RE: pkg/60195: libfetch-2.40nb5 wrong PLIST

[Marcin Gondek <drixter%e-utp.net@localhost>]

Hi Thomas,

If something more I can check, let me know.

No really, only to use wget and:

PKG_OPTIONS.vaultwarden=pgsql
PKG_OPTIONS.mc=ncurses
PKG_OPTIONS.apcupsd=cgi
PKG_OPTIONS.goaccess=-ssl
PKG_OPTIONS.librsvg=-doc
RUBY_VERSION_DEFAULT=34
PKG_DEFAULT_OPTIONS=-x11 -xcb
PKG_OPTIONS.libcups=-kerberos


[NetBSD-root@devil:/usr/pkgsrc/net/libfetch]$ make clean
===> Cleaning for libfetch-2.40nb5
[NetBSD-root@devil:/usr/pkgsrc/net/libfetch]$ make
===> Installing dependencies for libfetch-2.40nb5
==========================================================================
The supported build options for libfetch are:

        inet6 openssl

The currently selected options are:

        inet6 openssl

You can select which build options to use by setting PKG_DEFAULT_OPTIONS
or the following variable.  Its current value is shown:

        PKG_OPTIONS.libfetch (not defined)

==========================================================================
==========================================================================
The following variables will affect the build process of this package,
libfetch-2.40nb5.  Their current value is shown below:

        * SSLBASE = /usr
        * SSLCERTBUNDLE (not defined)
        * SSLCERTS = /etc/openssl/certs
        * SSLDIR = /etc/openssl
        * SSLKEYS = /etc/openssl/private

