- update to NSS 3.47.1
* CVE-2019-11745 - EncryptUpdate should use maxout, not block size
* Fix a crash that could be caused by client certificates during startup
(bmo#1590495)
* Fix compile-time warnings from uninitialized variables in a perl script
(bmo#1589810)

- update to NSS 3.47
* required by Firefox 71.0
Notable changes
* Support AES HW acceleration on ARMv8 (bmo#1152625)
* Allow per-socket run-time ordering of the cipher suites presented
in ClientHello (bmo#1267894)
* Add CMAC to FreeBL and PKCS #11 libraries (bmo#1570501)
Bugfixes
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.47_release_notes
- requires NSPR 4.23