diff --git a/mozilla-nss.changes b/mozilla-nss.changes
index 6d65b8c..6b79123 100644
--- a/mozilla-nss.changes
+++ b/mozilla-nss.changes
@@ -1,3 +1,35 @@
+-------------------------------------------------------------------
+Fri Sep 15 13:56:36 UTC 2017 - wr@rosenauer.org
+
+- update to NSS 3.32.1
+  * no upstream changelog/releasenote provided
+
+-------------------------------------------------------------------
+Tue Sep 12 09:26:03 UTC 2017 - wr@rosenauer.org
+
+- update to NSS 3.32
+  Notable changes
+  * Various minor improvements and correctness fixes.
+  * The Code Signing trust bit was turned off for all included root certificates.
+  * The Websites (TLS/SSL) trust bit was turned off for the following
+    root certificates:
+    AddTrust Class 1 CA Root
+    Swisscom Root CA 2
+  * The following CA certificates were Removed:
+    AddTrust Public CA Root
+    AddTrust Qualified CA Root
+    China Internet Network Information Center EV Certificates Root
+    CNNIC ROOT
+    ComSign Secured CA
+    GeoTrust Global CA 2
+    Secure Certificate Services
+    Swisscom Root CA 1
+    Swisscom Root EV CA 2
+    Trusted Certificate Services
+    UTN-USERFirst-Hardware
+    UTN-USERFirst-Object
+- requires NSPR 4.16
+
 -------------------------------------------------------------------
 Tue Sep 12 08:56:48 UTC 2017 - wr@rosenauer.org
 
diff --git a/mozilla-nss.spec b/mozilla-nss.spec
index 975e280..c89cfb7 100644
--- a/mozilla-nss.spec
+++ b/mozilla-nss.spec
@@ -21,11 +21,11 @@
 
 Name:           mozilla-nss
 BuildRequires:  gcc-c++
-BuildRequires:  mozilla-nspr-devel >= 4.15
+BuildRequires:  mozilla-nspr-devel >= 4.16
 BuildRequires:  pkg-config
 BuildRequires:  sqlite-devel
 BuildRequires:  zlib-devel
-Version:        3.31.1
+Version:        3.32.1
 Release:        0
 # bug437293
 %ifarch ppc64
@@ -36,8 +36,8 @@ Summary:        Network Security Services
 License:        MPL-2.0
 Group:          System/Libraries
 Url:            http://www.mozilla.org/projects/security/pki/nss/
-Source:         https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_31_1_RTM/src/nss-%{version}.tar.gz
-# hg clone https://hg.mozilla.org/projects/nss nss-3.31.1/nss ; cd nss-3.31.1/nss ; hg up NSS_3_31_1_RTM
+Source:         https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_32_1_RTM/src/nss-%{version}.tar.gz
+# hg clone https://hg.mozilla.org/projects/nss nss-3.32.1/nss ; cd nss-3.32.1/nss ; hg up NSS_3_32_1_RTM
 #Source:         nss-%{version}.tar.gz
 Source1:        nss.pc.in
 Source3:        nss-config.in
diff --git a/nss-3.31.1.tar.gz b/nss-3.31.1.tar.gz
deleted file mode 100644
index 808a145..0000000
--- a/nss-3.31.1.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:933439214dc03ee60e86d1419c19e1568998b0776dde987f41fa70ced6cd08dc
-size 9537705
diff --git a/nss-3.32.1.tar.gz b/nss-3.32.1.tar.gz
new file mode 100644
index 0000000..44faeca
--- /dev/null
+++ b/nss-3.32.1.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:4de59ca7f5bf4a56fbcfdbb4a054f254ba9f408f56476957404a091048624652
+size 9494609