Bug#1000458: bullseye-pu: package wget/1.21-1+deb11u1

[plugwash]

Package: release.debian.org
Severity: normal
Tags: bullseye
User: release.d...@packages.debian.org
Usertags: pu

When downloading a file greater than 2GB on a 32-bit system wget on bullseye
will truncate it to 2GB. No error is reported, the length of the file is simply
reported as less than it's true length. This was reported to me by raspberry pi
staff, but I can reproduce it in a Debian i386 environment, so it's not
raspberry pi, raspbian or arm specific.

I confirmed that the issue did not affect bookworm and after some searching
found the upstream commit and bug report that fix it.
https://gitlab.com/gnuwget/wget/-/commit/90631a6fe54eabd9c80ede5c70bc916719e76cfe

I have rated this issue as important, being unable to download large files (for
example OS images) is a significant restriction on the usefulness of wget. There
is a possible argument that it deserves grave severity based on "non-serious
data loss" (for example if someone used wget to copy a file to another system
before deleting the original) but I think that argument is tenuous, so I decided
to stick with important.

I filed this as bug 999744 in Debian on the 15th November and have not received
a maintainer response, hence I am starting the PU process myself. I have tested
the fix in raspbian bullseye and also in a debian bullsyeye i386 chroot. I have
also released the fix to raspbian bullseye.

[Adam D. Barratt]

Control: tags -1 + confirmed d-i

On Tue, 2021-11-23 at 15:43 +0000, plugwash wrote:
> When downloading a file greater than 2GB on a 32-bit system wget on
> bullseye
> will truncate it to 2GB. No error is reported, the length of the file
> is simply
> reported as less than it's true length. This was reported to me by
> raspberry pi
> staff, but I can reproduce it in a Debian i386 environment, so it's
> not
> raspberry pi, raspbian or arm specific.

+wget (1.21-1+deb11u1) bullseye-staging; urgency=medium

The distribution should simply by "bullseye".

This looks OK to me, but will need a di-ack, as wget builds a udeb.
Tagging and CCing appropriately.

Regards,

Adam

[Cyril Brulebois]

Adam D. Barratt <ad...@adam-barratt.org.uk> (2021-12-03):

> This looks OK to me, but will need a di-ack, as wget builds a udeb.
> Tagging and CCing appropriately.

LGTM, ta.


Cheers,
--
Cyril Brulebois (ki...@debian.org) <https://debamax.com/>
D-I release manager -- Release team member -- Freelance Consultant

[Adam D Barratt]

package release.debian.org
tags 1000458 = bullseye pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye.

Thanks for your contribution!

Upload details
==============

Package: wget
Version: 1.21-1+deb11u1

Explanation: fix downloads over 2GB on 32-bit systems