Hi Samuel, On Thu, Jan 02, 2025 at 01:17:38AM +0100, Samuel Henrique wrote: > Package: release.debian.org > Control: affects -1 + src:curl > X-Debbugs-Cc: c...@packages.debian.org > User: release.debian....@packages.debian.org > Usertags: pu > Tags: bookworm > Severity: normal > > [ Reason ] > I would like to backport wcurl into stable, wcurl is a script which we ship as > part of the curl package on unstable and testing. > > wcurl is a command line tool which lets you download URLs without having to > remember any parameters. > > https://samueloph.dev/blog/announcing-wcurl-a-curl-wrapper-to-download-files/ > > https://curl.se/wcurl/ > > [ Impact ] > Users need to use wcurl from bookworm-backports or wait until the next stable > release. > > [ Tests ] > wcurl has unit testing and is shipped and tested in other OSes. > > [ Risks ] > wcurl is a POSIX-compliant shell script with 318 lines of code including > comments. > > There's a risk here if the user already installed something at /usr/bin/wcurl, > but if that's the case, it's very likely they manually installed wcurl itself. > > [ Checklist ] > [x] *all* changes are documented in the d/changelog > [x] I reviewed all changes and I approve them > [x] attach debdiff against the package in (old)stable > [x] the issue is verified as fixed in unstable > > [ Changes ] > Install wcurl and wcurl.1 on the curl package. > > [ Other info ] > This is not a bugfix, so I will understand if the release team rejects this. I > wanted to at least create the request as I believe it's a good change for > stable > users.
Can you include as well the fix for the no-DSA CVE-2024-9681? Regards, Salvatore
