nspr-4.11.0-1.el7, nss-softokn-3.16.2.3-14.2.el7, nss-3.21.0-9.el7, nss-util-3.21.0-2.2.el7

nspr
NSPR provides platform independence for non-GUI operating system
facilities. These facilities include threads, thread synchronization,
normal file and network I/O, interval timing and calendar time, basic
memory management (malloc and free) and shared library linking.

nss
Network Security Services (NSS) is a set of libraries designed to
support cross-platform development of security-enabled client and
server applications. Applications built with NSS can support SSL v2
and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509
v3 certificates, and other security standards.

nss-softokn
Network Security Services Softoken Cryptographic Module

nss-util
Utilities for Network Security Services and the Softoken module

Security issues fixed with this release:

CVE-2016-1978
Use-after-free vulnerability in the ssl3_HandleECDHServerKeyExchange
function in Mozilla Network Security Services (NSS) before 3.21, as
used in Mozilla Firefox before 44.0, allows remote attackers to cause
a denial of service or possibly have unspecified other impact by
making an SSL (1) DHE or (2) ECDHE handshake at a time of high memory
consumption.
CVE-2016-1979
Use-after-free vulnerability in the
PK11_ImportDERPrivateKeyInfoAndReturnKey function in Mozilla Network
Security Services (NSS) before 3.21.1, as used in Mozilla Firefox
before 45.0, allows remote attackers to cause a denial of service or
possibly have unspecified other impact via crafted key data with DER
encoding.

The following packages have been upgraded to a newer upstream version: nss (3.21.0), nss-util (3.21.0), nspr (4.11.0).
Fixed bugs:

* The nss-softokn package has been updated to be compatible with NSS 3.21.