diff --git a/mozilla-nss.changes b/mozilla-nss.changes
index 194fd1c..047b38c 100644
--- a/mozilla-nss.changes
+++ b/mozilla-nss.changes
@@ -1,3 +1,21 @@
+-------------------------------------------------------------------
+Sun Nov 15 08:17:37 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
+
+- update to NSS 3.58
+  Bugs fixed:
+  * bmo#1641480 (CVE-2020-25648)
+    Tighten CCS handling for middlebox compatibility mode.
+  * bmo#1631890 - Add support for Hybrid Public Key Encryption
+    (draft-irtf-cfrg-hpke) support for TLS Encrypted Client Hello
+    (draft-ietf-tls-esni).
+  * bmo#1657255 - Add CI tests that disable SHA1/SHA2 ARM crypto
+    extensions.
+  * bmo#1668328 - Handle spaces in the Python path name when using
+    gyp on Windows.
+  * bmo#1667153 - Add PK11_ImportDataKey for data object import.
+  * bmo#1665715 - Pass the embedded SCT list extension (if present)
+    to TrustDomain::CheckRevocation instead of the notBefore value.
+
 -------------------------------------------------------------------
 Mon Oct 12 15:31:33 UTC 2020 - Dominique Leuenberger <dimstar@opensuse.org>
 
diff --git a/mozilla-nss.spec b/mozilla-nss.spec
index 2fd593c..3c5d181 100644
--- a/mozilla-nss.spec
+++ b/mozilla-nss.spec
@@ -17,14 +17,14 @@
 #
 
 
-%global nss_softokn_fips_version 3.57
+%global nss_softokn_fips_version 3.58
 %define NSPR_min_version 4.29
 %define nspr_ver %(rpm -q --queryformat '%%{VERSION}' mozilla-nspr)
 %define nssdbdir %{_sysconfdir}/pki/nssdb
 Name:           mozilla-nss
-Version:        3.57
+Version:        3.58
 Release:        0
-%define underscore_version 3_57
+%define underscore_version 3_58
 Summary:        Network Security Services
 License:        MPL-2.0
 Group:          System/Libraries
diff --git a/nss-3.57.tar.gz b/nss-3.57.tar.gz
deleted file mode 100644
index 072c78a..0000000
--- a/nss-3.57.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:55a86c01be860381d64bb4e5b94eb198df9b0f098a8af0e58c014df398bdc382
-size 81712830
diff --git a/nss-3.58.tar.gz b/nss-3.58.tar.gz
new file mode 100644
index 0000000..c0bddb0
--- /dev/null
+++ b/nss-3.58.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:9f73cf789b5f109b978e5239551b609b0cafa88d18f0bc8ce3f976cb629353c0
+size 81846254