martin.sirringhaus@suse.com>
 
diff --git a/mozilla-nss.spec b/mozilla-nss.spec
index 19f0677..6468662 100644
--- a/mozilla-nss.spec
+++ b/mozilla-nss.spec
@@ -22,9 +22,9 @@
 %define nspr_ver %(rpm -q --queryformat '%%{VERSION}' mozilla-nspr)
 %define nssdbdir %{_sysconfdir}/pki/nssdb
 Name:           mozilla-nss
-Version:        3.90.1
+Version:        3.90.2
 Release:        0
-%define underscore_version 3_90_1
+%define underscore_version 3_90_2
 Summary:        Network Security Services
 License:        MPL-2.0
 Group:          System/Libraries
diff --git a/nss-3.90.2.tar.gz b/nss-3.90.2.tar.gz
new file mode 100644
index 0000000..6d6ffa3
--- /dev/null
+++ b/nss-3.90.2.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:20bc31bd6c38820fd2e44b5734c1630ed823a1535b5ec60af1e61fbb31592a65
+size 72215444