Comment 6 for bug 1354208

Revision history for this message
Bryan D. Payne (bdpayne) wrote : Re: Catalog replacement allows reading config

+1 for dropping the feature in Juno.

+1 for doing a OSSA with a whitelisting fix for current stable releases.

I agree with Nathan that it is unacceptable to simply tell people to not use this feature as that will put some installations in a bind where they simply can't resolve the issue. A security fix is really necessary here.