diff --git a/alts/worker/runners/base.py b/alts/worker/runners/base.py
index f6b3f12..0db80ea 100644
--- a/alts/worker/runners/base.py
+++ b/alts/worker/runners/base.py
@@ -885,6 +885,8 @@ def install_package_no_log(
             '-e',
             f'pkg_name={full_pkg_name}',
             '-e',
+            f'pkg_version={package_version}',
+            '-e',
             f'dist_name={dist_name}',
         ]
         if module_name and module_stream and module_version:
diff --git a/resources/roles/install_uninstall/tasks/main.yml b/resources/roles/install_uninstall/tasks/main.yml
index 24039ac..36e5b91 100644
--- a/resources/roles/install_uninstall/tasks/main.yml
+++ b/resources/roles/install_uninstall/tasks/main.yml
@@ -101,6 +101,16 @@
   tags:
     - install_package
 
+- name: Downgrade nss packages on EL7
+  ansible.builtin.shell:
+    cmd: "yum downgrade -y nss*-{{ pkg_version }}"
+  when:
+    - ansible_facts.os_family == 'RedHat'
+    - ansible_facts.distribution_major_version == '7'
+    - pkg_name.startswith('nss')
+  tags:
+    - install_package
+
 - name: Install RPM package
   ansible.builtin.package:
     name: "{{ pkg_name }}"