CVE-2022-29916 log

Source	CVE Red Hat MITRE NVD Debian Ubuntu SUSE Alpine Mageia CVE Details CIRCL Bugs Arch Linux Red Hat Gentoo SUSE GitHub Lists oss-security full-disclosure bugtraq Misc GitHub code web search
Severity	High
Remote	Yes
Type	Information disclosure
Description	Firefox behaved slightly differently for already known resources when loading CSS resources involving CSS variables. This could have been used to probe the browser history.

Group	Package	Affected	Fixed	Severity	Status	Ticket
AVG-2710	thunderbird	91.8.1-1	91.9-1	High	Fixed
AVG-2709	firefox	99.0.1-1	100.0-1	High	Fixed

References
https://bugzilla.mozilla.org/show_bug.cgi?id=1760674 https://www.mozilla.org/en-US/security/advisories/mfsa2022-16/#CVE-2022-29916 https://www.mozilla.org/en-US/security/advisories/mfsa2022-18/#CVE-2022-29916

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1760674
https://www.mozilla.org/en-US/security/advisories/mfsa2022-16/#CVE-2022-29916
https://www.mozilla.org/en-US/security/advisories/mfsa2022-18/#CVE-2022-29916