slocate (2.7-4) unstable; urgency=high

  * Added a case to handle broken diversion. /usr/bin/locate and
    /usr/bin/updatedb must be symlinks to /usr/bin/slocate. In the
    case that they are not, the removal of the diversion fails.
    A check is done to detect the diversion and forcefully removes
    /usr/bin/locate and /usr/bin/updatedb before diverting the old
    findutils binaries back.
    (closes: #270762)

 -- Kevin Lindsay <klindsay@debian.org>  Tue, 14 Sep 2004 05:22:24 +0000

slocate (2.7-3) unstable; urgency=high

  * 'slocate' sgid privileges are now dropped when searching databases that
     are not apart of the 'slocate' group. This will prevent malicious user
     supplied databases from elevating user access to the 'slocate' group.
     See CAN-2003-0848, (closes: #226103)
  * Changed diversion /etc/cron.daily.find.notslocate to
    /etc/cron.daily/find.notslocate (closes: #234563)
  * I also made the database creation feature drop privileges so that the
    SGID binary can't chown the group of the database to 'slocate' unless
    the user has explicit access.
  * Added a patch which caused LOCATE_PATH to be ignored when '-d' was used,
    and vice versa. This also fixed an off by 1 overflow bug.

 -- Kevin Lindsay <klindsay@debian.org>  Tue,  7 Sep 2004 03:20:42 +0000

slocate (2.7-2) unstable; urgency=low

  * Closing ITA. (closes: #194037)
  * Removed diverted /etc/cron.daily/find.notslocate out of the cron.daily
    directory so that multiple copies of updatedb are not run.
    (closes: #210845)
  * The diversion handling has been changed since this bug so I will close
    it and if the problem persists, please reopen. (closes: #132284)
  * Updated description. (closes: #185907)
  * slocate group will now be added as a system group on new installs. 
    (closes: #203885)
  * Fixed updatedb manpage. (closes: #152770)

 -- Kevin Lindsay <klindsay@debian.org>  Tue, 30 Dec 2003 21:54:56 +0000

slocate (2.7-1) unstable; urgency=high

  * Non-maintainer upload
  * New upstream version
  * Fixes buffer overflow causing segfault. (closes: #179338)

 -- Kevin Lindsay <klindsay@debian.org>  Mon, 17 Feb 2003 23:59:39 +0000

slocate (2.6-1.4) unstable; urgency=low

  * Non-maintainer upload
  * Handle long filenames. (Patch from David D. Kilzer, closes: #92454)
  * debian/rules (clean): Use distclean, and remove config.h too.
  
 -- Gergely Nagy <algernon@debian.org>  Mon,  2 Sep 2002 00:56:07 +0200

slocate (2.6-1.3) unstable; urgency=low

  * A "make woody great" NMU.
  * Only conflict with dlocate versions older than 0.5-0.1 (closes: #138265).
  * Don't remove & readd slocate group on every upgrade -- create it with
    addgroup unless already present when configuring, use delgroup instead
    of groupdel on removal (closes: #101253).
  * Usage of addgroup should also alleviate any problems with NIS and/or
    nscd so remove the conflict with nscd (closes: #101094, #101485,
    #80176).
  * Don't zilch out the database on every upgrade, just on removals.
  * Make the postinst less noisy, and don't print the information about
    building the first database if the database already exists (closes:
    #101063).
  * In cron.daily, do nothing if /usr/bin/slocate doesn't exist (typically
    if the package is in the conffiles stage). Closes: #132287.
  * Kill suid(un)register cruft, and depend on a dpkg with
    dpkg-statoverride.
  * Remove commented out, obsolete stuff from some scripts.
  * Clean up config.status as well (lintian).
  * Emacs local variables excised from this changelog.

 -- Robert Bihlmeyer <robbe@debian.org>  Sun, 17 Mar 2002 14:51:47 +0100

slocate (2.6-1.2) unstable; urgency=medium

  * Non-maintainer upload.
  * Correct memory allocation in load_file() (thanks, Gergely Nagy;
    closes: #128477).

 -- Colin Watson <cjwatson@debian.org>  Sun,  3 Feb 2002 16:57:19 +0000

slocate (2.6-1.1) unstable; urgency=low

  * Non-maintainer upload.
  * Fix printf-is-a-macro issue (gcc 3.0).  Patch courtesy of 
    rbradetich@uswest.net.  Closes: #105026

 -- LaMont Jones <lamont@smallone.fc.hp.com>  Fri, 20 Jul 2001 22:33:42 -0600

slocate (2.6-1) unstable; urgency=low

  * no more suidregister(lintian, go figure)
  * now conflicts with nscd - There's been too many bugs opened due to the groupadd issues with this pkg
   Closes: #95636
  * now conflicts with dlocate too. It seems that is there's a diversion, each package must know about each other. That sucks. I'm going to implement alternatives when I get time but until then here's my solution.
   Closes: #57126, #61789, #87654
  * now requires adduser (really the command addgroup), thanks joy@cibalia.gkvk.hr
   Closes: #78465
  * I'm such an idiot. This is just correcting syntax below.
   Closes: #78190, #76543, #71373, #71371, #71365, #66566, #66206, #56351

 -- R Garth Wood <rgwood@debian.org>  Thu, 14 Jun 2001 00:23:50 -0400

slocate (2.4-1) stable unstable; urgency=high

  * according to author the "S(ecure)Locate heap corruption" issue is resolved
   Closes #78190
  * according to author slocate is now impervious to mtab being a link 
   Closes #76543
  * according to author there is now more than very little error checking (will this satisfy Wichert? Hell ya. )
   Closes #71373
  * according to author will not segfault on deep dirs
   Closes #71371
  * copyright now gives props to the FSF
   Closes #71365
  * /var/lib/slocate/* now removed in prerm
   Closes #66566
  * now suidunregisters itself
   Closes #66206
  * upgrade should be fine. I think this is a bug in the bts
   Closes #56351

