diff --git a/srcpkgs/nss/template b/srcpkgs/nss/template
index eca7cc98d51..6822cc471ca 100644
--- a/srcpkgs/nss/template
+++ b/srcpkgs/nss/template
@@ -1,9 +1,9 @@
 # Template file for 'nss'
 
-_nsprver=4.38.2
+_nsprver=4.39
 
 pkgname=nss
-version=3.123.1
+version=3.125
 revision=1
 _v="${version//\./_}"
 hostmakedepends="perl"
@@ -13,7 +13,7 @@ maintainer="Đoàn Trần Công Danh <congdanhqx@gmail.com>"
 license="MPL-2.0, MIT, BSD-3-Clause"
 homepage="https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS"
 distfiles="${MOZILLA_SITE}/security/nss/releases/NSS_${_v}_RTM/src/nss-${version}.tar.gz"
-checksum=42065a3ff780a9710a3dddcd1cee9b9be2aa40628883cea851d562eb58b178b0
+checksum=1ad541f10da7c58dec01f540ecc44d28cbbc033f741a57473de5a0893d91606d
 
 export NS_USE_GCC=1
 export LIBRUNPATH=
@@ -118,7 +118,7 @@ do_install() {
 		install -m755 dist/*.OBJ/lib/${f} ${DESTDIR}/usr/lib
 	done
 
-	install -m644 dist/*.OBJ/lib/libcrmf.a ${DESTDIR}/usr/lib
+	# install -m644 dist/*.OBJ/lib/libcrmf.a ${DESTDIR}/usr/lib
 
 	for f in certutil cmsutil crlutil derdump modutil pk12util pp shlibsign \
 		signtool signver ssltap vfychain vfyserv; do
@@ -164,6 +164,6 @@ nss-devel_package() {
 		vmove usr/bin/nss-config
 		vmove usr/lib/pkgconfig
 		vmove usr/include
-		vmove "usr/lib/*.a"
+		# vmove "usr/lib/*.a"
 	}
 }