Comment 2 for bug 1251590

This sounds fairly serious to me at first pass. Any idea which releases are affected?

Nova security reviewers, any input on the proposed patch above?