 -- R Garth Wood <rgwood@debian.org>  Wed, 29 Nov 2000 22:54:56 -0800

slocate (2.2-0.0) frozen unstable; urgency=low

  * NMU to fix a security issue. Slocate has an potentially exploitable
    buffer overrun in LOCATE_PATH. If exploited, the attacker could access
    info about files they normally cannot see the presense of. Updated to
    version 2.2 to fix the problem (no other changes in this new version).
    Closes: #66718
  * 

 -- Joey Hess <joeyh@debian.org>  Wed, 29 Nov 2000 22:54:14 -0800

slocate (2.1-5.1) frozen unstable; urgency=low

  * (closes Bug#59366) strange -c is defined in main.c and in --help ??

 -- R Garth Wood <rgwood@debian.org>  Sat,  4 Mar 2000 13:05:17 -0800

slocate (2.1-5) frozen unstable; urgency=low

  * another attempt at (closes Bug#56981)

 -- R Garth Wood <rgwood@debian.org>  Thu,  2 Mar 2000 22:01:40 -0800

slocate (2.1-4) frozen unstable; urgency=low

  * added -O3 (instead of -O2) and removed -g3 (not needed for release)
  * (closes Bug#56349) Actually done in -3 but I forgot to include it
  (same as 56357,56424)
  * (closes Bug#58537) ??? This installs cleanly on my system.
  I cannot reproduce this bug. This is probably a woody and not a potato
  * (closes Bug#56417, #57011) if for some strange reason /var/lib/slocate
  does not exist(it should) then it creates it
  * now suggests anacron
  * (closes Bug#57046, #57530, #58023, #56981) tries to check for linked
  diversions and rm's them before hand

 -- R Garth Wood <rgwood@debian.org>  Tue,  8 Feb 2000 00:50:39 -0800

slocate (2.1-3) frozen unstable; urgency=low

  * (closes Bug#56417) /var/lib/slocate/ : No such file or directory 
  * (closes Bug#56388, #56505#, #53904, #56357, #56424) actually the same bug
  * (closes Bug#5184) I now make "helpful" diversions

 -- R Garth Wood <rgwood@debian.org>  Wed, 26 Jan 2000 21:19:23 -0800

slocate (2.1-2) frozen unstable; urgency=low

  * (closes: Bug#53905) added suggestion to install anacron
  * fixed some lintian 'E's

 -- R Garth Wood <rgwood@debian.org>  Wed, 26 Jan 2000 01:53:18 -0600

slocate (2.1-1) frozen; urgency=low

  * new upstream fixes some segfaults
  * (closes: Bug#52696) actually an old one
  * (closes: Bug#53904) actually an old one

 -- R Garth Wood <rgwood@debian.org>  Sun, 23 Jan 2000 22:32:19 -0800

slocate (2.0-3) unstable; urgency=low

  * Bug#49763, version fixed in manpage
  * Bug#45635, LICENSE file is not included anymore; copyright points to GPL 
  * Bug#43346, Bug#42560? squashed. Now adds a system group with groupadd

 -- R Garth Wood <rgwood@debian.org>  Thu,  7 Oct 1999 09:12:01 -0700

slocate (2.0-2) unstable; urgency=low

  * updatedb now actually parses /etc/updatedb.conf by default 

 -- R Garth Wood <rgwood@debian.org>  Tue,  6 Jul 1999 17:40:31 -0700

slocate (2.0-1) unstable; urgency=low

  * new upstream
  * fixed #40262: slocate postinst fails with sh==/bin/ash
  * fixed Bug#39800: slocate: should make use of suidregister

 -- R Garth Wood <rgwood@debian.org>  Sun,  4 Jul 1999 23:21:40 -0700

slocate (1.6-5) unstable; urgency=low

  * fixed Bug#39788 and Bug#39798 (the same bug) slocate not creat()ing
    it's database.
  * fixed future bug: slocate always returns 1 

 -- R Garth Wood <rgwood@debian.org>  Sun, 20 Jun 1999 16:13:28 -0700

slocate (1.6-4) unstable; urgency=low

  * changed maintainer so that I could pgp sign the pkg

 -- R Garth Wood <rgwood@debian.org>  Wed,  9 Jun 1999 18:40:26 -0700

slocate (1.6-3) unstable; urgency=low

  * added /var/lib/slocate to dirs 

 -- R Garth Wood <rgwood@stormix.com>  Wed,  9 Jun 1999 18:26:24 -0700

slocate (1.6-2) unstable; urgency=low

  * misc fix 

 -- R Garth Wood <rgwood@stormix.com>  Mon, 31 May 1999 11:19:47 -0700

slocate (1.6-1) unstable; urgency=low

  * new upstream 

 -- R Garth Wood <rgwood@stormix.com>  Mon, 31 May 1999 10:56:06 -0700

slocate (1.5-3) unstable; urgency=low

  * added diversion for updatedb.1.gz 

 -- R Garth Wood <rgwood@stormix.com>  Mon, 17 May 1999 11:10:24 -0700

slocate (1.5-2) unstable; urgency=low

  * added diversion for find cronjob 

 -- R Garth Wood <rgwood@stormix.com>  Wed, 12 May 1999 03:20:37 -0700

slocate (1.5-1) unstable; urgency=low

  * new upstream

 -- R Garth Wood <rgwood@stormix.com>  Wed,  5 May 1999 13:18:07 -0700

slocate (1.4-1) unstable; urgency=low

  * Initial Release.

 -- R Garth Wood <rgwood@stormix.com>  Tue,  4 May 1999 17:00:14 -0700