You may want to abort the process now with CTRL-C and change the value
of variables in the first group before continuing.  Be sure to run
`/usr/bin/make clean' after the changes.
==========================================================================
=> Tool dependency mktools-[0-9]*: found mktools-20250213
=> Tool dependency cwrappers>=20150314: found cwrappers-20220403
=> Tool dependency checkperms>=1.1: found checkperms-1.12
=> Build dependency libnbcompat>=20221013: found libnbcompat-20251029
===> Checking for vulnerabilities in libfetch-2.40nb5
Package libfetch-2.40nb5 has a information-disclosure vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2021-36159
===> Overriding tools for libfetch-2.40nb5
===> Extracting for libfetch-2.40nb5
/bin/cp -r /srv/NetBSD/pkgsrc/net/libfetch/files /usr/work/amd64/net/libfetch/work/libfetch-2.40
/usr/bin/touch /usr/work/amd64/net/libfetch/work/libfetch-2.40/fetch.cat3
=> Substituting "pc" in fetch.pc.in
===> Patching for libfetch-2.40nb5
===> Creating toolchain wrappers for libfetch-2.40nb5
===> Configuring for libfetch-2.40nb5
=> Checking for portability problems in extracted files
===> Building for libfetch-2.40nb5
--- ftperr.h ---
--- httperr.h ---
--- fetch.pc ---
--- ftperr.h ---
sh /usr/work/amd64/net/libfetch/work/libfetch-2.40/errlist.sh ftp_errlist FTP  /usr/work/amd64/net/libfetch/work/libfetch-2.40/ftp.errors > ftperr.h
--- httperr.h ---
sh /usr/work/amd64/net/libfetch/work/libfetch-2.40/errlist.sh http_errlist HTTP  /usr/work/amd64/net/libfetch/work/libfetch-2.40/http.errors > httperr.h
--- fetch.pc ---
/usr/bin/sed  -e "s,@libdir@,/usr/pkg/lib,"  -e "s,@includedir@,/usr/pkg/include,"  -e "s,@requires-private@,libssl libcrypto,"  < fetch.pc.in > fetch.pc
--- fetch.o ---
--- common.o ---
--- ftp.o ---
--- http.o ---
--- file.o ---
--- common.d ---
--- fetch.d ---
--- file.d ---
--- ftp.d ---
--- http.d ---
--- fetch.o ---
#   compile  libfetch-2.40/fetch.o
gcc -O2 -I/usr/include -DHAVE_NBCOMPAT_H=1 -I/usr/pkg/include   -std=gnu11    -Wall -Wstrict-prototypes -Wmissing-prototypes -Wpointer-arith -Wno-sign-compare  -Wsystem-headers   -Wno-traditional  -Wreturn-type -Wswitch -Wshadow -Wcast-qual -Wwrite-strings -Wextra -Wno-unused-parameter -Wno-sign-compare -Wsign-compare -Wformat=2  -Wno-format-zero-length     -fPIE     -I/usr/include -DHAVE_NBCOMPAT_H=1 -I/usr/pkg/include -I. -D_LARGEFILE_SOURCE -D_LARGE_FILES -D_FILE_OFFSET_BITS=64 -DINET6 -DWITH_SSL -DFTP_COMBINE_CWDS  -c    fetch.c -o fetch.o.o
--- common.o ---
#   compile  libfetch-2.40/common.o
gcc -O2 -I/usr/include -DHAVE_NBCOMPAT_H=1 -I/usr/pkg/include   -std=gnu11    -Wall -Wstrict-prototypes -Wmissing-prototypes -Wpointer-arith -Wno-sign-compare  -Wsystem-headers   -Wno-traditional  -Wreturn-type -Wswitch -Wshadow -Wcast-qual -Wwrite-strings -Wextra -Wno-unused-parameter -Wno-sign-compare -Wsign-compare -Wformat=2  -Wno-format-zero-length     -fPIE     -I/usr/include -DHAVE_NBCOMPAT_H=1 -I/usr/pkg/include -I. -D_LARGEFILE_SOURCE -D_LARGE_FILES -D_FILE_OFFSET_BITS=64 -DINET6 -DWITH_SSL -DFTP_COMBINE_CWDS  -c    common.c -o common.o.o
--- ftp.o ---
#   compile  libfetch-2.40/ftp.o
gcc -O2 -I/usr/include -DHAVE_NBCOMPAT_H=1 -I/usr/pkg/include   -std=gnu11    -Wall -Wstrict-prototypes -Wmissing-prototypes -Wpointer-arith -Wno-sign-compare  -Wsystem-headers   -Wno-traditional  -Wreturn-type -Wswitch -Wshadow -Wcast-qual -Wwrite-strings -Wextra -Wno-unused-parameter -Wno-sign-compare -Wsign-compare -Wformat=2  -Wno-format-zero-length     -fPIE     -I/usr/include -DHAVE_NBCOMPAT_H=1 -I/usr/pkg/include -I. -D_LARGEFILE_SOURCE -D_LARGE_FILES -D_FILE_OFFSET_BITS=64 -DINET6 -DWITH_SSL -DFTP_COMBINE_CWDS  -c    ftp.c -o ftp.o.o
--- http.o ---
#   compile  libfetch-2.40/http.o
gcc -O2 -I/usr/include -DHAVE_NBCOMPAT_H=1 -I/usr/pkg/include   -std=gnu11    -Wall -Wstrict-prototypes -Wmissing-prototypes -Wpointer-arith -Wno-sign-compare  -Wsystem-headers   -Wno-traditional  -Wreturn-type -Wswitch -Wshadow -Wcast-qual -Wwrite-strings -Wextra -Wno-unused-parameter -Wno-sign-compare -Wsign-compare -Wformat=2  -Wno-format-zero-length     -fPIE     -I/usr/include -DHAVE_NBCOMPAT_H=1 -I/usr/pkg/include -I. -D_LARGEFILE_SOURCE -D_LARGE_FILES -D_FILE_OFFSET_BITS=64 -DINET6 -DWITH_SSL -DFTP_COMBINE_CWDS  -c    http.c -o http.o.o
--- file.o ---
#   compile  libfetch-2.40/file.o
gcc -O2 -I/usr/include -DHAVE_NBCOMPAT_H=1 -I/usr/pkg/include   -std=gnu11    -Wall -Wstrict-prototypes -Wmissing-prototypes -Wpointer-arith -Wno-sign-compare  -Wsystem-headers   -Wno-traditional  -Wreturn-type -Wswitch -Wshadow -Wcast-qual -Wwrite-strings -Wextra -Wno-unused-parameter -Wno-sign-compare -Wsign-compare -Wformat=2  -Wno-format-zero-length     -fPIE     -I/usr/include -DHAVE_NBCOMPAT_H=1 -I/usr/pkg/include -I. -D_LARGEFILE_SOURCE -D_LARGE_FILES -D_FILE_OFFSET_BITS=64 -DINET6 -DWITH_SSL -DFTP_COMBINE_CWDS  -c    file.c -o file.o.o
--- common.d ---
#    create  libfetch-2.40/common.d
mkdep -f common.d.tmp  --   -std=gnu11 -I/usr/include -DHAVE_NBCOMPAT_H=1 -I/usr/pkg/include -Wall -Wstrict-prototypes -Wmissing-prototypes -Wpointer-arith -Wno-sign-compare -Wsystem-headers -Wno-traditional -Wreturn-type -Wswitch -Wshadow -Wcast-qual -Wwrite-strings -Wextra -Wno-unused-parameter -Wno-sign-compare -Wsign-compare -Wformat=2 -Wno-format-zero-length  -I/usr/include -DHAVE_NBCOMPAT_H=1 -I/usr/pkg/include -I. -D_LARGEFILE_SOURCE -D_LARGE_FILES -D_FILE_OFFSET_BITS=64 -DINET6 -DWITH_SSL -DFTP_COMBINE_CWDS     common.c &&  mv -f common.d.tmp common.d
