CVE-2017-5385 on Ubuntu 12.04 LTS (precise) - medium.
Description:
Data sent with in multipart channels, such as the multipart/x-mixed-replace MIME type, will ignore the referrer-policy response header, leading to potential information disclosure for sites using this header.