Andreas Rammhold 246d2848ff firefox-esr-60: 60.2.1 -> 60.2.2 [critical security fixes] ... This update bumps the package to the latest stable version containing a few security fixes: - CVE-2018-12386: Type confusion in JavaScript A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and write. This leads to remote code execution inside the sandboxed content process when triggered. - CVE-2018-12387 A vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple arguments that results in the stack pointer being off by 8 bytes after a bailout. This leaks a memory address to the calling function which can be used as part of an exploit inside the sandboxed content process. Source: https://www.mozilla.org/en-US/security/advisories/mfsa2018-24/		2018-10-03 09:51:13 +02:00
..
common.nix	firefox: readd --disable-xcode-checks	2018-08-23 13:09:16 -05:00
env_var_for_system_dir.patch	firefox: support for native messaging hosts in wrapper	2017-11-12 21:18:31 +01:00
fix-debug.patch	firefox: fix debugBuild = true	2017-03-15 08:49:56 -03:00
fix-pa-context-connect-retval.patch	firefoxPackages: add a patch to fix pulseaudio initialization bug	2018-03-09 21:21:06 +00:00
no-buildconfig.patch	firefox: 59.0.3 -> 60.0	2018-05-12 19:51:04 +09:00
packages.nix	firefox-esr-60: 60.2.1 -> 60.2.2 [critical security fixes]	2018-10-03 09:51:13 +02:00
update.nix	firefox: 59.0.3 -> 60.0	2018-05-12 19:51:04 +09:00
wrapper.nix	mozilla-plugins/trezor: remove applications/networking/browsers/mozilla-plugins/trezor	2018-09-29 12:24:43 +02:00