You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@infra.apache.org by "Mark Thomas (JIRA)" <ji...@apache.org> on 2009/08/06 11:56:15 UTC
[jira] Created: (INFRA-2175) mirror.soluzionisis.com is corrupting
.tar.gz files
mirror.soluzionisis.com is corrupting .tar.gz files
---------------------------------------------------
Key: INFRA-2175
URL: https://issues.apache.org/jira/browse/INFRA-2175
Project: Infrastructure
Issue Type: Bug
Security Level: public (Regular issues)
Components: Mirrors
Reporter: Mark Thomas
Assignee: Mark Thomas
Priority: Critical
A report was received via security@a.o that archives obtained from mirror.soluzionisis.com did not match the MD5s from the ASF.
It appears that mirror.soluzionisis.com is corrupting all mirrored .tar.gz files. The corruption appears to be limited to adding a duplicate directory at the top level of the archive.
I will temporarily remove mirror.soluzionisis.com from the list of mirrors until this problem is corrected.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (INFRA-2175) mirror.soluzionisis.com is
corrupting .tar.gz files
Posted by "Mark Thomas (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/INFRA-2175?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12739976#action_12739976 ]
Mark Thomas commented on INFRA-2175:
------------------------------------
Mirror removed. Owner e-mailed.
> mirror.soluzionisis.com is corrupting .tar.gz files
> ---------------------------------------------------
>
> Key: INFRA-2175
> URL: https://issues.apache.org/jira/browse/INFRA-2175
> Project: Infrastructure
> Issue Type: Bug
> Security Level: public(Regular issues)
> Components: Mirrors
> Reporter: Mark Thomas
> Assignee: Mark Thomas
> Priority: Critical
>
> A report was received via security@a.o that archives obtained from mirror.soluzionisis.com did not match the MD5s from the ASF.
> It appears that mirror.soluzionisis.com is corrupting all mirrored .tar.gz files. The corruption appears to be limited to adding a duplicate directory at the top level of the archive.
> I will temporarily remove mirror.soluzionisis.com from the list of mirrors until this problem is corrected.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Closed: (INFRA-2175) mirror.soluzionisis.com is corrupting
.tar.gz files
Posted by "Mark Thomas (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/INFRA-2175?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Mark Thomas closed INFRA-2175.
------------------------------
Resolution: Fixed
Fine with me.
> mirror.soluzionisis.com is corrupting .tar.gz files
> ---------------------------------------------------
>
> Key: INFRA-2175
> URL: https://issues.apache.org/jira/browse/INFRA-2175
> Project: Infrastructure
> Issue Type: Bug
> Security Level: public(Regular issues)
> Components: Mirrors
> Reporter: Mark Thomas
> Assignee: Mark Thomas
> Priority: Critical
>
> A report was received via security@a.o that archives obtained from mirror.soluzionisis.com did not match the MD5s from the ASF.
> It appears that mirror.soluzionisis.com is corrupting all mirrored .tar.gz files. The corruption appears to be limited to adding a duplicate directory at the top level of the archive.
> I will temporarily remove mirror.soluzionisis.com from the list of mirrors until this problem is corrected.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Closed: (INFRA-2175) mirror.soluzionisis.com is corrupting
.tar.gz files
Posted by "Henk Penning (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/INFRA-2175?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Henk Penning closed INFRA-2175.
-------------------------------
Resolution: Fixed
The 'Content-Encoding: gzip' line in the response
is gone ; server should be good now.
Henk Penning
> mirror.soluzionisis.com is corrupting .tar.gz files
> ---------------------------------------------------
>
> Key: INFRA-2175
> URL: https://issues.apache.org/jira/browse/INFRA-2175
> Project: Infrastructure
> Issue Type: Bug
> Security Level: public(Regular issues)
> Components: Mirrors
> Reporter: Mark Thomas
> Assignee: Mark Thomas
> Priority: Critical
>
> A report was received via security@a.o that archives obtained from mirror.soluzionisis.com did not match the MD5s from the ASF.
> It appears that mirror.soluzionisis.com is corrupting all mirrored .tar.gz files. The corruption appears to be limited to adding a duplicate directory at the top level of the archive.
