diff --git a/pkgs/firefox-extensions/ublock-origin/package.nix b/pkgs/firefox-extensions/ublock-origin/package.nix
index 6e0c202b9..e697ff749 100644
--- a/pkgs/firefox-extensions/ublock-origin/package.nix
+++ b/pkgs/firefox-extensions/ublock-origin/package.nix
@@ -12,7 +12,7 @@
 }:
 stdenv.mkDerivation rec {
   pname = "ublock-origin";
-  version = "1.63.2";
+  version = "1.64.0";
   src = fetchurl {
     # N.B.: the release process seems to be to first release an unsigned .xpi,
     #       then sign it a few days later,
@@ -20,7 +20,7 @@ stdenv.mkDerivation rec {
     #       therefore, only grab signed releases, to avoid having the artifact disappear out from under us :(
     # url = "https://github.com/gorhill/uBlock/releases/download/${version}/uBlock0_${version}.firefox.xpi";
     url = "https://github.com/gorhill/uBlock/releases/download/${version}/uBlock0_${version}.firefox.signed.xpi";
-    hash = "sha256-2TF2zvTcBC5BulAKoqkOXVe1vndEnL1SIRFYXjoM0Vg=";
+    hash = "sha256-ueHIaL0awd78q/LgF3bRqQ7/ujSwf+aiE1DUXwIuDp8=";
     name = "uBlock0_${version}.firefox.signed.zip";
   };
   # .zip file has everything in the top-level; stdenv needs it to be extracted into a subdir: