>Number:         34140
>Category:       pkg
>Synopsis:       pkgsrc/devel/atk: checksum for outdated/wrong version of atk-1.12.1.tar.bz2
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    pkg-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Fri Aug 04 10:05:00 +0000 2006
>Originator:     Karl Skibinski
>Release:        NetBSD 3.0
>Organization:
private
>Environment:
NetBSD vierzwo 3.0 NetBSD 3.0 (GENERIC) #0: Mon Dec 19 01:04:02 UTC 2005  builds@works.netbsd.org:/home/builds/ab/netbsd-3-0-RELEASE/i386/200512182024Z-obj/home/builds/ab/netbsd-3-0-RELEASE/src/sys/arch/i386/compile/GENERIC i386
>Description:
The distinfo file of pkgsrc/devel/atk (updated from cvs this morning) has the following content:

$NetBSD: distinfo,v 1.25 2006/07/12 13:47:10 wiz Exp $

SHA1 (atk-1.12.1.tar.bz2) = f06da6193784760fee7c8b9a620ffa2c98885d8b
RMD160 (atk-1.12.1.tar.bz2) = e57f7e5424cd7852208ecf8dc6575d9311ec3818
Size (atk-1.12.1.tar.bz2) = 632397 bytes

This checksums and size correspond to a version of atk-1.12.1.tar.bz2 present on the NetBSD ftp-Servers which differs from the versions found everywhere else, including the version on the official(?) download site

http://ftp.gnome.org/pub/gnome/sources/atk/1.12/

The in pkgsrc referenced version seems to be a preliminary version of the distribution file. The NEWS file within lacks any information about the changes for 1.12.1 but ends at version 1.12.0
>How-To-Repeat:
Download

http://ftp.gnome.org/pub/gnome/sources/atk/1.12/atk-1.12.1.tar.bz2

and compare to

http://ftp.fi.NetBSD.org/pub/NetBSD/packages/distfiles/atk-1.12.1.tar.bz2

>Fix:
Delete preliminary versions of atk-1.12.1.tar.bz2 ftp servers.

Correct the checksums in pkgsrc/devel/atk/distinfo