(In reply to Wolfgang Rosenauer from comment #8) it looks like mozila-nss package 3.8 should have dependency for higher libfreebl3 right now: libfreebl3 >= 3.21