Comment 13 for bug 1235226

OK, unless someone complains i'll open and mark this one as dupe, move the ossa task to the other bug and comment on the security relevance there.

@Stuart: we'll need a grizzly backport (and a folsom one if folsom is also affected). If you are interested, please propose fix directly to stable/grizzly (and stable/folsom if applicable) referencing the other bug.