diff --git a/baselibs.conf b/baselibs.conf
index 2025ef9..c5f3914 100644
--- a/baselibs.conf
+++ b/baselibs.conf
@@ -1,4 +1,5 @@
 mozilla-nss
+  requires "mozilla-nspr-<targettype> >= 4.21"
   requires "libfreebl3-<targettype>"
   requires "libsoftokn3-<targettype>"
   requires "mozilla-nss-certs-<targettype>"
@@ -8,5 +9,6 @@ libsoftokn3
   +/usr/lib/libnssdbm3.chk
 libfreebl3
   +/lib/libfreebl3.chk
+  +/lib/libfreeblpriv3.chk
 mozilla-nss-sysinit
 mozilla-nss-certs
diff --git a/mozilla-nss.changes b/mozilla-nss.changes
index ff42b35..7b8fbfc 100644
--- a/mozilla-nss.changes
+++ b/mozilla-nss.changes
@@ -1,3 +1,35 @@
+-------------------------------------------------------------------
+Mon Jul  8 07:14:57 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
+
+- update to NSS 3.44.1
+  * required by Firefox 68.0
+  Bugs fixed
+  * bmo#1554336 - Optimize away unneeded loop in mpi.c
+  * bmo#1515342 - More thorough input checking
+  * bmo#1540541 - Don't unnecessarily strip leading 0's from key material
+                  during PKCS11 import
+  * bmo#1515236 - Add a SSLKEYLOGFILE enable/disable flag at build.sh
+  * bmo#1546229 - Add IPSEC IKE support to softoken
+  * bmo#1473806 - Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
+  * bmo#1546477 - Updates to testing for FIPS validation
+  * bmo#1552208 - Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
+  * bmo#1551041 - Unbreak build on GCC < 4.3 big-endian
+
+-------------------------------------------------------------------
+Wed Jun 12 21:38:18 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
+
+- update to NSS 3.44
+  * required by Firefox 68.0
+  New functions
+  * CERT_GetCertificateDer - Access the DER-encoded form of a CERTCertificate
+  Notable changes
+  * It is now possible to build NSS as a static library (bmo#1543545)
+  * Initial support for building for iOS
+  Bugs fixed
+  * full list
+    https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.44_release_notes
+- merge some baselibs fixes from SLE
+
 -------------------------------------------------------------------
 Tue Apr 23 12:07:00 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
 
diff --git a/mozilla-nss.spec b/mozilla-nss.spec
index b42f06e..b98c8c7 100644
--- a/mozilla-nss.spec
+++ b/mozilla-nss.spec
@@ -18,15 +18,17 @@
 
 
 %global nss_softokn_fips_version 3.36
+%define NSPR_min_version 4.21
 
 Name:           mozilla-nss
 BuildRequires:  gcc-c++
-BuildRequires:  mozilla-nspr-devel >= 4.21
+BuildRequires:  mozilla-nspr-devel >= %{NSPR_min_version}
 BuildRequires:  pkg-config
 BuildRequires:  sqlite-devel
 BuildRequires:  zlib-devel
-Version:        3.43
+Version:        3.44.1
 Release:        0
+%define underscore_version 3_44_1
 # bug437293
 %ifarch ppc64
 Obsoletes:      mozilla-nss-64bit
@@ -36,8 +38,8 @@ Summary:        Network Security Services
 License:        MPL-2.0
 Group:          System/Libraries
 Url:            http://www.mozilla.org/projects/security/pki/nss/
-Source:         https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_43_RTM/src/nss-%{version}.tar.gz
-# hg clone https://hg.mozilla.org/projects/nss nss-3.43/nss ; cd nss-3.43/nss ; hg up NSS_3_43_RTM
+Source:         https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_%{underscore_version}_RTM/src/nss-%{version}.tar.gz
+# hg clone https://hg.mozilla.org/projects/nss nss-%{version}/nss ; cd nss-%{version}/nss ; hg up NSS_%{underscore_version}_RTM
 #Source:         nss-%{version}.tar.gz
 Source1:        nss.pc.in
 Source3:        nss-config.in
@@ -87,7 +89,7 @@ Summary:        Network (Netscape) Security Services development files
 Group:          Development/Libraries/C and C++
 Requires:       libfreebl3
 Requires:       libsoftokn3
-Requires:       mozilla-nspr-devel >= 4.20
+Requires:       mozilla-nspr-devel >= %{NSPR_min_version}
 Requires:       mozilla-nss = %{version}-%{release}
 # bug437293
 %ifarch ppc64
diff --git a/nss-3.43.tar.gz b/nss-3.43.tar.gz
deleted file mode 100644
index d09982b..0000000
--- a/nss-3.43.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:f30bc1b7330887b75de9fec37dbc173001758dc43fb095ffbc45dac4093fe2ca
-size 23466026
diff --git a/nss-3.44.1.tar.gz b/nss-3.44.1.tar.gz
new file mode 100644
index 0000000..c02d305
--- /dev/null
+++ b/nss-3.44.1.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:fce4cb80c989cde35416ecbe55920856015a35151c4f21be64470e4dd4de12f8
+size 75986343