Index: general/genlib/js91.xml
===================================================================
--- general/genlib/js91.xml	(revision 8bc9e2849c7c37e111cdfccd36a77d18bd1edd33)
+++ general/genlib/js91.xml	(revision f9579a89d3459d81bdf9357cfb96b02bdc8134f4)
@@ -14,8 +14,8 @@
   <!ENTITY js91-download-http "&mozilla-http;/firefox/releases/&JS91-version;esr/source/firefox-&JS91-version;esr.source.tar.xz">
   <!ENTITY js91-download-ftp  " ">
-  <!ENTITY js91-md5sum        "afed7dd6b46abc80470d1d1bab2cd471">
-  <!ENTITY js91-size          "367 MB">
+  <!ENTITY js91-md5sum        "d4088762a37f4efd966b9f8134c3b91d">
+  <!ENTITY js91-size          "362 MB">
   <!ENTITY js91-buildsize     "3.1 GB (38 MB installed after removing 36MB static lib)">
-  <!ENTITY js91-time          "2.3 SBU (with parallelism=4)">
+  <!ENTITY js91-time          "2.2 SBU (with parallelism=4)">
 ]>
 
Index: introduction/welcome/changelog.xml
===================================================================
--- introduction/welcome/changelog.xml	(revision 8bc9e2849c7c37e111cdfccd36a77d18bd1edd33)
+++ introduction/welcome/changelog.xml	(revision f9579a89d3459d81bdf9357cfb96b02bdc8134f4)
@@ -44,4 +44,20 @@
 
     <listitem>
+      <para>May 21st, 2022</para>
+      <itemizedlist>
+        <listitem>
+          <para>[ken] - Update to thunderbird-91.9.1 (security fix re javascript
+          in rss feeds, which is enabled by default). Fixes
+          <ulink url="&blfs-ticket-root;16564">#16564</ulink>.</para>
+        </listitem>
+        <listitem>
+          <para>[ken] - Update to firefox-91.9.1 and JS-91.9.1 (security fix for
+          each of these). Fixes
+          <ulink url="&blfs-ticket-root;16563">#16563</ulink>.</para>
+        </listitem>
+      </itemizedlist>
+    </listitem>
+
+    <listitem>
       <para>May 20th, 2022</para>
       <itemizedlist>
Index: packages.ent
===================================================================
--- packages.ent	(revision 8bc9e2849c7c37e111cdfccd36a77d18bd1edd33)
+++ packages.ent	(revision f9579a89d3459d81bdf9357cfb96b02bdc8134f4)
@@ -960,5 +960,5 @@
 
 <!-- for firefox-legacy-version use JS78-version: f-l archived at version 78.15.0 -->
-<!ENTITY firefox-version              "91.9.0">
+<!ENTITY firefox-version              "91.9.1">
 <!ENTITY flashplayer-version          "27.0.0.187">
 <!ENTITY qupzilla-version             "2.2.6">
@@ -985,5 +985,5 @@
 <!ENTITY rox-filer-version            "2.11">
 <!ENTITY rxvt-unicode-version         "9.30">
-<!ENTITY thunderbird-version          "91.9.0">
+<!ENTITY thunderbird-version          "91.9.1">
 <!ENTITY tigervnc-version             "1.12.0">
 <!ENTITY transmission-version         "3.00">
Index: xsoft/graphweb/firefox.xml
===================================================================
--- xsoft/graphweb/firefox.xml	(revision 8bc9e2849c7c37e111cdfccd36a77d18bd1edd33)
+++ xsoft/graphweb/firefox.xml	(revision f9579a89d3459d81bdf9357cfb96b02bdc8134f4)
@@ -7,13 +7,13 @@
   <!ENTITY firefox-download-http "&mozilla-http;/firefox/releases/&firefox-version;esr/source/firefox-&firefox-version;esr.source.tar.xz">
   <!ENTITY firefox-download-ftp  " ">
-  <!ENTITY firefox-md5sum        "afed7dd6b46abc80470d1d1bab2cd471">
-  <!ENTITY firefox-size          "367 MB">
+  <!ENTITY firefox-md5sum        "d4088762a37f4efd966b9f8134c3b91d">
+  <!ENTITY firefox-size          "362 MB">
   <!-- NB with stylo, much of the build uses rust, and therefore cargo files.
     But the extra cached cargo files, if any, seem to be minimal -->
-  <!ENTITY firefox-buildsize     "6.7 GB (193 MB installed) without tests">
+  <!ENTITY firefox-buildsize     "6.6 GB (193 MB installed) without tests">
   <!-- editors: with ff63 and rust-1.29, ./mach build -j4 is probably the
    most practical way to get a timing on a machine with more cores, if taking
    cores offline is not practical. If in doubt, round up -->
-  <!ENTITY firefox-time          "25 SBU (on a typical 4-core machine) without tests">
+  <!ENTITY firefox-time          "24 SBU (on a typical 4-core machine) without tests">
 ]>
 
Index: xsoft/other/thunderbird.xml
===================================================================
--- xsoft/other/thunderbird.xml	(revision 8bc9e2849c7c37e111cdfccd36a77d18bd1edd33)
+++ xsoft/other/thunderbird.xml	(revision f9579a89d3459d81bdf9357cfb96b02bdc8134f4)
@@ -7,8 +7,8 @@
   <!ENTITY thunderbird-download-http "&mozilla-http;/thunderbird/releases/&thunderbird-version;/source/thunderbird-&thunderbird-version;.source.tar.xz">
   <!ENTITY thunderbird-download-ftp  " ">
-  <!ENTITY thunderbird-md5sum        "fc2586bc8b7e88f8b6abb394e6de289f">
+  <!ENTITY thunderbird-md5sum        "69d9397713b06a48a2cebe52af1302d4">
   <!ENTITY thunderbird-size          "385 MB">
   <!ENTITY thunderbird-buildsize     "6.9 GB (191 MB installed)">
-  <!ENTITY thunderbird-time          "24 SBU (on a 4-core machine)">
+  <!ENTITY thunderbird-time          "27 SBU (on a 4-core machine)">
   <!-- Removed the -j1 time because python and rust do not obey it, although
        the C/C++ code appears to obey it -->
