[Fwd: [SECURITY] Fedora 12 Update: maniadrive-1.2-21.fc12]

[Michał Piotrowski]

2010/3/26 Jon Ciesla <limb at jcomserv.net>:
> Does anyone else see anything odd about this update?

I didn't know that maniadrive shares code with php...

Regards,
Michal

>
> -J
>
> --
> in your fear, seek only peace
> in your fear, seek only love
>
> -d. bowie
>
>
> --------------------------------------------------------------------------------
> Fedora Update Notification
> FEDORA-2010-4212
> 2010-03-11 07:03:40
> --------------------------------------------------------------------------------
>
> Name        : maniadrive
> Product     : Fedora 12
> Version     : 1.2
> Release     : 21.fc12
> URL         : http://maniadrive.raydium.org/
> Summary     : 3D stunt driving game
> Description :
> ManiaDrive is an arcade car game on acrobatic tracks, with a quick and
> nervous
> gameplay (tracks almost never exceed one minute). Features: Complex car
> physics, Challenging "story mode", LAN and Internet mode, Live scores,
> Track editor, Dedicated server with HTTP interface and More than 30 blocks.
>
> --------------------------------------------------------------------------------
> Update Information:
>
> This is a maintenance release in the 5.3 series, which includes a large
> number
> of bug fixes.    Security Enhancements and Fixes in PHP 5.3.2:  - Improved
> LCG
> entropy. (Rasmus, Samy Kamkar)  - Fixed safe_mode validation inside
> tempnam()
> when the directory path does not end with a /). (Martin Jansen)  - Fixed a
> possible open_basedir/safe_mode bypass in the session extension identified
> by
> Grzegorz Stachowiak. (Ilia)    Key Bug Fixes in PHP 5.3.2 include:  - Added
> support for SHA-256 and SHA-512 to php's crypt.  - Added protection for
> $_SESSION from interrupt corruption and improved "session.save_path" check.
>  -
> Fixed bug #51059 (crypt crashes when invalid salt are given).  - Fixed bug
> #50940 Custom content-length set incorrectly in Apache sapis.  - Fixed bug
> #50847 (strip_tags() removes all tags greater then 1023 bytes long).  -
> Fixed
> bug #50723 (Bug in garbage collector causes crash).  - Fixed bug #50661
> (DOMDocument::loadXML does not allow UTF-16).  - Fixed bug #50632
> (filter_input() does not return default value if the variable does not
> exist).
> - Fixed bug #50540 (Crash while running ldap_next_reference test cases).  -
> Fixed bug #49851 (http wrapper breaks on 1024 char long headers).  - Over 60
> other bug fixes.    Full upstream changelog:
> http://www.php.net/ChangeLog-5.php#5.3.2
> --------------------------------------------------------------------------------
> ChangeLog:
>
> * Sat Mar  6 2010 Remi Collet <Fedora at famillecollet.com> 1.2-21
> - Rebuild for new php 5.3.2
> * Mon Feb 22 2010 Hans de Goede <hdegoede at redhat.com> 1.2-20
> - Fix FTBFS (#564773)
> * Fri Nov 20 2009 Remi Collet <Fedora at famillecollet.com> 1.2-19
> - Rebuild for new php 5.3.1
> --------------------------------------------------------------------------------
> References:
>
>  [ 1 ] Bug #570769 - php-5.3.2 is available
>        https://bugzilla.redhat.com/show_bug.cgi?id=570769
> --------------------------------------------------------------------------------
>
> This update can be installed with the "yum" update program.  Use
> su -c 'yum update maniadrive' at the command line.
> For more information, refer to "Managing Software with yum",
> available at http://docs.fedoraproject.org/yum/.
>
> All packages are signed with the Fedora Project GPG key.  More details on
> the
> GPG keys used by the Fedora Project can be found at
> https://fedoraproject.org/keys
> --------------------------------------------------------------------------------
> _______________________________________________
> package-announce mailing list
> package-announce at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/package-announce
>
> --
> devel mailing list
> devel at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/devel
>