> I will temporarily remove mirror.soluzionisis.com from the list of mirrors until this problem is corrected.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (INFRA-2175) mirror.soluzionisis.com is
corrupting .tar.gz files
Posted by "Henk Penning (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/INFRA-2175?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12740108#action_12740108 ]
Henk Penning commented on INFRA-2175:
-------------------------------------
Mark,
can you give me an example ?
File httpd/apache_1.3.41.tar.gz appears to be fine.
HPP
> mirror.soluzionisis.com is corrupting .tar.gz files
> ---------------------------------------------------
>
> Key: INFRA-2175
> URL: https://issues.apache.org/jira/browse/INFRA-2175
> Project: Infrastructure
> Issue Type: Bug
> Security Level: public(Regular issues)
> Components: Mirrors
> Reporter: Mark Thomas
> Assignee: Mark Thomas
> Priority: Critical
>
> A report was received via security@a.o that archives obtained from mirror.soluzionisis.com did not match the MD5s from the ASF.
> It appears that mirror.soluzionisis.com is corrupting all mirrored .tar.gz files. The corruption appears to be limited to adding a duplicate directory at the top level of the archive.
> I will temporarily remove mirror.soluzionisis.com from the list of mirrors until this problem is corrected.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (INFRA-2175) mirror.soluzionisis.com is
corrupting .tar.gz files
Posted by "Henk Penning (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/INFRA-2175?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12740183#action_12740183 ]
Henk Penning commented on INFRA-2175:
-------------------------------------
Hm, the md5's of http://mirror.soluzionisis.com/apache/httpd/apache_1.3.41.tar.gz
and /www/www.apache.org/dist/httpd/apache_1.3.41.tar.gz (on people.a.o) are identical.
[henkp@minotaur]-: wget -O - http://mirror.soluzionisis.com/apache/httpd/apache_1.3.41.tar.gz | md5
--2009-08-06 18:05:37-- http://mirror.soluzionisis.com/apache/httpd/apache_1.3.41.tar.gz
Resolving mirror.soluzionisis.com... 195.250.34.123
Connecting to mirror.soluzionisis.com|195.250.34.123|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 2483180 (2.4M) [application/x-gzip]
Saving to: `STDOUT'
100%[=====================================================================================================================================>] 2,483,180 232K/s in 12s
2009-08-06 18:05:50 (202 KB/s) - `-' saved [2483180/2483180]
f7f00b635243f03a787ca9f4d4c85651
[henkp@minotaur]-: md5 /www/www.apache.org/dist/httpd/apache_1.3.41.tar.gz
MD5 (/www/www.apache.org/dist/httpd/apache_1.3.41.tar.gz) = f7f00b635243f03a787ca9f4d4c85651
------------------------------------------------------------------------------------------------------------------------------------------
... and I don't see a 'duplicate directory' :
[henkp@minotaur]-: wget -q -O - http://mirror.soluzionisis.com/apache/httpd/apache_1.3.41.tar.gz | zcat | tar tvf - |& head
drwxr-xr-x 0 jim staff 0 Jan 10 2008 apache_1.3.41/
-rw-r--r-- 0 jim staff 14787 Nov 24 2004 apache_1.3.41/ABOUT_APACHE
drwxr-xr-x 0 jim staff 0 Jan 10 2008 apache_1.3.41/cgi-bin/
-rw-r--r-- 0 jim staff 274 Nov 24 2004 apache_1.3.41/cgi-bin/printenv
-rw-r--r-- 0 jim staff 757 Nov 24 2004 apache_1.3.41/cgi-bin/test-cgi
drwxr-xr-x 0 jim staff 0 Jan 10 2008 apache_1.3.41/conf/
-rw-r--r-- 0 jim staff 285 Nov 24 2004 apache_1.3.41/conf/access.conf-dist
-rw-r--r-- 0 jim staff 1627 Nov 24 2004 apache_1.3.41/conf/highperformance.conf-dist
-rw-r--r-- 0 jim staff 32598 Nov 24 2004 apache_1.3.41/conf/httpd.conf-dist
-rw-r--r-- 0 jim staff 30576 Nov 24 2004 apache_1.3.41/conf/httpd.conf-dist-nw
[henkp@minotaur]-:
HPP
> mirror.soluzionisis.com is corrupting .tar.gz files
> ---------------------------------------------------
>
> Key: INFRA-2175
> URL: https://issues.apache.org/jira/browse/INFRA-2175
> Project: Infrastructure
> Issue Type: Bug
> Security Level: public(Regular issues)
> Components: Mirrors
> Reporter: Mark Thomas
> Assignee: Mark Thomas
> Priority: Critical
>
> A report was received via security@a.o that archives obtained from mirror.soluzionisis.com did not match the MD5s from the ASF.
