From Fedora Project Wiki
Discussion on nss update best practices, preflight and testing before major builds.
Why are NSS rebases happening in stable branches of Fedora? Package_update_guidelines#Stable_Releases suggests to just fix bugs there...