[FREEBSD:C4F39920-781F-4AEB-B6AF-17ED566C4272] mozilla -- multiple vulnerabilities

Mozilla Foundation reports:

  CVE-2018-12386: Type confusion in JavaScript
  A vulnerability in register allocation in JavaScript can
    lead to type confusion, allowing for an arbitrary read and
    write. This leads to remote code execution inside the
    sandboxed content process when triggered.
  CVE-2018-12387: 
  A vulnerability where the JavaScript JIT compiler inlines
    Array.prototype.push with multiple arguments that results
    in the stack pointer being off by 8 bytes after a
    bailout. This leaks a memory address to the calling
    function which can be used as part of an exploit inside
    the sandboxed content process.