diff --git a/.gitignore b/.gitignore
index 1276f0b..2911bbd 100644
--- a/.gitignore
+++ b/.gitignore
@@ -62,3 +62,5 @@ TestUser51.cert
 /nss-3.63.tar.gz
 /nspr-4.30.tar.gz
 /nss-3.65.tar.gz
+/nss-3.67.tar.gz
+/nspr-4.31.tar.gz
diff --git a/nss.spec b/nss.spec
index a14db30..eecffaf 100644
--- a/nss.spec
+++ b/nss.spec
@@ -1,9 +1,9 @@
-%global nspr_version 4.30.0
+%global nspr_version 4.31.0
 # NOTE: To avoid NVR clashes of nspr* packages:
 # - reset %%{nspr_release} to 1, when updating %%{nspr_version}
 # - increment %%{nspr_version}, when updating the NSS part only
-%global nspr_release 2
-%global nss_version 3.65.0
+%global nspr_release 1
+%global nss_version 3.67.0
 # only need to update this as we added new
 # algorithms under nss policy control
 %global crypto_policies_version 20210118
@@ -122,20 +122,11 @@ Patch2:           nss-539183.patch
 # case when starting an update with API changes or even private export
 # changes.
 #
-# Once the buildroot aha been bootstrapped the patch may be removed
+# Once the buildroot has been bootstrapped the patch may be removed
 # but it doesn't hurt to keep it.
 Patch4:           iquote.patch
 Patch12:          nss-signtool-format.patch
 Patch30:          nss-fedora-btrf-sql-hack.patch
-# https://bugzilla.mozilla.org/show_bug.cgi?id=1566124
-# still needs to be fixed. disable hw support until it is.
-Patch31:          nss-3.65-disable-hw-ppc.patch
-
-# https://bugzilla.mozilla.org/show_bug.cgi?id=1712184
-# we're including this here now because we will need a fedora specific
-# man page patch to remove references to dbm. I'd like to do the patch
-# once, so I'm picking up the 3.66 patch now
-Patch39:          nss-sql-man-page.patch
 # fedora disabled dbm by default
 Patch40:          nss-no-dbm-man-page.patch
 
@@ -1065,6 +1056,10 @@ update-crypto-policies &> /dev/null || :
 
 
 %changelog
+* Tue Mar 23 2021 Bob Relyea <rrelyea@redhat.com> - 3.67.0-1
+- Update to 3.67
+- Update to NSPR 2.31
+
 * Tue Mar 23 2021 Bob Relyea <rrelyea@redhat.com> - 3.65.0-1
 - Update to 3.65
 - update nss-tools manages to remove references to dbm
diff --git a/sources b/sources
index 7cb6008..1dae6c2 100644
--- a/sources
+++ b/sources
@@ -3,5 +3,5 @@ SHA512 (blank-cert9.db) = 2f8eab4c0612210ee47db8a3a80c1b58a0b43849551af78c7da403
 SHA512 (blank-key3.db) = 01f7314e9fc8a7c9aa997652624cfcde213d18a6b3bb31840c1a60bbd662e56b5bc3221d13874abb42ce78163b225a6dfce2e1326cf6dd29366ad9c28ba5a71c
 SHA512 (blank-key4.db) = 8fedae93af7163da23fe9492ea8e785a44c291604fa98e58438448efb69c85d3253fc22b926d5c3209c62e58a86038fd4d78a1c4c068bc00600a7f3e5382ebe7
 SHA512 (blank-secmod.db) = 06a2dbd861839ef6315093459328b500d3832333a34b30e6fac4a2503af337f014a4d319f0f93322409e719142904ce8bc08252ae9a4f37f30d4c3312e900310
-SHA512 (nspr-4.30.tar.gz) = bbda2cfee5351f15e03fb3ff462dffea17a52739a38b7eb7bce51ebddfb5c8ebe0b565b24b596d0155c35f94cd87e965aaed6abcab37ace9ccc33c9522bb0364
-SHA512 (nss-3.65.tar.gz) = 6f980f44056c69c74754124ce16d4880fb47440146d55906584f70d1be8e74885570308914d4482b3ee676a1f5b1e529616eae8ccd6906d678394dd929dd0825
+SHA512 (nss-3.67.tar.gz) = 1d3fa3fafbf3e54c9c3b54b0b3c291aebb48542380a1b704fa07359d3cefab93f166b31928c9db190ed58118e289e67ce8aa1619e4219d69b2c098484a22bc9d
+SHA512 (nspr-4.31.tar.gz) = 1f37d04721335288dd8a5cf700ead5a56cee73365e619f3da90f6067830b78a050a525950686bcdd14fcf61faffd1141ec46d4180a0dd10375f7e9fef6eac6ed