Need help improving the security of Mozilla packages

[nia <nia%NetBSD.org@localhost>]

Hi,

There's patches in pkgsrc that make Firefox PaX-MPROTECT safe on NetBSD
for three versions now, www/firefox, www/firefox78, and www/firefox52.
There is also a patch for lang/mozjs68.

The following packages still need to be fixed. Building and testing all
of them will take me a long time alone:

- lang/mozjs60
- mail/thunderbird52 (based on www/firefox52)
- mail/thunderbird68 (based on www/firefox68)
- mail/thunderbird (based on www/firefox78)
- security/tor-browser (based on www/firefox78)
- www/cliqz
- www/seamonkey

If you want to help, it should be easy to copy the patches from
the most appropriate Firefox version into these packages. You need
the following:

- patch-js_src_vm_ArrayBufferObject.cpp
- patch-js_src_jit_ProcessExecutableMemory.cpp

After the patches are applied, you should be able to remove
NOT_PAX_MPROTECT_SAFE from the package, and bump the revision.

Thanks! (this message is BCCed to the maintainers of said packages)