Log message:
Pullup ticket #6635 - requested by nia
www/firefox91: security update

Revisions pulled up:
- www/firefox91/Makefile                                        1.18
- www/firefox91/distinfo                                        1.13
- www/firefox91/patches/patch-browser_app_profile_firefox.js    1.2

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	nia
   Date:		Mon May 16 21:16:00 UTC 2022

   Modified Files:
   	pkgsrc/www/firefox91: Makefile distinfo
   	pkgsrc/www/firefox91/patches: patch-browser_app_profile_firefox.js

   Log message:
   firefox91: update to 91.9.0

   Security Vulnerabilities fixed in Firefox ESR 91.9

       #CVE-2022-29914: Fullscreen notification bypass using popups

       #CVE-2022-29909: Bypassing permission prompt in nested browsing contexts

       #CVE-2022-29916: Leaking browser history with CSS variables

       #CVE-2022-29911: iframe Sandbox bypass

       #CVE-2022-29912: Reader mode bypassed SameSite cookies

       #CVE-2022-29917: Memory safety bugs fixed in Firefox 100 and Firefox ESR
       91.9

   To generate a diff of this commit:
   cvs rdiff -u -r1.17 -r1.18 pkgsrc/www/firefox91/Makefile
   cvs rdiff -u -r1.12 -r1.13 pkgsrc/www/firefox91/distinfo
   cvs rdiff -u -r1.1 -r1.2 \
       pkgsrc/www/firefox91/patches/patch-browser_app_profile_firefox.js

Log message:
Pullup ticket #6612 - requested by nia
www/firefox91: security fix
www/firefox91-l10n: dependent update

Revisions pulled up:
- www/firefox91-l10n/Makefile                                   1.10
- www/firefox91-l10n/distinfo                                   1.12
- www/firefox91/Makefile                                        1.16
- www/firefox91/distinfo                                        1.12

---
   Module Name:	pkgsrc
   Committed By:	nia
   Date:		Sun Apr 10 13:43:44 UTC 2022

   Modified Files:
   	pkgsrc/www/firefox91: Makefile distinfo
   	pkgsrc/www/firefox91-l10n: Makefile distinfo

   Log message:
   firefox91: update to 91.8.0

   Security Vulnerabilities fixed in Firefox ESR 91.8

   #CVE-2022-1097: Use-after-free in NSSToken objects

   #CVE-2022-28281: Out of bounds write due to unexpected WebAuthN Extensions

   #CVE-2022-1196: Use-after-free after VR Process destruction

   #CVE-2022-28282: Use-after-free in DocumentL10n::TranslateDocument

   #CVE-2022-28285: Incorrect AliasSet used in JIT Codegen

   #CVE-2022-28286: iframe contents could be rendered outside the border

   #CVE-2022-24713: Denial of Service via complex regular expressions

   #CVE-2022-28289: Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8