diff --git a/nss.spec b/nss.spec
index b326269..4f55edc 100644
--- a/nss.spec
+++ b/nss.spec
@@ -44,7 +44,7 @@ rpm.define(string.format("nss_release_tag NSS_%s_RTM",
 Summary:          Network Security Services
 Name:             nss
 Version:          %{nss_version}
-Release:          2%{?dist}
+Release:          3%{?dist}
 License:          MPLv2.0
 URL:              http://www.mozilla.org/projects/security/pki/nss/
 Requires:         nspr >= %{nspr_version}
@@ -53,6 +53,10 @@ Requires:         nss-util >= %{nss_version}
 Requires:         nss-softokn%{_isa} >= %{nss_version}
 Requires:         nss-system-init
 Requires:         p11-kit-trust
+# This is only to revert the faulty crypto-policies configuration
+# generated by the previously installed F28 package:
+# https://bugzilla.redhat.com/show_bug.cgi?id=1619573#c55
+Requires:         crypto-policies
 BuildRequires:    nspr-devel >= %{nspr_version}
 # for shlibsign
 BuildRequires:    nss-softokn
@@ -637,6 +641,15 @@ done
 # from previous versions of nss.spec
 /usr/bin/setup-nsssysinit.sh on
 
+# These are only to revert the faulty crypto-policies configuration
+# generated by the previously installed F28 package:
+# https://bugzilla.redhat.com/show_bug.cgi?id=1619573#c55
+%post
+update-crypto-policies
+
+%postun
+update-crypto-policies
+
 
 %files
 %{!?_licensedir:%global license %%doc}
@@ -888,6 +901,9 @@ done
 
 
 %changelog
+* Fri Dec 14 2018 Daiki Ueno <dueno@redhat.com> - 3.41.0-3
+- Restore %%post / %%postun scriptlets
+
 * Thu Dec 13 2018 Daiki Ueno <dueno@redhat.com> - 3.41.0-2
 - Revert p11-kit-proxy configuration, mistakenly merged from F29