nixpkgs/pkgs
Andreas Rammhold e7785f1148
firefox: 62.0.2 -> 62.0.3 [critical security fixes]
This update bumps the package to the latest stable version containing a
few security fixes:

- CVE-2018-12386: Type confusion in JavaScript
  A vulnerability in register allocation in JavaScript can lead to type
  confusion, allowing for an arbitrary read and write. This leads to
  remote code execution inside the sandboxed content process when
  triggered.

- CVE-2018-12387
  A vulnerability where the JavaScript JIT compiler inlines
  Array.prototype.push with multiple arguments that results in the stack
  pointer being off by 8 bytes after a bailout. This leaks a memory
  address to the calling function which can be used as part of an
  exploit inside the sandboxed content process.

Source: https://www.mozilla.org/en-US/security/advisories/mfsa2018-24/
2018-10-03 09:51:13 +02:00
..
applications firefox: 62.0.2 -> 62.0.3 [critical security fixes] 2018-10-03 09:51:13 +02:00
build-support Merge branch 'master' into staging-next 2018-10-01 19:42:07 +02:00
common-updater
data Merge pull request #47604 from NixOS/staging-next 2018-10-02 18:22:18 +02:00
desktops deepin.dtkcore: 2.0.9 -> 2.0.9.4 (#47072) 2018-09-28 21:31:40 +02:00
development Merge pull request #47676 from matthewbauer/security-mojave-fix 2018-10-02 15:18:39 -05:00
games Merge pull request #47455 from nyanloutre/steamPackages.steam-udev 2018-10-02 00:55:41 +01:00
misc theme-obsidian2: fix theme name in index.theme (#47661) 2018-10-02 15:51:47 +02:00
os-specific Merge branch 'master' into staging-next 2018-10-01 19:42:07 +02:00
servers Merge pull request #47604 from NixOS/staging-next 2018-10-02 18:22:18 +02:00
shells zsh: 5.6.1 -> 5.6.2 2018-09-15 00:05:48 -05:00
stdenv Merge pull request #47400 from obsidiansystems/paxctl-darwin-no-mass-rebuild 2018-09-26 15:52:31 -04:00
test Merge branch 'master' into staging 2018-09-24 21:18:23 +02:00
tools twa: set meta.platforms to platforms.unix 2018-10-02 11:30:55 -07:00
top-level Merge pull request #47604 from NixOS/staging-next 2018-10-02 18:22:18 +02:00