diff --git a/mozilla-nss.changes b/mozilla-nss.changes
index 2fdfc51..88cb4d5 100644
--- a/mozilla-nss.changes
+++ b/mozilla-nss.changes
@@ -1,3 +1,32 @@
+-------------------------------------------------------------------
+Tue Dec  1 12:22:57 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
+
+- update to NSS 3.59
+  Notable changes
+  * Exported two existing functions from libnss:
+    CERT_AddCertToListHeadWithData and CERT_AddCertToListTailWithData
+  Bugfixes
+  * bmo#1607449 - Lock cert->nssCertificate to prevent a potential data race
+  * bmo#1672823 - Add Wycheproof test cases for HMAC, HKDF, and DSA
+  * bmo#1663661 - Guard against NULL token in nssSlot_IsTokenPresent
+  * bmo#1670835 - Support enabling and disabling signatures via Crypto Policy
+  * bmo#1672291 - Resolve libpkix OCSP failures on SHA1 self-signed
+                  root certs when SHA1 signatures are disabled.
+  * bmo#1644209 - Fix broken SelectedCipherSuiteReplacer filter to
+                  solve some test intermittents
+  * bmo#1672703 - Tolerate the first CCS in TLS 1.3 to fix a regression in
+                  our CVE-2020-25648 fix that broke purple-discord
+                  (boo#1179382)
+  * bmo#1666891 - Support key wrap/unwrap with RSA-OAEP
+  * bmo#1667989 - Fix gyp linking on Solaris
+  * bmo#1668123 - Export CERT_AddCertToListHeadWithData and
+                  CERT_AddCertToListTailWithData from libnss
+  * bmo#1634584 - Set CKA_NSS_SERVER_DISTRUST_AFTER for Trustis FPS Root CA
+  * bmo#1663091 - Remove unnecessary assertions in the streaming
+                  ASN.1 decoder that affected decoding certain PKCS8
+                  private keys when using NSS debug builds
+  *  bmo#670839 - Use ARM crypto extension for AES, SHA1 and SHA2 on MacOS.
+
 -------------------------------------------------------------------
 Sun Nov 15 08:17:37 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
 
diff --git a/mozilla-nss.spec b/mozilla-nss.spec
index e8e7c4d..2504a05 100644
--- a/mozilla-nss.spec
+++ b/mozilla-nss.spec
@@ -17,14 +17,14 @@
 #
 
 
-%global nss_softokn_fips_version 3.58
+%global nss_softokn_fips_version 3.59
 %define NSPR_min_version 4.29
 %define nspr_ver %(rpm -q --queryformat '%%{VERSION}' mozilla-nspr)
 %define nssdbdir %{_sysconfdir}/pki/nssdb
 Name:           mozilla-nss
-Version:        3.58
+Version:        3.59
 Release:        0
-%define underscore_version 3_58
+%define underscore_version 3_59
 Summary:        Network Security Services
 License:        MPL-2.0
 Group:          System/Libraries
diff --git a/nss-3.58.tar.gz b/nss-3.58.tar.gz
deleted file mode 100644
index c0bddb0..0000000
--- a/nss-3.58.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:9f73cf789b5f109b978e5239551b609b0cafa88d18f0bc8ce3f976cb629353c0
-size 81846254
diff --git a/nss-3.59.tar.gz b/nss-3.59.tar.gz
new file mode 100644
index 0000000..43e878b
--- /dev/null
+++ b/nss-3.59.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:e6298174caa8527beacdc2858f77ed098d7047c1792846040e27e420fed0ce24
+size 82141516