Firefox issues brand new update to fix HTTPS security hole in new update
Firefox 37.0 added support for a security-enhancing feature in HTTP/2 known as Alternative Services.
Unfortunately, the new feature had a rather bad HTTPS security hole all of its own…
Story added 7. April 2015, content source with full text you can find at link above.