gopher (3.0.3woody4) oldstable-security; urgency=high

  * Non-maintainer uploda by the Security Team
  * Fix buffer overflow when dealing with malicious servers.
    [CAN-2005-2772]
 
 -- Steve Kemp <skx@debian.org>  Sun, 25 Sep 2005 12:08:22 +0000
 
gopher (3.0.3woody3) oldstable-security; urgency=high

  * Non-maintainer upload by the Security Team
  * Applied patch by John Goerzen to fix insecure temporary file creation
    [gopher/gopher.c, CAN-2005-1853]

 -- Martin Schulze <joey@infodrom.org>  Sat, 23 Jul 2005 15:40:22 +0200

gopher (3.0.3woody2) stable-security; urgency=high

  * Non-maintainer upload for the Security Team.
  * Fix integer overflow vulnerability [gopherd/command.c, CAN-2004-0560]
  * Fix format string vulnerability [gopherd/ftp.c, CAN-2004-0561]
  * Sponsored by Martin Schulze <joey@debian.org>. Thank you!

 -- Uli Martens <uli@youam.net>  Wed,  4 Jan 2004 19:30:00 +0100

gopher (3.0.3woody1) stable-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * Fix multiple buffer overflows in FTP handling code and 
    authentication code. (CAN-2003-0805)
 
 -- Steve Kemp <sxk@debian.org>  Thu, 18 Sep 2003 21:44:17 +0000

gopher (3.0.3) unstable; urgency=low
  * Patches for FreeBSD:
    * Test in configure for stdlib.h
    * Include stdlib.h if it's available in Malloc.h
    * Don't include malloc.h if it's missing in Malloc.h
    * Don't include strcasestr if it's present in util.c and util.h
  * Actually use our configure.in test for malloc.h in object/* files.
  * New configure.in tests for regexp.h and libgen.h
  * Regex.c: define __GOPHER_REGEX_C__ for extern support in Regex.h
  * Regex.c: For __APPLE__, REGEX_param is regexp *.
  * Regex.h: Move the lengthy SYSV regex test to top of file
  * Regex.h: Wrap libgen.h include in HAVE_LIBGEN_H
  * Regex.h: Enclose REGEX_param=regcomp in parens to avoid warnings
  * Regex.h: Add extern for REGEX_param.
  * Regex.h: Darwin is unlike anything else.  Support it with
    __APPLE__.
  * STRstring.h: Include malloc.h only if actually here.
  * Ditto for Stdlib.h.
  * Added /etc/logrotate.d/gopherd to gopherd.conffiles.
    Closes: #132804.

 -- John Goerzen <jgoerzen@complete.org>  Tue, 12 Feb 2002 07:45:00 -0500

gopher (3.0.2) unstable; urgency=low

  * gopher: Removed processing of . at end of text files.  It would stop
    downloading when it would see ".\n" in a file.  Will need to modify
    gopher/ourutils.c:937 area to deal with this properly -- ignore
    .\n if it's at the end of the file, otherwise preserve it.
    Reported by Ashok Aiyar <aiyar@ebv.mimnet.nwu.edu>
  * Did the modification as described above.
  * Updated README.
  * Global change gopher@boombox.micro.umn.edu -> gopher@complete.org
  * Removed ./GPL.  This info is now in the file COPYING.
  * Changes to work with Solaris:
    * configure.in: Now looks for strings.h and string.h
    * object/Regex.h: Now include re_comp.h if available.
      Include regex.h only if re_comp.h is unavailable.
      Define the SYSVREGEX stuff only if HAVE_RE_COMP_H is not defined
    * object/String.h: Include string.h and strings.h based on configure
      test.
    Reports from Don Fike <fike@cs.utk.edu>
  * Added doc/PLATFORMS and updated debian/docs
  * gopherd.conf's include of gopherdlocal.conf was hardcoded to /etc.
    Now use configure's sysconfdir to generate it.  Moved gopherd.conf
    to gopherd.conf.in, modified Makefile.in to support this, removed
    gopherd.conf from source tree.  Reported by Kevin Griffin
    <vertov@artstar.com>
  * Added lines to gopherd.conf.in for .ogg and .mp2 files.
    Suggestion from Kevin Griffin <vertov@artstar.com>
  * Using $(INSTALL) from subdirectories broke on systems
    where install-sh was used because $(INSTALL) would always
    resolve to ./install-sh.  Replaced all instances of
    $(INSTALL) with @INSTALL@ (autoconf would provide the correct
    path) and removed INSTALL from Makefile.config.  Reported
    by Don Fike <fike@cs.utk.edu> on Solaris 2.6. 
  * Updated our copy of install-sh with the one from
    a current automake.
  * Updated patchlevel.h for release of 3.0.2.

