diff --git a/.gitignore b/.gitignore
index 3f34bb5..4508106 100644
--- a/.gitignore
+++ b/.gitignore
@@ -86,3 +86,5 @@ TestUser51.cert
 /nss-3.93-with-nspr-4.35.tar.gz
 /nss-3.94-with-nspr-4.35.tar.gz
 /nss-3.95-with-nspr-4.35.tar.gz
+/nss-3.96-with-nspr-4.35.tar.gz
+/nss-3.96.1-with-nspr-4.35.tar.gz
diff --git a/nss.spec b/nss.spec
index e7bb6ec..681b58f 100644
--- a/nss.spec
+++ b/nss.spec
@@ -1,5 +1,5 @@
 %global nspr_version 4.35.0
-%global nss_version 3.95.0
+%global nss_version 3.96.1
 # NOTE: To avoid NVR clashes of nspr* packages:
 # - reset %%{nspr_release} to 1, when updating %%{nspr_version}
 # - increment %%{nspr_version}, when updating the NSS part only
@@ -7,7 +7,7 @@
 %global nss_release %baserelease
 # use "%%global nspr_release %%[%%baserelease+n]" to handle offsets when
 # release number between nss and nspr are different.
-%global nspr_release %[%baserelease+15]
+%global nspr_release %[%baserelease+16]
 # only need to update this as we added new
 # algorithms under nss policy control
 %global crypto_policies_version 20210118
@@ -1084,6 +1084,9 @@ update-crypto-policies &> /dev/null || :
 
 
 %changelog
+* Thu Dec 21 2023 Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 3.96.1-1
+- Update NSS to 3.96.1
+
 * Mon Nov 27 2023 Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 3.95.0-1
 - Update NSS to 3.95.0
 
diff --git a/sources b/sources
index 0a41301..be78d53 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
 SHA512 (blank-cert9.db) = 2f8eab4c0612210ee47db8a3a80c1b58a0b43849551af78c7da403fda3e3d4e7757838061ae56ccf5aac335cb54f254f0a9e6e9c0dd5920b4155a39264525b06
 SHA512 (blank-key4.db) = 8fedae93af7163da23fe9492ea8e785a44c291604fa98e58438448efb69c85d3253fc22b926d5c3209c62e58a86038fd4d78a1c4c068bc00600a7f3e5382ebe7
-SHA512 (nss-3.95-with-nspr-4.35.tar.gz) = 8394a0381db5b5d7f975f5057e0578909901244616ccaca694c1932fd9428e651a52bbf3f30e4d993e692538a603a57df1eae5e9badda3a1291d35836ab02ecd
+SHA512 (nss-3.96.1-with-nspr-4.35.tar.gz) = 7831835936748adb7fdb050f06caea09ddcbf48e9c401bba9df1e405b05658204e1cea7800c565aae742551779ff0d4c9834b686b484055ee569ed3f4546f428