diff --git a/PayPalEE.cert b/PayPalEE.cert
deleted file mode 100644
index 7dfb1c7..0000000
Binary files a/PayPalEE.cert and /dev/null differ
diff --git a/mozilla-nss.changes b/mozilla-nss.changes
index 7d4b923..64f87a7 100644
--- a/mozilla-nss.changes
+++ b/mozilla-nss.changes
@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Thu Apr 28 06:34:50 UTC 2011 - wr@rosenauer.org
+
+- update to 3.12.10beta1
+  * root CA changes
+  * filter certain bogus certs (bmo#642815)
+  * fix minor memory leaks
+  * other bugfixes
+
 -------------------------------------------------------------------
 Sun Jan  9 23:05:11 UTC 2011 - wr@rosenauer.org
 
diff --git a/mozilla-nss.spec b/mozilla-nss.spec
index e979988..13ec33d 100644
--- a/mozilla-nss.spec
+++ b/mozilla-nss.spec
@@ -1,5 +1,5 @@
 #
-# spec file for package mozilla-nss (Version 3.12.9)
+# spec file for package mozilla-nss
 #
 # Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany.
 # Copyright (c) 2006-2011 Wolfgang Rosenauer
@@ -28,9 +28,9 @@ BuildRequires:  sqlite-devel
 %if %suse_version > 1030
 BuildRequires:  sqlite3-devel
 %endif
-License:        GPLv2+ ; LGPLv2.1+ ; MPL
-Version:        3.12.9
-Release:        2
+License:        MPLv1.1 or GPLv2+ or LGPLv2.1+
+Version:        3.12.10
+Release:        1
 # bug437293
 %ifarch ppc64
 Obsoletes:      mozilla-nss-64bit
@@ -49,7 +49,7 @@ Source6:        setup-nsssysinit.sh
 Source7:        cert9.db
 Source8:        key4.db
 Source9:        pkcs11.txt
-Source10:       PayPalEE.cert
+#Source10:       PayPalEE.cert
 Patch1:         nss-opt.patch
 Patch3:         system-nspr.patch
 Patch4:         char.patch
@@ -76,7 +76,7 @@ certificates, and other security standards.
 
 
 %package devel
-License:        GPLv2+ ; LGPLv2.1+ ; MPL
+License:        MPLv1.1 or GPLv2+ or LGPLv2.1+
 Summary:        Network (Netscape) Security Services development files
 Group:          Development/Libraries/Other
 Requires:       mozilla-nspr-devel
@@ -97,7 +97,7 @@ certificates, and other security standards.
 
 
 %package tools
-License:        GPLv2+ ; LGPLv2.1+ ; MPL
+License:        MPLv1.1 or GPLv2+ or LGPLv2.1+
 Summary:        Tools for developing, debugging, and managing applications that use NSS
 Group:          System/Management
 PreReq:         mozilla-nss >= %{version}
@@ -108,7 +108,7 @@ applications that use NSS.
 
 
 %package sysinit
-License:        GPLv2+ ; LGPLv2.1+ ; MPL
+License:        MPLv1.1 or GPLv2+ or LGPLv2.1+
 Summary:        System NSS Initialization
 Group:          System/Management
 Requires:       mozilla-nss >= %{version}
@@ -122,7 +122,7 @@ any system or user configured modules.
 
 
 %package -n libfreebl3
-License:        GPLv2+ ; LGPLv2.1+ ; MPL
+License:        MPLv1.1 or GPLv2+ or LGPLv2.1+
 Summary:        Freebl library for the Network Security Services
 Group:          System/Libraries
 
@@ -137,7 +137,7 @@ This package installs the freebl library from NSS.
 
 
 %package -n libsoftokn3
-License:        GPLv2+ ; LGPLv2.1+ ; MPL
+License:        MPLv1.1 or GPLv2+ or LGPLv2.1+
 Summary:        Network Security Services Soktoken Module
 Group:          System/Libraries
 Requires:       libfreebl3 = %{version}-%{release}
@@ -153,7 +153,7 @@ Network Security Services Softoken Cryptographic Module
 
 
 %package certs
-License:        GPLv2+ ; LGPLv2.1+ ; MPL
+License:        MPLv1.1 or GPLv2+ or LGPLv2.1+
 Summary:        CA certificates for NSS
 Group:          Productivity/Networking/Security
 
@@ -180,7 +180,7 @@ cd mozilla
 
 %build
 cd mozilla/security/nss
-cp %SOURCE10 tests/libpkix/certs/PayPalEE.cert
+#cp %SOURCE10 tests/libpkix/certs/PayPalEE.cert
 export FREEBL_NO_DEPEND=1
 export NSPR_INCLUDE_DIR=`nspr-config --includedir`
 export NSPR_LIB_DIR=`nspr-config --libdir`
diff --git a/nss-3.12.10.tar.bz2 b/nss-3.12.10.tar.bz2
new file mode 100644
index 0000000..6acf5b1
--- /dev/null
+++ b/nss-3.12.10.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:e7d6797d473ec7fee9b7c8edd1dfb9c9e9e385d2fb98e6372fe92cc525cd5512
+size 4614383
diff --git a/nss-3.12.9.tar.bz2 b/nss-3.12.9.tar.bz2
deleted file mode 100644
index df10138..0000000
--- a/nss-3.12.9.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:8de1ca0e0a4e49989ea59fb4ac37cb06cbaf9264254839124f5759f5fcccbc5f
-size 4547808