 -- John Goerzen <jgoerzen@complete.org>  Fri, 11 Jan 2002 07:45:00 -0500

gopher (3.0.1) unstable; urgency=low

  * Installation routines modified -- pass -d to install to create
    config dirs.  This should fix installation problems.
  * Use sysconfigdir rather that $(DESTDIR)/etc for config files.
  * Fix a bug with specifying the gopher host on the command line.

 -- John Goerzen <jgoerzen@complete.org>  Thu, 10 Jan 2002 07:30:00 -0500

gopher (3.0.0-1) unstable; urgency=low

  * Patched to work with Hurd.  Closes: #115511.  Uses
    suggestions from James Morrison <ja2morri@student.math.uwaterloo.ca>
    but not his patch.
    * gopher.c, gopherd/error.c, gopher/download.c:
      Modified to use HAVE_STRERROR
    * configure.in: Modified with checks for sys/param.h, HURD header files,
      get_current_dir_name, etc.
    * configure.h.in, configure: rebuilt.
  * Moved the current UMN Copyright notice in "COPYING" into "copyright"
  * Updated copyright files, etc. with current info.
  * Updated the locales with semi-current copyright stuff.
  * Updated greeting in gopher and gopherd.
  * This is Gopher 3.0.0, the Furry Terror release.  

 -- John Goerzen <jgoerzen@complete.org>  Tue,  8 Jan 2002 15:31:00 -0500

gopher (2.3.1-15) unstable; urgency=low

  * NetBSD port effort began.
  * Added crypt.h to configure.in's list of headers to look for.
    Reran autoconf/autoheader.
  * Modified gopherd/AUTH.h to include crypt.h only if it's available
    and to include unistd.h if it's available.  (NetBSD)
  * Integrated patches from David Allen <s2mdalle@titan.vcu.edu>
    (may have been done earlier anyway)
  * config.h.in: rebuilt by autoheader
  * configure: rebuilt by autoconf
  * configure.in:
    * Added REGEXLIBS test for NetBSD -- look for re_comp in -lcompat
    * Added checkes for term.h, re_comp.h, regex.h
  * gopher/ourutils.c, gopher/CURcurses.c: Use term.h check
  * gopher/Makefile.in, gopherd/Makefile.in, gophfilt/Makefile.in:
    * Use REGEXLIBS
  * gopher/globals.h, gopher/gopher.c: Remove sys_errlist
  * object/GSgopherobj.c: Removed <regex.h> #include, now use
    "Regex.h" that has proper regex determining logic
  * object/Regex.h: Moved regex.h include to here.  Make it conditional
    based on configure test.  Add conditional re_comp.h include.
  * gopherd/gopherd.c: Add init of view and filter after setjmp
    to eliminate clobbering due to longjmp and a warning.  Cast
    parameters to *printf to long as appropriate.
  * AUTH.h: Add missing AUTHITEMSprocessLine prototype
  * AUTH.h: Add a check to prevent including twice.
  * gopherdconf.c: Add a missing prototype.
  * AUTH.c: add missing include of GGroup.h
  * download.c: Added cast to long for some *printf's
  * Now compiles with only one warning on NetBSD.
  * This is Gopher 20020108-01.cvs
  * object/Regex.h: now conditionally includes sys/types.h for regex.h
  * This is Gopher 20020108-02.cvs

 -- John Goerzen <jgoerzen@complete.org>  Tue,  8 Jan 2002 13:11:00 -0500

gopher (2.3.1-14) unstable; urgency=low

  * Added build-depends on autoconf.  Closes: #113255.

 -- John Goerzen <jgoerzen@complete.org>  Thu,  1 Nov 2001 12:49:00 -0500

gopher (2.3.1-13) unstable; urgency=low

  * Added Build-Depends.  Closes: #94237.

 -- John Goerzen <jgoerzen@complete.org>  Mon, 23 Apr 2001 11:00:04 -0500

gopher (2.3.1-12) unstable; urgency=low

  * Only chown /var/gopher if it's just created.  Closes: #89557.

 -- John Goerzen <jgoerzen@complete.org>  Fri,  6 Apr 2001 15:35:16 -0500

gopher (2.3.1-11) unstable; urgency=low

  * Many sprintf -> snprintf changes.

 -- John Goerzen <jgoerzen@complete.org>  Wed, 17 Jan 2001 15:22:09 -0500

gopher (2.3.1-10) unstable; urgency=low

  * Added mp3 MIME type.  Closes: #81529.
  * Now logs about chroot status on server startup.

