[Mahara-contributors] [Bug 1577251] Re: Should invalidate password reset links when a user changes their primary email address

2017-11-06 Thread Kristina Hoeppner
** CVE added: https://cve.mitre.org/cgi- bin/cvename.cgi?name=2017-1000153 -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara

[Mahara-contributors] [Bug 1577251] Re: Should invalidate password reset links when a user changes their primary email address

2016-10-25 Thread Robert Lyon
** Changed in: mahara Status: Fix Committed => Fix Released ** Changed in: mahara/16.04 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription f

[Mahara-contributors] [Bug 1577251] Re: Should invalidate password reset links when a user changes their primary email address

2016-10-24 Thread Robert Lyon
** Changed in: mahara/15.10 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.o

[Mahara-contributors] [Bug 1577251] Re: Should invalidate password reset links when a user changes their primary email address

2016-10-24 Thread Robert Lyon
** Changed in: mahara/15.04 Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.o

[Mahara-contributors] [Bug 1577251] Re: Should invalidate password reset links when a user changes their primary email address

2016-10-20 Thread Robert Lyon
** Changed in: mahara/16.10 Status: Fix Committed => Fix Released ** Changed in: mahara Milestone: 16.10.0 => None -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara

[Mahara-contributors] [Bug 1577251] Re: Should invalidate password reset links when a user changes their primary email address

2016-10-19 Thread Robert Lyon
** Changed in: mahara/16.04 Status: In Progress => Fix Committed ** Changed in: mahara/15.10 Status: In Progress => Fix Committed ** Changed in: mahara/15.04 Status: In Progress => Fix Committed -- You received this bug notification because you are a member of Mahara Contri

[Mahara-contributors] [Bug 1577251] Re: Should invalidate password reset links when a user changes their primary email address

2016-10-18 Thread Robert Lyon
** Changed in: mahara/16.10 Status: In Progress => Fix Committed ** Changed in: mahara/16.04 Status: Confirmed => In Progress ** Changed in: mahara/15.10 Status: Confirmed => In Progress ** Changed in: mahara/15.04 Status: Confirmed => In Progress -- You received th

[Mahara-contributors] [Bug 1577251] Re: Should invalidate password reset links when a user changes their primary email address

2016-10-03 Thread Robert Lyon
** Changed in: mahara/16.10 Status: Confirmed => In Progress -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org fo

[Mahara-contributors] [Bug 1577251] Re: Should invalidate password reset links when a user changes their primary email address

2016-08-07 Thread Robert Lyon
** Changed in: mahara/16.04 Milestone: 16.04.3 => 16.04.4 ** Changed in: mahara/15.10 Milestone: 15.10.5 => 15.10.6 ** Changed in: mahara/15.04 Milestone: 15.04.9 => 15.04.10 -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed t

[Mahara-contributors] [Bug 1577251] Re: Should invalidate password reset links when a user changes their primary email address

2016-07-10 Thread Robert Lyon
** Changed in: mahara/15.10 Milestone: 15.10.4 => 15.10.5 ** Changed in: mahara/16.04 Milestone: 16.04.2 => 16.04.3 -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Co

[Mahara-contributors] [Bug 1577251] Re: Should invalidate password reset links when a user changes their primary email address

2016-07-10 Thread Robert Lyon
** Changed in: mahara/15.04 Milestone: 15.04.8 => 15.04.9 -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum be

[Mahara-contributors] [Bug 1577251] Re: Should invalidate password reset links when a user changes their primary email address

2016-06-09 Thread Robert Lyon
** Changed in: mahara/16.04 Milestone: 16.04.1 => 16.04.2 -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum be

[Mahara-contributors] [Bug 1577251] Re: Should invalidate password reset links when a user changes their primary email address

2016-05-01 Thread Aaron Wells
Setting priority to "Low" because this vulnerability is of limited use: 1. This vulnerability only helps an attacker who has already compromised the victim's Mahara account. It does not offer a means to compromise an account on its own. 2. This attack doesn't allow for an ongoing cycle of comprom