Debian Security Advisory 1873-1 – Juan Pablo Lopez Yacubian discovered that incorrect handling of invalid URLs could be used for spoofing the location bar and the SSL certificate status of a web page.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/80672/dsa-1873-1.txt
Source: https://packetstormsecurity.com/files/80672/Debian-Linux-Security-Advisory-1873-1.html