What we have seen is that because of the way the requires are done, it
is possible to update some of these without updating others.  As an
example, using normal tools like yum, you can do 'yum update
nss-softokn' and that will allow an older version of nss-softokn-freebl
(as an example) to still be installed.  This bug is not CentOS specific
and an upstream bug is filed here:

https://bugzilla.redhat.com/show_bug.cgi?id=1182337

We are therefore going to re-release the packages as they are behaving
as expected.

Thanks,
Johnny Hughes