diff --git a/mozilla-nss.changes b/mozilla-nss.changes
index c017d3c..e56e12d 100644
--- a/mozilla-nss.changes
+++ b/mozilla-nss.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Thu Dec  7 11:13:11 UTC 2017 - dimstar@opensuse.org
+
+- Escape the usage of %{VERSION} when calling out to rpm.
+  RPM 4.14 has %{VERSION} defined as 'the main packages version'.
+
 -------------------------------------------------------------------
 Tue Oct  3 17:53:11 UTC 2017 - wr@rosenauer.org
 
diff --git a/mozilla-nss.spec b/mozilla-nss.spec
index 2260a73..3699c22 100644
--- a/mozilla-nss.spec
+++ b/mozilla-nss.spec
@@ -57,7 +57,7 @@ Patch5:         malloc.patch
 Patch6:         nss-disable-ocsp-test.patch
 Patch7:         nss-sqlitename.patch
 Patch8:         bmo-1400603.patch
-%define nspr_ver %(rpm -q --queryformat '%{VERSION}' mozilla-nspr)
+%define nspr_ver %(rpm -q --queryformat '%%{VERSION}' mozilla-nspr)
 PreReq:         mozilla-nspr >= %nspr_ver
 PreReq:         libfreebl3 >= %{nss_softokn_fips_version}
 PreReq:         libsoftokn3 >= %{nss_softokn_fips_version}