diff --git a/mozilla-nss.changes b/mozilla-nss.changes
index 709e999..1d4b05f 100644
--- a/mozilla-nss.changes
+++ b/mozilla-nss.changes
@@ -1,3 +1,11 @@
+-------------------------------------------------------------------
+Sun Oct 25 14:44:21 UTC 2015 - wr@rosenauer.org
+
+- update to NSS 4.20.1 (bnc#952810)
+  * requires NSPR 4.10.10
+  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868)
+    memory corruption issues
+
 -------------------------------------------------------------------
 Thu Sep 24 15:41:09 UTC 2015 - fstrba@suse.com
 
diff --git a/mozilla-nss.spec b/mozilla-nss.spec
index 7107996..1f3ff28 100644
--- a/mozilla-nss.spec
+++ b/mozilla-nss.spec
@@ -21,11 +21,11 @@
 
 Name:           mozilla-nss
 BuildRequires:  gcc-c++
-BuildRequires:  mozilla-nspr-devel >= 4.10.8
+BuildRequires:  mozilla-nspr-devel >= 4.10.10
 BuildRequires:  pkg-config
 BuildRequires:  sqlite-devel
 BuildRequires:  zlib-devel
-Version:        3.20
+Version:        3.20.1
 Release:        0
 # bug437293
 %ifarch ppc64
@@ -36,8 +36,8 @@ Summary:        Network Security Services
 License:        MPL-2.0
 Group:          System/Libraries
 Url:            http://www.mozilla.org/projects/security/pki/nss/
-Source:         https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_20_RTM/src/nss-%{version}.tar.gz
-# hg clone https://hg.mozilla.org/projects/nss nss-3.20/nss ; cd nss-3.20/nss ; hg up NSS_3_20_RTM
+Source:         https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_20_1_RTM/src/nss-%{version}.tar.gz
+# hg clone https://hg.mozilla.org/projects/nss nss-3.20.1/nss ; cd nss-3.20.1/nss ; hg up NSS_3_20_1_RTM
 #Source:         nss-%{version}.tar.gz
 Source1:        nss.pc.in
 Source3:        nss-config.in
diff --git a/nss-3.20.1.tar.gz b/nss-3.20.1.tar.gz
new file mode 100644
index 0000000..055553e
--- /dev/null
+++ b/nss-3.20.1.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:ad3c8f11dfd9570c2d04a6140d5ef7c2bdd0fe30d6c9e5548721a4251a5e8c97
+size 6958956
diff --git a/nss-3.20.tar.gz b/nss-3.20.tar.gz
deleted file mode 100644
index 62a9959..0000000
--- a/nss-3.20.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:5e38d4b9837ca338af966b97fc91c07f67ad647fb38dc4af3cfd0d84e477d15c
-size 6955552