Hi Mark, I'm going to need to you to take a look at this. The bad versions on www.apache.org/dist/java-repository aren't writeable by anyone but you, and they keep syncing over the top of the ones at ibiblio.
I have dropped the original JARs here: http://www.apache.org/~brett/repaired_repo/commons-jelly/jars/ (you can obviously grab these directly on cvs.apache.org) I'd really appreciate you looking into this, so that the corrupted jars don't spread. I still have no idea how the jars actually got changed... weird. Thanks, Brett On Wed, 29 Sep 2004 01:38:00 +1000, Brett Porter <[EMAIL PROTECTED]> wrote: > I tried to build maven 1.0 clean today and found out that on Sep 2, > commons-jelly and a few of its tag libs had changed on ibiblio. These > were already released jars that changed size. I checked around and > discovered the source of the change seems to be java-repository at > Apache. > > Any ideas how this happened? > > One particular offending file: > > ls -l /www/www.apache.org/dist/java-repository/commons-jelly/jars/ | grep > > 20030902 > -rw-r--r-- 1 mdiggory jakarta 161479 Sep 2 00:08 > commons-jelly-20030902.160215.jar > > md5 > > </www/www.apache.org/dist/java-repository/commons-jelly/jars/commons-jelly-20030902.160215.jar > d1e3117b90f697e6503e4ddf76bc0402 > > The original: > [EMAIL PROTECTED] repaired]$ md5sum > commons-jelly/jars/commons-jelly-20030902.160215.jar > b171e535366191e437cff6d64df33561 > commons-jelly/jars/commons-jelly-20030902.160215.jar > [EMAIL PROTECTED] repaired]$ ls -l > commons-jelly/jars/commons-jelly-20030902.160215.jar > -rwxr-xr-x 1 maven users 154418 Sep 28 09:00 > commons-jelly/jars/commons-jelly-20030902.160215.jar > (this is identical to the version distributed with Maven 1.0 back in July) > > The full list from the Maven 1.0 build that differ: > commons-jelly/jars/commons-jelly-20030902.160215.jar > commons-jelly/jars/commons-jelly-tags-antlr-20030211.143720.jar > commons-jelly/jars/commons-jelly-tags-define-20030211.142932.jar > commons-jelly/jars/commons-jelly-tags-html-20030317.100924.jar > commons-jelly/jars/commons-jelly-tags-interaction-20030211.143817.jar > commons-jelly/jars/commons-jelly-tags-jsl-20030211.143151.jar > commons-jelly/jars/commons-jelly-tags-log-20030211.142821.jar > commons-jelly/jars/commons-jelly-tags-swing-20030211.143925.jar > commons-jelly/jars/commons-jelly-tags-util-20030211.141939.jar > commons-jelly/jars/commons-jelly-tags-velocity-20030303.205659.jar > commons-jelly/jars/commons-jelly-tags-xml-20030211.142705.jar > > I have corrected the versions on ibiblio (being newer, they should > stay that way), but left Apache alone to find out what happened. I'd > really like to know if we can resolve this to avoid it in the future, > and to see if anything else was possibly affected. > > Thanks, > Brett >
