CVS commit: [pkgsrc-2026Q3] pkgsrc/net/libfetch

["Maya Rashish" <maya%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   maya
Date:           Tue Oct 20 18:13:48 UTC 2026

Modified Files:
        pkgsrc/net/libfetch [pkgsrc-2026Q3]: Makefile
        pkgsrc/net/libfetch/files [pkgsrc-2026Q3]: common.c

Log Message:
Pullup ticket #7299 - requested by riastradh
net/libfetch: Security fix

Revisions pulled up:
- net/libfetch/Makefile                                         1.71
- net/libfetch/files/common.c                                   1.39

---
   Module Name:    pkgsrc
   Committed By:   riastradh
   Date:           Tue Oct 20 17:43:31 UTC 2026

   Modified Files:
           pkgsrc/net/libfetch: Makefile
           pkgsrc/net/libfetch/files: common.c

   Log Message:
   libfetch: Fix missing SSL_set1_host call.

   PR lib/60878: libfetch: missing peer hostname check


To generate a diff of this commit:
cvs rdiff -u -r1.70 -r1.70.4.1 pkgsrc/net/libfetch/Makefile
cvs rdiff -u -r1.38 -r1.38.4.1 pkgsrc/net/libfetch/files/common.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/libfetch/Makefile
diff -u pkgsrc/net/libfetch/Makefile:1.70 pkgsrc/net/libfetch/Makefile:1.70.4.1
--- pkgsrc/net/libfetch/Makefile:1.70   Thu Apr 16 10:16:29 2026
+++ pkgsrc/net/libfetch/Makefile        Tue Oct 20 18:13:48 2026
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.70 2026/04/16 10:16:29 wiz Exp $
+# $NetBSD: Makefile,v 1.70.4.1 2026/10/20 18:13:48 maya Exp $
 
 DISTNAME=      libfetch-2.40
-PKGREVISION=   5
+PKGREVISION=   6
 CATEGORIES=    net
 MASTER_SITES=  # empty
 DISTFILES=     # empty

Index: pkgsrc/net/libfetch/files/common.c
diff -u pkgsrc/net/libfetch/files/common.c:1.38 pkgsrc/net/libfetch/files/common.c:1.38.4.1
--- pkgsrc/net/libfetch/files/common.c:1.38     Thu Apr 16 10:34:47 2026
+++ pkgsrc/net/libfetch/files/common.c  Tue Oct 20 18:13:48 2026
@@ -1,4 +1,4 @@
-/*     $NetBSD: common.c,v 1.38 2026/04/16 10:34:47 wiz Exp $  */
+/*     $NetBSD: common.c,v 1.38.4.1 2026/10/20 18:13:48 maya Exp $     */
 /*-
  * Copyright (c) 1998-2004 Dag-Erling Coïdan Smørgrav
  * Copyright (c) 2008, 2010 Joerg Sonnenberger <joerg%NetBSD.org@localhost>
@@ -473,6 +473,7 @@ fetch_ssl(conn_t *conn, const struct url
        }
        conn->buf_events = 0;
        SSL_set_fd(conn->ssl, conn->sd);
+       SSL_set1_host(conn->ssl, URL->host);
 #if OPENSSL_VERSION_NUMBER >= 0x0090806fL && !defined(OPENSSL_NO_TLSEXT)
        if (!SSL_set_tlsext_host_name(conn->ssl, (char *)(uintptr_t)URL->host)) {
                fprintf(stderr,