Comment 32 for bug 978896

Looking at the code history, Horizon has been vulnerable to this for as far back as I can trace (11 months). So yes, stable/diablo is affected, and while the patch won't apply cleanly, the relevant code (other than possibly moving around a bit) hasn't changed terribly much. I'm afraid I don't have a setup for testing that either, but I can certainly review the backport.