Candidate: CVE-2016-9062
PublicDate: 2018-06-11 21:29:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9062
 https://www.mozilla.org/en-US/security/advisories/mfsa2016-89/
Description:
 Private browsing mode leaves metadata information, such as URLs, for sites
 visited in "browser.db" and "browser.db-wal" files within the Firefox
 profile after the mode is exited. Note: This issue only affects Firefox for
 Android. Other versions and operating systems are unaffected. This
 vulnerability affects Firefox < 50.
Ubuntu-Description:
Notes:
 sbeattie> firefox for android
Bugs:
Priority: medium
Discovered-by: 
Assigned-to: chrisccoulson
CVSS:
 nvd: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N [3.3 LOW]

Patches_firefox:
upstream_firefox: released (50)
precise_firefox: not-affected (android only)
trusty_firefox: not-affected (android only)
trusty/esm_firefox: DNE (trusty was not-affected [android only])
vivid/ubuntu-core_firefox: DNE
vivid/stable-phone-overlay_firefox: DNE
xenial_firefox: not-affected (android only)
esm-infra/xenial_firefox: not-affected (android only)
yakkety_firefox: not-affected (android only)
devel_firefox: not-affected (android only)

Patches_thunderbird:
Priority_thunderbird: low
upstream_thunderbird: not-affected (android only)
precise_thunderbird: not-affected (android only)
trusty_thunderbird: not-affected (android only)
trusty/esm_thunderbird: DNE (trusty was not-affected [android only])
vivid/ubuntu-core_thunderbird: DNE
vivid/stable-phone-overlay_thunderbird: DNE
xenial_thunderbird: not-affected (android only)
esm-infra/xenial_thunderbird: not-affected (android only)
yakkety_thunderbird: not-affected (android only)
devel_thunderbird: not-affected (android only)