nss: backport patch for CVE-2021-43527