Comment 2 for bug 1688182

Given this is a long-standing public issue, I'll triage this as won't fix for the advisory and we can mark it in public as a proper duplicate report. Once this report is public, we can of course continue to discuss whether it warrants an advisory and backports to stable branches and if there's a compelling argument for them then we can reverse the ossa bug task state at that point.