Comment 44 for bug 1552042

As there were no further objections after a lengthy review period under embargo, I'm switching this bug to Public Security.

It's still unclear to me on the backport suitability of the proposed fix for stable branches, so I've set the security advisory status back to incomplete while that's confirmed.