> It appears that mirror.soluzionisis.com is corrupting all mirrored .tar.gz files. The corruption appears to be limited to adding a duplicate directory at the top level of the archive.
> I will temporarily remove mirror.soluzionisis.com from the list of mirrors until this problem is corrected.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (INFRA-2175) mirror.soluzionisis.com is
corrupting .tar.gz files
Posted by "Henk Penning (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/INFRA-2175?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12785298#action_12785298 ]
Henk Penning commented on INFRA-2175:
-------------------------------------
There is no point in keeping tickets open for months,
without any progress. I don't see what's wrong ; If you
do, can you please try to get the mirror fixed ?
HPP
This is what I see :
[henkp@minotaur]-: wget -S -d -O /dev/null http://mirror.soluzionisis.com/apache/httpd/apache_1.3.41.tar.gz
Setting --output-document (outputdocument) to /dev/null
DEBUG output created by Wget 1.11.4 on freebsd7.2.
--2009-12-03 11:00:02-- http://mirror.soluzionisis.com/apache/httpd/apache_1.3.41.tar.gz
Resolving mirror.soluzionisis.com... 195.250.34.123
Caching mirror.soluzionisis.com => 195.250.34.123
Connecting to mirror.soluzionisis.com|195.250.34.123|:80... connected.
Created socket 4.
Releasing 0x00000008010020c0 (new refcount 1).
---request begin---
GET /apache/httpd/apache_1.3.41.tar.gz HTTP/1.0
User-Agent: Wget/1.11.4
Accept: */*
Host: mirror.soluzionisis.com
Connection: Keep-Alive
---request end---
HTTP request sent, awaiting response...
---response begin---
HTTP/1.1 200 OK
Date: Thu, 03 Dec 2009 10:50:42 GMT
Server: Apache/2.2.9 (Debian) DAV/2 SVN/1.5.1 PHP/5.2.11-0.dotdeb.1 with Suhosin-Patch mod_ruby/1.2.6 Ruby/1.8.7(2008-08-11) mod_ssl/2.2.9 OpenSSL/0.9.8g
Last-Modified: Sat, 03 Oct 2009 20:56:06 GMT
Accept-Ranges: bytes
Content-Length: 2483180
Vary: Accept-Encoding
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: application/x-gzip
---response end---
HTTP/1.1 200 OK
Date: Thu, 03 Dec 2009 10:50:42 GMT
Server: Apache/2.2.9 (Debian) DAV/2 SVN/1.5.1 PHP/5.2.11-0.dotdeb.1 with Suhosin-Patch mod_ruby/1.2.6 Ruby/1.8.7(2008-08-11) mod_ssl/2.2.9 OpenSSL/0.9.8g
Last-Modified: Sat, 03 Oct 2009 20:56:06 GMT
Accept-Ranges: bytes
Content-Length: 2483180
Vary: Accept-Encoding
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: application/x-gzip
Registered socket 4 for persistent reuse.
Length: 2483180 (2.4M) [application/x-gzip]
Saving to: `/dev/null'
100%[====================================================================================================================================>] 2,483,180 183K/s in 16s
2009-12-03 11:00:19 (154 KB/s) - `/dev/null' saved [2483180/2483180]
[henkp@minotaur]-:
> mirror.soluzionisis.com is corrupting .tar.gz files
> ---------------------------------------------------
>
> Key: INFRA-2175
> URL: https://issues.apache.org/jira/browse/INFRA-2175
> Project: Infrastructure
> Issue Type: Bug
> Security Level: public(Regular issues)
> Components: Mirrors
> Reporter: Mark Thomas
> Assignee: Mark Thomas
> Priority: Critical
>
> A report was received via security@a.o that archives obtained from mirror.soluzionisis.com did not match the MD5s from the ASF.
> It appears that mirror.soluzionisis.com is corrupting all mirrored .tar.gz files. The corruption appears to be limited to adding a duplicate directory at the top level of the archive.
