nss-3.28.4-15.el7

Network Security Services (NSS) is a set of libraries designed to support the
cross-platform development of security-enabled client and server applications.

This update fixes the following bug:

* In the nss-3.28.4-2.el7 update, the pk12util tool switched from UTF-16 to using the UTF-8 text encoding for passwords when the PKCS#5 PBES2 encryption scheme was used. While this matches the latest recommendation, it caused pk12util to fail when decrypting files encrypted with pk12util from an earlier NSS release. As a consequence, applications relying on PKCS#12 encryption, such as Identity Management (IdM), were not able to read data encrypted on an earlier Asianux Server release. With this update, the pk12util tool uses the UTF-16 encoding if the password does not comply to UTF-8, and the described problem no longer occurs. (BZ#1493911)

Users of nss are advised to upgrade to these updated packages, which fix this
bug.