diff --git a/mozilla-nss.changes b/mozilla-nss.changes
index 54898d2..7ae0145 100644
--- a/mozilla-nss.changes
+++ b/mozilla-nss.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Sat Jun  3 08:20:40 UTC 2023 - Wolfgang Rosenauer <wr@rosenauer.org>
+
+- update to NSS 3.89.1
+  * bmo#1804505 - Update the technical constraints for KamuSM.
+  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
+
 -------------------------------------------------------------------
 Wed May 31 12:54:20 UTC 2023 - Martin Sirringhaus <martin.sirringhaus@suse.com>
 
diff --git a/mozilla-nss.spec b/mozilla-nss.spec
index bfeeed3..b079c24 100644
--- a/mozilla-nss.spec
+++ b/mozilla-nss.spec
@@ -22,9 +22,9 @@
 %define nspr_ver %(rpm -q --queryformat '%%{VERSION}' mozilla-nspr)
 %define nssdbdir %{_sysconfdir}/pki/nssdb
 Name:           mozilla-nss
-Version:        3.89
+Version:        3.89.1
 Release:        0
-%define underscore_version 3_89
+%define underscore_version 3_89_1
 Summary:        Network Security Services
 License:        MPL-2.0
 Group:          System/Libraries
diff --git a/nss-3.89.1.tar.gz b/nss-3.89.1.tar.gz
new file mode 100644
index 0000000..f0d2c35
--- /dev/null
+++ b/nss-3.89.1.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:3adaedb9e70c3c5f40603bf60a01e336190a6dbe01929d395f16b01fe84a0156
+size 71624456
diff --git a/nss-3.89.tar.gz b/nss-3.89.tar.gz
deleted file mode 100644
index d02fb94..0000000
--- a/nss-3.89.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:55c37a3f4da010d0574fb8b39264cb1e7b4ce9e6c2954c1c7ecf9f41ee00bed5
-size 71617802