nss-3.21.3-2.el7, nss-util-3.21.3-1.1.el7

nss
Network Security Services (NSS) is a set of libraries designed to
support cross-platform development of security-enabled client and
server applications. Applications built with NSS can support SSL v2
and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509
v3 certificates, and other security standards.

nss-util
Utilities for Network Security Services and the Softoken module

Security issues fixed with this release:

CVE-2016-2834
Mozilla Network Security Services (NSS) before 3.23, as used in
Mozilla Firefox before 47.0, allows remote attackers to cause a denial
of service (memory corruption and application crash) or possibly have
unspecified other impact via unknown vectors.
CVE-2016-5285
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.
CVE-2016-8635
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.

The following packages have been upgraded to a newer upstream version: nss (3.12.3), nss-util (3.12.3).