we’re planning to perform an upgrade of www.xwiki.org and all subwikis (including extensions.xwiki.org) next tuesday the 13th of january starting at around 10:00 CET.
As usual the websites should still be available during the upgrade to consult but will be readonly during the upgrade. It usually takes a few hours depending on the issues we might have.
The upgrade is still ongoing but we have been informed that some people received emails from xwiki.org asking to reset their password and informing about a possible data leaks related to it.
It’s actually an old email that was prepared as part of an upgrade performed a few years ago: we apparently forgot to remove a file from a server that has been used to send again the emails, after we switched some configurations to their default values.
All that to say that if you received such emails you can safely ignore them and the security issues described in the sent email is not true anymore.