Package: 0install-core Version: 2.12.3-1 Severity: important Dear Maintainer,
When downloading from downloads.sourceforge.net (which hosts many of the 0install tools themselves), libcurl now uses HTTP/2 for the download. This causes the Location header to be reported in lower-case, which 0install fails to handle. Example: $ 0install run http://0install.net/tools/0template.xml warning: Download failed: Downloaded archive has incorrect size. URL: https://downloads.sourceforge.net/project/zero-install/0template/0.6/0template-0.6.tar.bz2 Expected: 17585 bytes Received: 371 bytes ... downloading implementation http://0install.net/tools/0template.xml 0.6 (id=sha1new=03a80899236770b139c3c4be1d2255e4644a1a32) Downloaded archive has incorrect size. URL: https://downloads.sourceforge.net/project/zero-install/0install/2.3.5/0install-2.3.5.tar.bz2 Expected: 466037 bytes Received: 375 bytes ... downloading implementation http://0install.net/2007/interfaces/ZeroInstall.xml 2.3.5 (id=sha1new=6f4892dfcb947a03dd3b89f04b2d0650e871a060) This bug was originally reported by Nick Sabalausky at https://github.com/0install/0template/issues/14 -- System Information: Debian Release: 10.0 APT prefers unstable APT policy: (500, 'unstable') Architecture: amd64 (x86_64) Kernel: Linux 4.14.103-1.pvops.qubes.x86_64 (SMP w/4 CPU cores) Kernel taint flags: TAINT_OOT_MODULE Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE=C (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: unable to detect Versions of packages 0install-core depends on: ii adduser 3.118 ii bzip2 1.0.6-9 ii ca-certificates 20190110 ii gnupg 2.2.13-1 ii libc6 2.28-8 ii libcurl3-gnutls 7.64.0-2 ii libev4 1:4.25-1 ii xdg-utils 1.1.3-1 Versions of packages 0install-core recommends: pn packagekit <none> pn unzip <none> ii xz-utils [lzma] 5.2.4-1 Versions of packages 0install-core suggests: pn 0install <none> pn cabextract <none> pn rpm2cpio <none> -- no debconf information