--- fetch.d ---
#    create  libfetch-2.40/fetch.d
mkdep -f fetch.d.tmp  --   -std=gnu11 -I/usr/include -DHAVE_NBCOMPAT_H=1 -I/usr/pkg/include -Wall -Wstrict-prototypes -Wmissing-prototypes -Wpointer-arith -Wno-sign-compare -Wsystem-headers -Wno-traditional -Wreturn-type -Wswitch -Wshadow -Wcast-qual -Wwrite-strings -Wextra -Wno-unused-parameter -Wno-sign-compare -Wsign-compare -Wformat=2 -Wno-format-zero-length  -I/usr/include -DHAVE_NBCOMPAT_H=1 -I/usr/pkg/include -I. -D_LARGEFILE_SOURCE -D_LARGE_FILES -D_FILE_OFFSET_BITS=64 -DINET6 -DWITH_SSL -DFTP_COMBINE_CWDS     fetch.c &&  mv -f fetch.d.tmp fetch.d
--- file.d ---
#    create  libfetch-2.40/file.d
mkdep -f file.d.tmp  --   -std=gnu11 -I/usr/include -DHAVE_NBCOMPAT_H=1 -I/usr/pkg/include -Wall -Wstrict-prototypes -Wmissing-prototypes -Wpointer-arith -Wno-sign-compare -Wsystem-headers -Wno-traditional -Wreturn-type -Wswitch -Wshadow -Wcast-qual -Wwrite-strings -Wextra -Wno-unused-parameter -Wno-sign-compare -Wsign-compare -Wformat=2 -Wno-format-zero-length  -I/usr/include -DHAVE_NBCOMPAT_H=1 -I/usr/pkg/include -I. -D_LARGEFILE_SOURCE -D_LARGE_FILES -D_FILE_OFFSET_BITS=64 -DINET6 -DWITH_SSL -DFTP_COMBINE_CWDS     file.c &&  mv -f file.d.tmp file.d
--- ftp.d ---
#    create  libfetch-2.40/ftp.d
mkdep -f ftp.d.tmp  --   -std=gnu11 -I/usr/include -DHAVE_NBCOMPAT_H=1 -I/usr/pkg/include -Wall -Wstrict-prototypes -Wmissing-prototypes -Wpointer-arith -Wno-sign-compare -Wsystem-headers -Wno-traditional -Wreturn-type -Wswitch -Wshadow -Wcast-qual -Wwrite-strings -Wextra -Wno-unused-parameter -Wno-sign-compare -Wsign-compare -Wformat=2 -Wno-format-zero-length  -I/usr/include -DHAVE_NBCOMPAT_H=1 -I/usr/pkg/include -I. -D_LARGEFILE_SOURCE -D_LARGE_FILES -D_FILE_OFFSET_BITS=64 -DINET6 -DWITH_SSL -DFTP_COMBINE_CWDS     ftp.c &&  mv -f ftp.d.tmp ftp.d
--- http.d ---
#    create  libfetch-2.40/http.d
mkdep -f http.d.tmp  --   -std=gnu11 -I/usr/include -DHAVE_NBCOMPAT_H=1 -I/usr/pkg/include -Wall -Wstrict-prototypes -Wmissing-prototypes -Wpointer-arith -Wno-sign-compare -Wsystem-headers -Wno-traditional -Wreturn-type -Wswitch -Wshadow -Wcast-qual -Wwrite-strings -Wextra -Wno-unused-parameter -Wno-sign-compare -Wsign-compare -Wformat=2 -Wno-format-zero-length  -I/usr/include -DHAVE_NBCOMPAT_H=1 -I/usr/pkg/include -I. -D_LARGEFILE_SOURCE -D_LARGE_FILES -D_FILE_OFFSET_BITS=64 -DINET6 -DWITH_SSL -DFTP_COMBINE_CWDS     http.c &&  mv -f http.d.tmp http.d
--- .depend ---
#    create  libfetch-2.40/.depend
rm -f .depend
mkdep -s .o\ .po\ .pico\ .go\ .ln\ .d -d -f .depend common.d fetch.d file.d ftp.d http.d
--- file.o ---
ctfconvert -g -L VERSION -o file.o file.o.o && rm -f file.o.o
objcopy -x  file.o
--- fetch.o ---
ctfconvert -g -L VERSION -o fetch.o fetch.o.o && rm -f fetch.o.o
objcopy -x  fetch.o
--- common.o ---
ctfconvert -g -L VERSION -o common.o common.o.o && rm -f common.o.o
objcopy -x  common.o
--- ftp.o ---
ctfconvert -g -L VERSION -o ftp.o ftp.o.o && rm -f ftp.o.o
objcopy -x  ftp.o
--- http.o ---
ctfconvert -g -L VERSION -o http.o http.o.o && rm -f http.o.o
objcopy -x  http.o
--- libfetch.a ---
#     build  libfetch-2.40/libfetch.a
ar crs libfetch.a $(NM=nm lorder fetch.o common.o ftp.o http.o file.o | tsort -q)
[NetBSD-root@devil:/usr/pkgsrc/net/libfetch]$ make replace
===> Checking for vulnerabilities in libfetch-2.40nb5
Package libfetch-2.40nb5 has a information-disclosure vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2021-36159
===> Installing for libfetch-2.40nb5
=> Generating pre-install file lists
=> Creating installation directories
#   install  /usr/work/amd64/net/libfetch/work/.destdir/usr/pkg/lib/libfetch.a
/usr/bin/install  -c  -r -o root -g wheel -m 644  -a "ranlib -t" libfetch.a /usr/work/amd64/net/libfetch/work/.destdir/usr/pkg/lib/libfetch.a
#   install  /usr/work/amd64/net/libfetch/work/.destdir/usr/pkg/man/man3/fetch.3
/usr/bin/install  -c  -r -o root -g wheel -m 644  fetch.3 /usr/work/amd64/net/libfetch/work/.destdir/usr/pkg/man/man3/fetch.3
#   install  /usr/work/amd64/net/libfetch/work/.destdir/usr/pkg/man/cat3/fetch.0
/usr/bin/install  -c  -r -o root -g wheel -m 644  fetch.cat3 /usr/work/amd64/net/libfetch/work/.destdir/usr/pkg/man/cat3/fetch.0
#   install  /usr/work/amd64/net/libfetch/work/.destdir/usr/pkg/lib/pkgconfig/fetch.pc
/usr/bin/install  -c  -r  -o root  -g wheel  -m 644   fetch.pc /usr/work/amd64/net/libfetch/work/.destdir/usr/pkg/lib/pkgconfig/fetch.pc
#   install  /usr/work/amd64/net/libfetch/work/.destdir/usr/pkg/include/fetch.h
/usr/bin/install  -c  -r -o root -g wheel  -m 644 fetch.h /usr/work/amd64/net/libfetch/work/.destdir/usr/pkg/include/fetch.h
=> Automatic manual page handling
=> Generating post-install file lists
=> Checking file-check results for libfetch-2.40nb5
ERROR: ************************************************************
ERROR: The following files are in /usr/work/amd64/net/libfetch/work/.destdir/usr/pkg but not in the PLIST:
ERROR:         /usr/work/amd64/net/libfetch/work/.destdir/usr/pkg/man/cat3/fetch.0
*** Error code 1

