Comment 27 for bug 1685798

I'm thrilled to see that a fix finally merged in master for this, thanks for driving it to a conclusion!

Given that the bug report is 5 years old, and has been public for nearly 2 years now, I suspect there's not a lot of point in issuing a security advisory for it. If there's interest though, and a plan to backport the fix to maintained stable branches, please reply and I'll switch our OSSA bugtask back to an active state.