> I will temporarily remove mirror.soluzionisis.com from the list of mirrors until this problem is corrected.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (INFRA-2175) mirror.soluzionisis.com is
corrupting .tar.gz files
Posted by "Mark Thomas (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/INFRA-2175?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12785300#action_12785300 ]
Mark Thomas commented on INFRA-2175:
------------------------------------
wget isn't sending an Accept-Encoding header. Most browsers do. Full example below.
I have already emailed the mirror owner asking them to fix this and they have ignored my request. I'd suggest making their removal from the mirror list permanent.
Mark
GET /apache/httpd/apache_1.3.41.tar.gz HTTP/1.1
Host: mirror.soluzionisis.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.2; en-GB; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-gb,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
HTTP/1.x 200 OK
Date: Thu, 03 Dec 2009 12:55:23 GMT
Server: Apache/2.2.9 (Debian) DAV/2 SVN/1.5.1 PHP/5.2.11-0.dotdeb.1 with Suhosin-Patch mod_ruby/1.2.6 Ruby/1.8.7(2008-08-11) mod_ssl/2.2.9 OpenSSL/0.9.8g
Last-Modified: Sat, 03 Oct 2009 20:56:06 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/x-gzip
> mirror.soluzionisis.com is corrupting .tar.gz files
> ---------------------------------------------------
>
> Key: INFRA-2175
> URL: https://issues.apache.org/jira/browse/INFRA-2175
> Project: Infrastructure
> Issue Type: Bug
> Security Level: public(Regular issues)
> Components: Mirrors
> Reporter: Mark Thomas
> Assignee: Mark Thomas
> Priority: Critical
>
> A report was received via security@a.o that archives obtained from mirror.soluzionisis.com did not match the MD5s from the ASF.
> It appears that mirror.soluzionisis.com is corrupting all mirrored .tar.gz files. The corruption appears to be limited to adding a duplicate directory at the top level of the archive.
> I will temporarily remove mirror.soluzionisis.com from the list of mirrors until this problem is corrected.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Reopened: (INFRA-2175) mirror.soluzionisis.com is corrupting
.tar.gz files
Posted by "Mark Thomas (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/INFRA-2175?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Mark Thomas reopened INFRA-2175:
--------------------------------
Just checked the mirror and the incorrect header is still present and MD5s and signatures for downloads via browsers are still broken.
> mirror.soluzionisis.com is corrupting .tar.gz files
> ---------------------------------------------------
>
> Key: INFRA-2175
> URL: https://issues.apache.org/jira/browse/INFRA-2175
> Project: Infrastructure
> Issue Type: Bug
> Security Level: public(Regular issues)
> Components: Mirrors
> Reporter: Mark Thomas
> Assignee: Mark Thomas
> Priority: Critical
>
> A report was received via security@a.o that archives obtained from mirror.soluzionisis.com did not match the MD5s from the ASF.
> It appears that mirror.soluzionisis.com is corrupting all mirrored .tar.gz files. The corruption appears to be limited to adding a duplicate directory at the top level of the archive.
> I will temporarily remove mirror.soluzionisis.com from the list of mirrors until this problem is corrected.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (INFRA-2175) mirror.soluzionisis.com is
corrupting .tar.gz files
Posted by "Mark Thomas (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/INFRA-2175?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12740190#action_12740190 ]
Mark Thomas commented on INFRA-2175:
------------------------------------
Hmm. The user that reported this and I seem to be seeing the same thing. I wonder it if is browser or location related. I'll take a look.
> mirror.soluzionisis.com is corrupting .tar.gz files
> ---------------------------------------------------
>
> Key: INFRA-2175
> URL: https://issues.apache.org/jira/browse/INFRA-2175
> Project: Infrastructure
> Issue Type: Bug
> Security Level: public(Regular issues)
> Components: Mirrors
> Reporter: Mark Thomas
> Assignee: Mark Thomas
> Priority: Critical
>
> A report was received via security@a.o that archives obtained from mirror.soluzionisis.com did not match the MD5s from the ASF.
> It appears that mirror.soluzionisis.com is corrupting all mirrored .tar.gz files. The corruption appears to be limited to adding a duplicate directory at the top level of the archive.
