It was discovered [1] that it's possible to spoof address line in the address bar of the browser Upstream patch is at [2]. [1]: http://googlechromereleases.blogspot.com/2014/11/stable-channel-update_18.html [2]: https://chromium.googlesource.com/chromium/src/+/5cfbddc9cc972f5133f26664dbf5810bb569cd04 External References: http://googlechromereleases.blogspot.com/2014/11/stable-channel-update_18.html
This issue has been addressed in the following products: Supplementary for Red Hat Enterprise Linux 6 Via RHSA-2014:1894 https://rhn.redhat.com/errata/RHSA-2014-1894.html