[ Reason ]
I would like to backport wcurl into stable, wcurl is a script which we ship as
part of the curl package on unstable and testing.

wcurl is a command line tool which lets you download URLs without having to
remember any parameters.

https://samueloph.dev/blog/announcing-wcurl-a-curl-wrapper-to-download-files/

https://curl.se/wcurl/

[ Impact ]
Users need to use wcurl from bookworm-backports or wait until the next stable
release.

[ Tests ]
wcurl has unit testing and is shipped and tested in other OSes.

[ Risks ]
wcurl is a POSIX-compliant shell script with 318 lines of code including
comments.

There's a risk here if the user already installed something at /usr/bin/wcurl,
but if that's the case, it's very likely they manually installed wcurl itself.

[ Checklist ]
  [x] *all* changes are documented in the d/changelog
  [x] I reviewed all changes and I approve them
  [x] attach debdiff against the package in (old)stable
  [x] the issue is verified as fixed in unstable

[ Changes ]
Install wcurl and wcurl.1 on the curl package.

[ Other info ]
This is not a bugfix, so I will understand if the release team rejects this. I
wanted to at least create the request as I believe it's a good change for stable
users.

Hi Samuel,

Can you include as well the fix for the no-DSA CVE-2024-9681?

Regards,
Salvatore

Hello Salvatore,
#1092048
https://bugs.debian.org/1092048

We split the changes to make it easier for the release team to review and avoid
more work in case only the CVE fix is approved.

We will also cut another bookworm-pu for CVE-2024-11053, but I don't have a
timeline for that and so I would like the release team to approve #1091888 and
#1092048 in the meantime.

Thanks,

Hi Samuel,

Yes I realized afterwards (after writing and sending the mail) that
you aimed to have two requests for this purpose, so all fine.

Thank you!

Regards,
Salvatore

Hi,

This is a NACK, sorry. I understand your motiviation but this is a change
suitable for backports, not proposed-updates.

Thanks,