> I will temporarily remove mirror.soluzionisis.com from the list of mirrors until this problem is corrected.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (INFRA-2175) mirror.soluzionisis.com is
corrupting .tar.gz files
Posted by "Mark Thomas (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/INFRA-2175?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12740151#action_12740151 ]
Mark Thomas commented on INFRA-2175:
------------------------------------
That file is not fine. The PGP sig does not validate.
The internal structure (viewed with 7-zip) is:
apache_1.3.41.tar.gz/apache_1.3.41.tar/apache_1.3.41.tar/apache_1.3.41/
rather than:
apache_1.3.41.tar.gz/apache_1.3.41.tar/apache_1.3.41/
Downloading the same file from archive.a.o gives the expected result and the signature is valid.
> mirror.soluzionisis.com is corrupting .tar.gz files
> ---------------------------------------------------
>
> Key: INFRA-2175
> URL: https://issues.apache.org/jira/browse/INFRA-2175
> Project: Infrastructure
> Issue Type: Bug
> Security Level: public(Regular issues)
> Components: Mirrors
> Reporter: Mark Thomas
> Assignee: Mark Thomas
> Priority: Critical
>
> A report was received via security@a.o that archives obtained from mirror.soluzionisis.com did not match the MD5s from the ASF.
> It appears that mirror.soluzionisis.com is corrupting all mirrored .tar.gz files. The corruption appears to be limited to adding a duplicate directory at the top level of the archive.
> I will temporarily remove mirror.soluzionisis.com from the list of mirrors until this problem is corrected.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (INFRA-2175) mirror.soluzionisis.com is
corrupting .tar.gz files
Posted by "Mark Thomas (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/INFRA-2175?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12740288#action_12740288 ]
Mark Thomas commented on INFRA-2175:
------------------------------------
Problem solved. The mirror is sending the wrong headers. It is sending:
HTTP/1.x 200 OK
Date: Thu, 06 Aug 2009 22:27:04 GMT
Server: Apache/2.2.9 (Debian) DAV/2 SVN/1.5.1 PHP/5.2.10-0.dotdeb.1 with Suhosin-Patch mod_ruby/1.2.6 Ruby/1.8.7(2008-08-11) mod_ssl/2.2.9 OpenSSL/0.9.8g
Last-Modified: Thu, 17 Jan 2008 14:58:03 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/x-gzip
The Content-Encoding header is not correct and should not be present on the response. It is confusing the browsers and causing the corruption.
> mirror.soluzionisis.com is corrupting .tar.gz files
> ---------------------------------------------------
>
> Key: INFRA-2175
> URL: https://issues.apache.org/jira/browse/INFRA-2175
> Project: Infrastructure
> Issue Type: Bug
> Security Level: public(Regular issues)
> Components: Mirrors
> Reporter: Mark Thomas
> Assignee: Mark Thomas
> Priority: Critical
>
> A report was received via security@a.o that archives obtained from mirror.soluzionisis.com did not match the MD5s from the ASF.
> It appears that mirror.soluzionisis.com is corrupting all mirrored .tar.gz files. The corruption appears to be limited to adding a duplicate directory at the top level of the archive.
> I will temporarily remove mirror.soluzionisis.com from the list of mirrors until this problem is corrected.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (INFRA-2175) mirror.soluzionisis.com is
corrupting .tar.gz files
Posted by "Henk Penning (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/INFRA-2175?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12785317#action_12785317 ]
Henk Penning commented on INFRA-2175:
-------------------------------------
Ok ; the mirror is removed ; I suggest closing this ticket.
HPP
> mirror.soluzionisis.com is corrupting .tar.gz files
> ---------------------------------------------------
>
> Key: INFRA-2175
> URL: https://issues.apache.org/jira/browse/INFRA-2175
> Project: Infrastructure
> Issue Type: Bug
> Security Level: public(Regular issues)
> Components: Mirrors
> Reporter: Mark Thomas
> Assignee: Mark Thomas
> Priority: Critical
>
> A report was received via security@a.o that archives obtained from mirror.soluzionisis.com did not match the MD5s from the ASF.
> It appears that mirror.soluzionisis.com is corrupting all mirrored .tar.gz files. The corruption appears to be limited to adding a duplicate directory at the top level of the archive.
> I will temporarily remove mirror.soluzionisis.com from the list of mirrors until this problem is corrected.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.