As nss 3.14.1 and nspr 4.9.4 are only in testing, I think there is a buildroot override on nss stuff, without one on nspr

Untagging seems to be a quick/possible fix.

I expired the nss and nss-softokn overrides and mailed the maintainer.

Should be back to normal at the next buildroot regen.

Thank you Kevin. The problem seems to be that the lower level dependencies, such as nspr or nss-util, expire sooner that the higher level ones, e.g. nss, even when the are added the same day as they get added to the buildroot override hours before nss. In the future I am going to expire everything and if someone needs to build against the very latest nss they can always contact me or enter a ticket.