diff --git a/mozilla-nss.changes b/mozilla-nss.changes
index 30ac3d6..a75f82e 100644
--- a/mozilla-nss.changes
+++ b/mozilla-nss.changes
@@ -1,3 +1,32 @@
+-------------------------------------------------------------------
+Fri Aug 10 07:13:18 UTC 2018 - wr@rosenauer.org
+
+- update to NSS 3.38
+  * required by Firefox 62.0
+  New Functionality
+  * Added support for the TLS Record Size Limit Extension
+  * When creating a certificate request (CSR) using certutil -R, an
+    existing orphan private key can be reused. Parameter -k may be
+    used to specify the ID of an existing orphan key. The available
+    orphan key IDs can be displayed using command certutil -K.
+  * When using certutil -O to print the chain for a given certificate
+    nickname, the new parameter --simple-self-signed may be provided,
+    which can avoid ambiguous output in some scenarios.
+  New Functions
+  * SECITEM_MakeItem - Allocate and make an item with the requested contents
+    (secitem.h)
+  New Macros
+  * SSL_RECORD_SIZE_LIMIT - used to control the TLS Record Size Limit
+    Extension (in ssl.h)
+  Notable Changes
+  * Fixed CVE-2018-0495 (bmo#1464971)
+  * Various security fixes in the ASN.1 code
+  * NSS automatically enables caching for SQL database storage on
+    Linux, if it is located on a network filesystem that's known to
+    benefit from caching.
+  * When repeatedly importing the same certificate into an SQL database,
+    the existing nickname will be kept.
+
 -------------------------------------------------------------------
 Sat Jun 23 14:08:46 UTC 2018 - wr@rosenauer.org
 
diff --git a/mozilla-nss.spec b/mozilla-nss.spec
index f2bec93..093eb31 100644
--- a/mozilla-nss.spec
+++ b/mozilla-nss.spec
@@ -13,7 +13,7 @@
 # license that conforms to the Open Source Definition (Version 1.9)
 # published by the Open Source Initiative.
 
-# Please submit bugfixes or comments via http://bugs.opensuse.org/
+# Please submit bugfixes or comments via https://bugs.opensuse.org/
 #
 
 
@@ -25,7 +25,7 @@ BuildRequires:  mozilla-nspr-devel >= 4.19
 BuildRequires:  pkg-config
 BuildRequires:  sqlite-devel
 BuildRequires:  zlib-devel
-Version:        3.37.3
+Version:        3.38
 Release:        0
 # bug437293
 %ifarch ppc64
@@ -36,8 +36,8 @@ Summary:        Network Security Services
 License:        MPL-2.0
 Group:          System/Libraries
 Url:            http://www.mozilla.org/projects/security/pki/nss/
-Source:         https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_37_3_RTM/src/nss-%{version}.tar.gz
-# hg clone https://hg.mozilla.org/projects/nss nss-3.37.3/nss ; cd nss-3.37.3/nss ; hg up NSS_3_37_3_RTM
+Source:         https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_38_RTM/src/nss-%{version}.tar.gz
+# hg clone https://hg.mozilla.org/projects/nss nss-3.38/nss ; cd nss-3.38/nss ; hg up NSS_3_38_RTM
 #Source:         nss-%{version}.tar.gz
 Source1:        nss.pc.in
 Source3:        nss-config.in
diff --git a/nss-3.37.3.tar.gz b/nss-3.37.3.tar.gz
deleted file mode 100644
index 59f69a6..0000000
--- a/nss-3.37.3.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:9af2bbb615d010bd866bb83f8c0bb22b0fa086171e93030ffb03da3da15cc5be
-size 23034239
diff --git a/nss-3.38.tar.gz b/nss-3.38.tar.gz
new file mode 100644
index 0000000..678e984
--- /dev/null
+++ b/nss-3.38.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:2c643d3c08d6935f4d325f40743719b6990aa25a79ec2f8f712c99d086672f62
+size 23023474