Bug#749142: RFS: gnustep-base/1.24.6-1 [RC] [security]

[Yavor Doganov <yavor@gnu.org>]

Package: sponsorship-requests
Severity: important
Control: block -1 with 748969

Dear mentors,

I am looking for a sponsor for my package "gnustep-base".
It builds these binary packages:

gnustep-base-common - GNUstep Base library - common files
gnustep-base-doc - Documentation for the GNUstep Base Library
gnustep-base-examples - Examples using the GNUstep Base Library
gnustep-base-runtime - GNUstep Base library - daemons and tools
libgnustep-base-dev - GNUstep Base header files and development libraries
libgnustep-base1.24 - GNUstep Base library
libgnustep-base1.24-dbg - GNUstep Base library - debugging symbols

To access further information about this package, please visit the
following URL:

  http://mentors.debian.net/package/gnustep-base

Alternatively, one can download the package with dget using this command:

  dget -x http://mentors.debian.net/debian/pool/main/g/gnustep-base/gnustep-base_1.24.6-1.dsc

Changes since the last upload:

gnustep-base (1.24.6-1) experimental; urgency=low

  * New upstream release:
    - Fixes FTBFS with recent libxml2 (Closes: #738347).
    - GNUSTEP_USER_DIRECTORY is no longer created unconditionally (Closes:
      #720190).
  * Ack NMUs; thanks Matthias Klose, gregor herrmann and Pino Toscano.
  * debian/patches/libobjc4.patch:
  * debian/patches/recent-libxml2-fix.patch: Remove; fixed upstream.
  * debian/patches/kfreebsd-fake-main.patch:
  * debian/patches/avoid-nsl-linkage.patch:
  * debian/patches/maxsymlinks.diff: Refresh.
  * debian/patches/autoreconf.patch: Regenerate.
  * debian/patches/texinfo5.diff: Add description.
  * debian/patches/hurd-ignore-NSURL-test.diff: Disable for now.
  * debian/patches/manpage-fixes.patch: Fix two more issues reported by
    lintian.
  * debian/patches/CVE-2014-2980.patch: New patch from upstream, fixes
    gdomap user security hole (Closes: #745470).
  * debian/patches/use-local-DTDs.patch: New; use local DTDs to avoid
    annoying warnings from autogsdoc when built in a chroot.  Thanks
    Svante Signell (Closes: #736587).
  * debian/patches/series: Update.
  * debian/rules (build-arch): Remove dependency on patch.
    (binary-indep): Invoke dh_installxmlcatalogs with -n since only DTDs
    are being installed, not catalogs (Closes: #637093).
    (install-doc): Don't create Developer symlink; useless.
    (install-common): Use the system's ca-certificates.crt.
    (v_make): Bump to 2.6.6, for texi2html related changes in -make.
  * debian/gdomap.default:
  * debian/gnustep-base-runtime.gdomap.in: Disable the gdomap daemon by
    default (Closes: #717773).  Provide "fancy" output; thanks Dirk
    Sandbrink (Closes: #729588).  Remove set -e/-u because of the lsb
    logging.
  * debian/control.m4 (libgnustep-base`'SOV_BASE-dbg) <Description>: Typo
    fix; thanks Pascal De Vuyst (Closes: #697628).
    <Conflicts>: Remove libgnustep-base1.20-dbg.
    (gnustep-base-doc) <Depends>: Remove dpkg (>= 1.15.4) | install-info.
    (gnustep-base-common) <Depends>: Add ca-certificates, needed for the
    GnuTLS support.
    (Build-Depends-Indep): Remove texi2html.  Remove texlive-base (pulled
    in); add texlive-fonts-recommended, needed for the manual.
    (Vcs-Git, Vcs-Browser): Use the canonical URIs.
    (Standards-Version): Claim compliance with 3.9.5 as of this release.
  * debian/control: Regenerate.
  * debian/gnustep-base-runtime.postinst.in: Remove obsolete stuff.
  * debian/gnustep-base-runtime.prerm.in: Delete; obsolete.
  * debian/gnustep-base-runtime.NEWS: New; document that the gdomap daemon
    is not started by default.
  * debian/copyright: Update copyright years, add more copyright holders
    and ISC/Apache 2.0 blurbs.  Typo fixes.