Bug 23361

While we are getting Godot 3.x in core/backports on mga6 (bug 22771), we still provide Godot 2.x in core/release, and the latest release fixes many bugs, including security relevant ones.

Advisory:
=========

Updated godot packages fix security vulnerability

  Fabio Alessandrelli found and fixed several security vulnerabilities in the
  marshalling code of Godot Engine, which could be used by a remote Godot client
  to cause a Denial of Service for a Godot server.

  This update to Godot 2.1.5 fixes it, as well as bringing over a year's worth
  of bug fixing, usability enhancements and features.

Reference:
 - TODO (not published upstream - i.e. by me - yet)


RPMs in core/updates_testing:
=============================

godot-2.1.5-1.mga6
godot-demos-2.1.5-1.mga6
godot-runner-2.1.5-1.mga6
godot-server-2.1.5-1.mga6


SRPM in core/updates_testing:
=============================

godot-2.1.5-1.mga6


Testing procedure:
==================

The `godot` binary (in package `godot`) is a game engine and editor, so launching it will bring the "project manager" where a project can be created or imported.

The `godot-demos` package contains such projects, which can be imported in the project manager (they are located in /usr/share/godot/demos).

The `godot-runner` package can be tested by playing the games `minilens` or `tanks-of-freedom` which depend on it.