Dear kim,
You are receiving this email because you have a login, 'kimsoft', on the Apache JIRA installation,https://issues.apache.org/jira/
On April 6 theissues.apache.orgserver was hacked. The attackers were able to install a trojan JIRA login screen and later get full root access:
https://blogs.apache.org/infra/entry/apache_org_04_09_2010
We are assuming that the attackers have a copy of the JIRA database, which includes a hash (SHA-512 unsalted) of the password
you set when signing up as 'kimsoft' to JIRA. If the password you set was not of great quality (eg. based on a dictionary word), it
should be assumed that the attackers can guess your password from the password hash via brute force.
The upshot is that someone malicious may know both your email address and a password of yours.
This is a problem because many people reuse passwords across online services. If you reuse passwords across systems, we urge you to change
your passwords on ALL SYSTEMS that might be using the compromised JIRA password. Prime examples might be gmail or hotmail accounts, online
banking sites, or sites known to be related to your email's domain,gmail.com.
Naturally we would also like you to reset your JIRA password. That can be done at:
https://issues.apache.org/jira/secure/ForgotPassword!default.jspa?username=kimsoft
We (the Apache JIRA administrators) sincerely apologize for this security breach. If you have any questions, please let us know by email.
We are also available on the #asfinfra IRC channel onirc.freenode.net.
Regards,
The Apache Infrastructure Team
分享到:
相关推荐
基于ApacheJames邮件服务器的收发邮件代码及服务,邮件服务器,简单的环境,发邮件,收邮件的类,直接运行即可!
这份资料是+++利用Apache Commons Email发送邮件+++的内容,希望能给有志成为IT人才一点帮助!你的进步就是对我最大的回报! Thank you!
Apache James邮件服务器,内部邮件的收发,包括删除
用openssl为apache制作ssl证书
apache-james 是apache旗下的开源项目,为企业架设内部及外部服务器再添便利!!!
apache-james java发送邮件服务器,直接解压下来就可以使用,解压的目录最好不要有中文名称
apache httpd禁止某IP访问网站.IP黑名单
Apache-Email邮件发送jar和APIApache-Email邮件发送jar和APIApache-Email邮件发送jar和APIApache-Email邮件发送jar和APIApache-Email邮件发送jar和APIApache-Email邮件发送jar和API
Apache 邮件服务器 James 简单配置.doc
apache邮件工具,可以实现简单的邮件工具,网上看来的,供大家一起共同分享学习。
java邮件发送例子 apache email demo
在linux下和应用程序整合Discuz!整个过程需要安装很多软件,其中有几个还有版本限制,要认真看我的文档啊!
windows下配置Apache双向认证和反向代理(Apache+配置文档)
它是封装邮件发送的类~! 让我们可以直接调方法就可以使用~!
"网证通" 服务器证书安装配置指南系列之 Apache1.3.20-16服务器证书安装配置指南
全面的介绍了hmailserver+roundcube(apache+mysql+php)邮件服务器配置
刚进个小公司就让我搭建个服务器,研究了一个星期,总算是搞定了,网上找了很多资料,看了很久也研究了很久,最后总结了下......不过如果是收邮件的话必须要有注册的域名,也就是公网的域名才可以接收邮件,不然接收不了
apache james(邮件服务器)配置.经过配置可以向163、qq等邮箱发送邮件
Apache-flink 未授权访问任意jar包上传反弹shell CVE-2019-0193 Apache-Solr via Velocity template RCE CVE-2019-17564 Apache-Dubbo反序列化漏洞 CVE-2020-13925 Apache Kylin 远程命令执行漏洞 CVE-2020-13957 ...