diff --git a/.gitignore b/.gitignore
index b44045e..5b7ffac 100644
--- a/.gitignore
+++ b/.gitignore
@@ -10,4 +10,4 @@ TestUser51.cert
 /nss-pem-20140125.tar.bz2
 /PayPalRootCA.cert
 /PayPalICA.cert
-/nss-3.20.0.tar.gz
+/nss-3.20.1.tar.gz
diff --git a/nss.spec b/nss.spec
index 947372d..e8b9639 100644
--- a/nss.spec
+++ b/nss.spec
@@ -1,6 +1,6 @@
-%global nspr_version 4.10.8
-%global nss_util_version 3.20.0
-%global nss_softokn_version 3.20.0
+%global nspr_version 4.10.10
+%global nss_util_version 3.20.1
+%global nss_softokn_version 3.20.1
 %global unsupported_tools_directory %{_libdir}/nss/unsupported-tools
 %global allTools "certutil cmsutil crlutil derdump modutil pk12util signtool signver ssltap vfychain vfyserv"
 
@@ -18,10 +18,10 @@
 
 Summary:          Network Security Services
 Name:             nss
-Version:          3.20.0
+Version:          3.20.1
 # for Rawhide, please always use release >= 2
 # for Fedora release branches, please use release < 2 (1.0, 1.1, ...)
-Release:          6%{?dist}
+Release:          2%{?dist}
 License:          MPLv2.0
 URL:              http://www.mozilla.org/projects/security/pki/nss/
 Group:            System Environment/Libraries
@@ -806,6 +806,9 @@ fi
 
 
 %changelog
+* Fri Oct 30 2015 Elio Maldonado <emaldona@redhat.com> - 3.20.1-2
+- Update to NSS 3.20.1
+
 * Wed Sep 30 2015 Elio Maldonado <emaldona@redhat.com> - 3.20.0-6
 - Enable ECC cipher-suites by default [hrbz#1185708]
 - Split the enabling patch in two for easier maintenance
diff --git a/sources b/sources
index 34af08a..4c5f144 100644
--- a/sources
+++ b/sources
@@ -4,4 +4,4 @@ a5ae49867124ac75f029a9a33af31bad  blank-cert8.db
 691e663ccc07b7a1eaa6f088e03bf8e2  blank-cert9.db
 2ec9e0606ba40fe65196545564b7cc2a  blank-key4.db
 b8a94e863c852e1f8b75e930e76f8640  nss-pem-20140125.tar.bz2
-444ccbf682fedd35c6bb0c58c9f5d010  nss-3.20.0.tar.gz
+c285ef92de0031cb0a8caa60d396d618  nss-3.20.1.tar.gz