nss: bump to 3.17.2