I'm going to need to you to take a look at this. The bad versions on
www.apache.org/dist/java-repository aren't writeable by anyone but
you, and they keep syncing over the top of the ones at ibiblio.
I have dropped the original JARs here:
(you can obviously grab these directly on cvs.apache.org)
I'd really appreciate you looking into this, so that the corrupted
jars don't spread.
I still have no idea how the jars actually got changed... weird.
On Wed, 29 Sep 2004 01:38:00 +1000, Brett Porter <[EMAIL PROTECTED]> wrote:
> I tried to build maven 1.0 clean today and found out that on Sep 2,
> commons-jelly and a few of its tag libs had changed on ibiblio. These
> were already released jars that changed size. I checked around and
> discovered the source of the change seems to be java-repository at
> Any ideas how this happened?
> One particular offending file:
> > ls -l /www/www.apache.org/dist/java-repository/commons-jelly/jars/ | grep
> > 20030902
> -rw-r--r-- 1 mdiggory jakarta 161479 Sep 2 00:08
> > md5
> > </www/www.apache.org/dist/java-repository/commons-jelly/jars/commons-jelly-20030902.160215.jar
> The original:
> [EMAIL PROTECTED] repaired]$ md5sum
> [EMAIL PROTECTED] repaired]$ ls -l
> -rwxr-xr-x 1 maven users 154418 Sep 28 09:00
> (this is identical to the version distributed with Maven 1.0 back in July)
> The full list from the Maven 1.0 build that differ:
> I have corrected the versions on ibiblio (being newer, they should
> stay that way), but left Apache alone to find out what happened. I'd
> really like to know if we can resolve this to avoid it in the future,
> and to see if anything else was possibly affected.