Thursday, May 18, 2006

Another Failure

Sourceforge's CVS Service has another Partial Outage, which was failing disk for some projects starting with the letters g, i and k and anonymous pserver projects starting with a and p has failed (taken from the Site Status of It has generated a new key for SSH Authenticating also and people are asking this (including me), because we suspect that there was a man-in-the-middle attack. Up to now, there hasn't been any further announcements about this, so people will keep asking about it. Let's hope they will update the Site Status as soon as possible to clarify this.

This problem has been fixed as it was stated in Site Status:

( 2006-05-17 12:04:02 - Project CVS Service ) As of 2006-05-17 at 12:00 Pacific we synchronized the SSH keys on all of the CVS hosts. This will cause SSH key mismatch errors for most projects. Please reconfirm the new SSH key against site doc G04 ( and then accept the new key, if it matches per normal procedure. We apologize for the inconvenience, but this should be a one-time event and make future CVS infrastructure changes more seamless.

( 2006-05-17 12:01:45 - Project CVS Service ) As of 2006-05-17 at 12:00 Pacific, all CVS hosts are back up and fully operational. The disk issue on one of the hosts forced us to swap it out for a backup host to send the hardware back to the vendor for further troubleshooting to identify the cause of the continual hardware issues with the systems. As we had to switch to the alternate host, a very small number of checkins may not be present on the host. We recommend that affected users make a fresh checkout, copy their working copy on top of the fresh checkout, and then commit those changes back. If you didn't make any changes in the 20 minutes or so prior to the outage, this should be unnecessary.