Security announcements

MSA-15-0034: Vulnerability in password recovery mechanism