Security and patch rollup for FPR8 from ESR52

[classilla]

Through 9254d8f32ab1

Not relevant:
M1459206 (not in 45)
M1451297 (not in 45, e10s only)
M1462682 (no Skia)
M1465108 (we don't have nor need M1257186)
M1452375 (no SSSE3)
M1458264 (no ANGLE)
M1392739 (code does not exist)
M1453127 (different code)
M1456189 (code does not exist)
M1462912 (code does not exist)
M1413868 (Windows only)

Not taking:
M1437842 (different code, different platform, different compiler, high risk)
M1465898 (no benefit, e10s only)

Deferred:
M1442722 (different code and path, unclear if this is ever executed, high risk)

Candidates:
M1458270 (Cocoa section only) https://hg.mozilla.org/releases/mozilla-esr52/rev/2374dca97bde45a620c5a7123b516607e9093ee6
M1452576 (-wasm) https://hg.mozilla.org/releases/mozilla-esr52/rev/70b6298e0c9e66f6cf1ee3562c9e602a67823e05
M1459162 https://hg.mozilla.org/releases/mozilla-esr52/rev/11d8a87fb6d63855e48ede6748f101d17faf7356
M1450688 https://hg.mozilla.org/releases/mozilla-esr52/rev/2c75bfcd465c
M1456975 https://hg.mozilla.org/releases/mozilla-esr52/rev/042f80f3befd
M1459693 https://hg.mozilla.org/releases/mozilla-esr52/rev/face7a3dd5d7
M1464829 https://hg.mozilla.org/releases/mozilla-esr52/rev/7afb58c046c8 (JS)
M1464784 https://hg.mozilla.org/releases/mozilla-esr52/rev/ad5a53a1d2b1

[classilla]

Through 755067c14b06

Not relevant:
M1468217 (Windows only)
M1369771 (Windows only)
M1436241 (we don't allow NPAPI)
M1413868 (MinGW only)

Not taking:

Deferred:

Candidates:
M1464063 https://hg.mozilla.org/releases/mozilla-esr52/rev/9d4d31b2630d
M1464039
https://hg.mozilla.org/releases/mozilla-esr52/rev/edf2c7dff493
followup: https://hg.mozilla.org/releases/mozilla-esr52/rev/67b2d8924841a4c44e2907628d35ee8a022ecd2d
M1458048 https://hg.mozilla.org/releases/mozilla-esr52/rev/068e249d02b4aa3f34e536b4fcd4df3aa9c11e47