Stop.
make[1]: stopped making "replace" in /srv/NetBSD/pkgsrc/net/libfetch
*** Error code 1

Stop.
make: stopped making "replace" in /usr/pkgsrc/net/libfetch


Thanks,

--
Marcin Gondek / Drixter
http://fido.e-utp.net/
AS56662

-----Original Message-----
From: pkgsrc-bugs-owner%NetBSD.org@localhost <pkgsrc-bugs-owner%NetBSD.org@localhost> On Behalf Of Thomas Klausner via gnats
Sent: Thursday, April 16, 2026 9:20 PM
To: pkg-manager%netbsd.org@localhost; gnats-admin%netbsd.org@localhost; pkgsrc-bugs%netbsd.org@localhost; Marcin Gondek <drixter%e-utp.net@localhost>
Subject: Re: pkg/60195: libfetch-2.40nb5 wrong PLIST

The following reply was made to PR pkg/60195; it has been noted by GNATS.

From: Thomas Klausner <wiz%netbsd.org@localhost>
To: NetBSD bugtracking <gnats-bugs%netbsd.org@localhost>
Cc: 
Subject: Re: pkg/60195: libfetch-2.40nb5 wrong PLIST
Date: Thu, 16 Apr 2026 21:17:35 +0200

 This doesn't happen on my system.
 
 This package use /usr/share/mk, do you set anything in particular in your  /etc/mk.conf that could influence this?
  Thomas