Crafted CSS in an RSS feed can leak and reveal local path strings, which may contain user name.
Name: the Mozilla project
This issue has been addressed in the following products:
Red Hat Enterprise Linux 7
Red Hat Enterprise Linux 6
Via RHSA-2018:0061 https://access.redhat.com/errata/RHSA-2018:0061