Debian/firefox-esr: medium 6.5
Firefox behaved slightly differently for already known resources when loading CSS resources involving CSS variables. This could have been used to probe the browser history. This vulnerability affects
Action: Upgrade firefox-esr to 91.9.0esr-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 91.9.0esr-1 | - |
Fixed versions
| 91.9.0esr-1 |
Sources
published · modified · JSON