 -- John Goerzen <jgoerzen@complete.org>  Wed, 17 Jan 2001 13:11:25 -0500

gopher (2.3.1-9) unstable; urgency=low

  * Fixed potential buffer overflows.  Closes: #82602.

 -- John Goerzen <jgoerzen@complete.org>  Wed, 17 Jan 2001 12:12:51 -0500

gopher (2.3.1-8) unstable; urgency=low

  * Update to latest code in CVS, much from
    David Allen <s2mdalle@titan.vcu.edu>
  * Fixed dh_testversion to 2.0.103.  Closes: #79883.

 -- John Goerzen <jgoerzen@complete.org>  Sat,  6 Jan 2001 20:06:01 -0500

gopher (2.3.1-7) unstable; urgency=low

  * A new debian rev to fix the access: problem in the gopherdlocal.conf.

 -- John Goerzen <jgoerzen@complete.org>  Tue, 19 Dec 2000 23:40:09 -0500

gopher (2.3.1-6) unstable; urgency=low

  * Added many excellent code patches and cleanups from
    David Allen <s2mdalle at titan.vcu.edu>.

 -- John Goerzen <jgoerzen@complete.org>  Tue, 19 Dec 2000 20:18:09 -0500

gopher (2.3.1-5) unstable; urgency=low

  * Additional code modifications and fixes.

 -- John Goerzen <jgoerzen@complete.org>  Mon, 18 Dec 2000 17:03:56 -0500

gopher (2.3.1-4) unstable; urgency=low

  * Disable authentication for the moment due to security concerns.

 -- John Goerzen <jgoerzen@complete.org>  Tue, 17 Oct 2000 23:49:20 -0500

gopher (2.3.1-3) unstable; urgency=low

  * Added startopts as a gopherd conffile.

 -- John Goerzen <jgoerzen@complete.org>  Tue, 22 Aug 2000 22:25:25 -0500

gopher (2.3.1-2) unstable; urgency=low

  * Modify postinst to be easier for people to use if they already have
    a gopher user.
  * Fixed a bug in the restart option for the init script.
  * Made debian/copyright more verbose.

 -- John Goerzen <jgoerzen@complete.org>  Tue, 22 Aug 2000 21:57:26 -0500

gopher (2.3.1-1) unstable; urgency=low

  * Initial re-release.  Package had been yanked after 1995 due to licensing.
  * UMN has just GPL'd gopher.
  * This package contains the security fix from bugtraq.
  * I have patched it to chroot() and setuid() earlier for better
    security.
    SIDE EFFECT: logging will not work if chroot() is used.
  * The extension chopping code was buggy, so I have removed it.
  * Made many fixes to eliminate compiler warnings and errors.
  * Removed redefinitions of sys_errlist
  * Included more header files to bring in relevant prototypes
  * Modified to use Debian paths
  * Modified configure.in to look for -lcrypt
  * Modified Makefile.config.in to use -Wall
  * Removed -DSETPROCTITLE from configure.in to make start-stop-daemon
    work better.
  * Added logrotate
  * Wrote Debian support from scratch.
  * AUTH.h includes crypt.h
  * gopherd/Makefile.in uses separate conffile dir (Debian path)
  * STRstring.h had a paren problem; gcc on alpha brought it out.  Fixed.
  * String.h was missing some header files.
  * Other fixes.

 -- John Goerzen <jgoerzen@complete.org>  Thu, 17 Aug 2000 15:16:07 -0500

Thu Feb  9 21:32:43 1995  Ted Hajek  <tedhajek@all-blues.micro.umn.edu>

	* gopherd/Makefile (install): Fixed syntax error in the
	installation of gopherdlocal.conf.

	* gopher/CURcurses.h: Changed inclusion of curses.h to inclusion
	of "ncurses/curses.h".  Hopefully this will solve strange problems
	with terminal features.

Wed Jul 31 17:31:11 MET DST 1996 Michael Meskes <meskes@debian.org>

	* Renamed function ustat in g_ustat to get gopherd compile with ELF
	libc

	* Corrected version number (Bugs #1718, #1851, #3965)

	* Added Architecture, Priority and Section field (Bug#3933)

	* Changed debian.rules file for new naming scheme

	* Removed 'RECOMMENDS: freeWAIS' line (Bug #1717)

	* Corrected extended description (Bug #3668, #3683)

	* Changed weekly cron script (Bug #3262)

	* Compress manpages

Local variables:
mode: debian-changelog
End:
