Skip to content

Commit db06a9d

Browse files
github-actions[bot]jmckenna
github-actions[bot]
and
jmckenna
authored
[Backport branch-8-6] update for 8.6.3 release [build_translations] (#1079)
--------- Co-authored-by: Jeff McKenna <jmckenna@gatewaygeomatics.com>
1 parent 09011aa commit db06a9d

9 files changed

Lines changed: 86 additions & 20 deletions

File tree

‎conf.py‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -94,7 +94,7 @@ def __getattr__(cls, name):
9494
# The short X.Y version.
9595
version = '8.6'
9696
# The full version, including alpha/beta/rc tags.
97-
release = '8.6.2'
97+
release = '8.6.3'
9898
# The language for content autogenerated by Sphinx. Refer to documentation
9999
# for a list of supported languages.
100100
#language = None

‎en/MIGRATION_GUIDE.txt‎

Lines changed: 23 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@
66
MapServer Migration Guide
77
*****************************************************************************
88

9-
:Last Updated: 2026-05-01
9+
:Last Updated: 2026-05-07
1010

1111
.. contents:: Table of Contents
1212
:depth: 2
@@ -22,10 +22,29 @@ MapServer Migration Guide
2222
MapServer 8.4 to 8.6 Migration
2323
==============================
2424

25-
- The 8.6.2 release includes a fix for a security flaw in the OpenLayers viewer
25+
- The 8.6.3 release includes a fix for a vulnerability in the SLD parser
26+
(see MapServer's `Security Advisory <https://github.com/MapServer/MapServer/security/advisories/GHSA-4h8g-378q-r75m>`__)
27+
28+
Reminder: you can also disable external SLD access for your WMS services
29+
by setting the following in your mapfile:
30+
31+
.. code-block:: mapfile
32+
33+
MAP
34+
...
35+
WEB
36+
METADATA
37+
"wms_sld_enabled" "false"
38+
...
39+
END #metadata
40+
END #web
41+
...
42+
43+
44+
- The 8.6.2 release includes a fix for a vulnerability in the OpenLayers viewer
2645
(see MapServer's `Security Advisory <https://github.com/MapServer/MapServer/security/advisories/GHSA-4g9f-ph64-hg2x>`__)
2746

28-
- The 8.6.1 release includes a fix for a security flaw in the SLD parser
47+
- The 8.6.1 release includes a fix for a vulnerability in the SLD parser
2948
(see CVE record: `CVE-2026-33721 <https://www.cve.org/CVERecord?id=CVE-2026-33721>`__,
3049
or see MapServer's `Security Advisory <https://github.com/MapServer/MapServer/security/advisories/GHSA-cv4m-mr84-fgjp>`__)
3150

@@ -151,7 +170,7 @@ MapServer 8.4 to 8.6 Migration
151170
MapServer 8.2 to 8.4 Migration
152171
==============================
153172

154-
- The 8.4.1 release includes a fix for a security flaw for WFS filter requests to
173+
- The 8.4.1 release includes a fix for a vulnerability for WFS filter requests to
155174
an OGR backend connection (see CVE record: `CVE-2025-59431 <https://www.cve.org/CVERecord?id=CVE-2025-59431>`__,
156175
or MapServer's `Security Advisory <https://github.com/MapServer/MapServer/security/advisories/GHSA-256m-rx4h-r55w>`__)
157176

‎en/announcements/announcements_archive.txt‎

Lines changed: 25 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,22 @@
44
MapServer Announcement Archives
55
*****************************************************************************
66

7+
**2026-05-07 - MapServer 8.6.3 is released**
8+
9+
.. important::
10+
Security release available
11+
12+
The security release of MapServer 8.6.3 has been issued in order to fix
13+
a vulnerability in the SLD parser. See the :ref:`changelog <changelog-8-6-3>`
14+
for the list of changes.
15+
You may also review this `Security Advisory <https://github.com/MapServer/MapServer/security/advisories/GHSA-4h8g-378q-r75m>`__,
16+
as well as MapServer's `Security Policy <https://github.com/MapServer/MapServer/blob/main/SECURITY.md>`__.
17+
As security for the 7.6 branch has ended, and branches 8.4, 8.2 & 8.0 are not supported,
18+
all users are strongly encouraged to upgrade to the MapServer 8.6.3 release (see the
19+
:ref:`Migration Guide <migration>`).
20+
21+
Head to :ref:`download` to obtain a copy.
22+
723
**2026-04-20 - MapCache 1.16.0 is released**
824

925
The major version MapCache 1.16.0 has been released.
@@ -17,8 +33,8 @@ Head to :ref:`download` to obtain a copy.
1733
.. important::
1834
Security release available
1935

20-
The maintenance release of MapServer 8.6.2 has been issued in order to fix
21-
a security flaw in the OpenLayers viewer (with WMS 1.3.0 requests).
36+
The security release of MapServer 8.6.2 has been issued in order to fix
37+
a vulnerability in the OpenLayers viewer (with WMS 1.3.0 requests).
2238
See the :ref:`changelog <changelog-8-6-2>` for the list of changes.
2339
You may also review this `Security Advisory <https://github.com/MapServer/MapServer/security/advisories/GHSA-4g9f-ph64-hg2x>`__,
2440
as well as MapServer's `Security Policy <https://github.com/MapServer/MapServer/blob/main/SECURITY.md>`__.
@@ -33,8 +49,8 @@ Head to :ref:`download` to obtain a copy.
3349
.. important::
3450
Security release available
3551

36-
The maintenance release of MapServer 8.6.1 has been issued in order to fix
37-
a security flaw in the SLD parser.
52+
The security release of MapServer 8.6.1 has been issued in order to fix
53+
a vulnerability in the SLD parser.
3854
See the :ref:`changelog <changelog-8-6-1>` for the list of changes.
3955
You may also review this `Security Advisory <https://github.com/MapServer/MapServer/security/advisories/GHSA-cv4m-mr84-fgjp>`__,
4056
the CVE record: `CVE-2026-33721 <https://www.cve.org/CVERecord?id=CVE-2026-33721>`__,
@@ -73,8 +89,11 @@ for the full list of changes and head to :ref:`download` to obtain a copy.
7389

7490
**2025-09-19 - MapServer 8.4.1 is released**
7591

76-
The maintenance release of MapServer 8.4.1 has been issued in order to fix
77-
a security flaw for WFS filters through OGR.
92+
.. important::
93+
Security release available
94+
95+
The security release of MapServer 8.4.1 has been issued in order to fix
96+
a vulnerability for WFS filters through OGR.
7897
See the :ref:`changelog <changelog-8-4-1>` for the list of changes.
7998
You may also review MapServer's `Security Policy <https://github.com/MapServer/MapServer/blob/main/SECURITY.md>`__,
8099
the CVE record: `CVE-2025-59431 <https://www.cve.org/CVERecord?id=CVE-2025-59431>`__,

‎en/development/changelog/changelog-8-6.txt‎

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,16 @@
77
The summary of major changes for this release can be found in the `HISTORY.md <https://github.com/MapServer/MapServer/blob/branch-8-6/HISTORY.md>`__
88
file from the source directory.
99

10+
.. _changelog-8-6-3:
11+
12+
Changes from 8.6.2 to 8.6.3
13+
===========================
14+
15+
* SLD parser: fix out of bounds access on SLD with only a Rule with a ElseFilter but without a symbolizer ( `#7497 <https://github.com/MapServer/MapServer/issues/7497>`__ ) (Even Rouault) : `0f05c57 <https://github.com/MapServer/MapServer/commit/0f05c578ce31ab1bc11a12c8a828163fc07b9320>`__
16+
* Oracle: revert change regarding case insensitive ogc filters ( `#7493 <https://github.com/MapServer/MapServer/issues/7493>`__ ) (Pierre-Étienne Lord) : `ce02b66 <https://github.com/MapServer/MapServer/commit/ce02b664e1c6c2457bb717097a3504d8a9dde71b>`__
17+
* update CMake install README ( `#7488 <https://github.com/MapServer/MapServer/issues/7488>`__ ) (Jeff McKenna) : `dcdfcda <https://github.com/MapServer/MapServer/commit/dcdfcda6bcb8100c55b1a0f78bf120a9c56c5aff>`__
18+
* Oracle: revert change regarding adding subquery to apply sortBy before rownum paging ( `#7491 <https://github.com/MapServer/MapServer/issues/7491>`__ ) (Jeff McKenna) : `448c69f <https://github.com/MapServer/MapServer/commit/448c69f55bd36df98d55e631c2fbcbebcd007552>`__
19+
1020
.. _changelog-8-6-2:
1121

1222
Changes from 8.6.1 to 8.6.2

‎en/download.txt‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ Current Release(s)
1818

1919
* MapServer
2020

21-
* **2026-04-19** MapServer-8.6.2 `tar.gz <https://download.osgeo.org/mapserver/mapserver-8.6.2.tar.gz>`__ | `.zip <https://download.osgeo.org/mapserver/mapserver-8.6.2.zip>`__ | :ref:`Changelog <changelog-8-6>`
21+
* **2026-05-07** MapServer-8.6.3 `tar.gz <https://download.osgeo.org/mapserver/mapserver-8.6.3.tar.gz>`__ | `.zip <https://download.osgeo.org/mapserver/mapserver-8.6.3.zip>`__ | :ref:`Changelog <changelog-8-6>`
2222
* **2025-09-19** MapServer-8.4.1 `tar.gz <https://download.osgeo.org/mapserver/mapserver-8.4.1.tar.gz>`__ | `.zip <https://download.osgeo.org/mapserver/mapserver-8.4.1.zip>`__ | :ref:`Changelog <changelog-8-4>`
2323
* **2024-09-02** MapServer-8.2.2 `tar.gz <https://download.osgeo.org/mapserver/mapserver-8.2.2.tar.gz>`__ | `.zip <https://download.osgeo.org/mapserver/mapserver-8.2.2.zip>`__ | :ref:`Changelog <changelog-8-2>`
2424
* **2024-06-11** MapServer-8.0.2 `tar.gz <https://download.osgeo.org/mapserver/mapserver-8.0.2.tar.gz>`__ | :ref:`Changelog <changelog-8-0>`

‎en/download_archives.txt‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -15,6 +15,8 @@
1515
Past Releases
1616
..............................................................................
1717

18+
* **2026-05-07** MapServer-8.6.3 `tar.gz <https://download.osgeo.org/mapserver/mapserver-8.6.3.tar.gz>`__ | `.zip <https://download.osgeo.org/mapserver/mapserver-8.6.3.zip>`__ | :ref:`Changelog <changelog-8-6>`
19+
1820
* **2026-04-20** MapCache-1.16.0 `tar.gz <https://download.osgeo.org/mapserver/mapcache-1.16.0.tar.gz>`__ | `.zip <https://download.osgeo.org/mapserver/mapcache-1.16.0.zip>`__ | :ref:`Changelog <changelog-mapcache-1-16>`
1921

2022
* **2026-04-19** MapServer-8.6.2 `tar.gz <https://download.osgeo.org/mapserver/mapserver-8.6.2.tar.gz>`__ | `.zip <https://download.osgeo.org/mapserver/mapserver-8.6.2.zip>`__ | :ref:`Changelog <changelog-8-6>`

‎en/include/announcements.inc‎

Lines changed: 22 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,19 @@
1+
**2026-05-07 - MapServer 8.6.3 is released**
2+
3+
.. important::
4+
Security release available
5+
6+
The security release of MapServer 8.6.3 has been issued in order to fix
7+
a vulnerability in the SLD parser. See the :ref:`changelog <changelog-8-6-3>`
8+
for the list of changes.
9+
You may also review this `Security Advisory <https://github.com/MapServer/MapServer/security/advisories/GHSA-4h8g-378q-r75m>`__,
10+
as well as MapServer's `Security Policy <https://github.com/MapServer/MapServer/blob/main/SECURITY.md>`__.
11+
As security for the 7.6 branch has ended, and branches 8.4, 8.2 & 8.0 are not supported,
12+
all users are strongly encouraged to upgrade to the MapServer 8.6.3 release (see the
13+
:ref:`Migration Guide <migration>`).
14+
15+
Head to :ref:`download` to obtain a copy.
16+
117
**2026-04-20 - MapCache 1.16.0 is released**
218

319
The major version MapCache 1.16.0 has been released.
@@ -11,8 +27,8 @@ Head to :ref:`download` to obtain a copy.
1127
.. important::
1228
Security release available
1329

14-
The maintenance release of MapServer 8.6.2 has been issued in order to fix
15-
a security flaw in the OpenLayers viewer (with WMS 1.3.0 requests).
30+
The security release of MapServer 8.6.2 has been issued in order to fix
31+
a vulnerability in the OpenLayers viewer (with WMS 1.3.0 requests).
1632
See the :ref:`changelog <changelog-8-6-2>` for the list of changes.
1733
You may also review this `Security Advisory <https://github.com/MapServer/MapServer/security/advisories/GHSA-4g9f-ph64-hg2x>`__,
1834
as well as MapServer's `Security Policy <https://github.com/MapServer/MapServer/blob/main/SECURITY.md>`__.
@@ -27,8 +43,8 @@ Head to :ref:`download` to obtain a copy.
2743
.. important::
2844
Security release available
2945

30-
The maintenance release of MapServer 8.6.1 has been issued in order to fix
31-
a security flaw in the SLD parser.
46+
The security release of MapServer 8.6.1 has been issued in order to fix
47+
a vulnerability in the SLD parser.
3248
See the :ref:`changelog <changelog-8-6-1>` for the list of changes.
3349
You may also review this `Security Advisory <https://github.com/MapServer/MapServer/security/advisories/GHSA-cv4m-mr84-fgjp>`__,
3450
the CVE record: `CVE-2026-33721 <https://www.cve.org/CVERecord?id=CVE-2026-33721>`__,
@@ -51,8 +67,8 @@ for the full list of changes and head to :ref:`download` to obtain a copy.
5167
.. important::
5268
Security release available
5369

54-
The maintenance release of MapServer 8.4.1 has been issued in order to fix
55-
a security flaw for WFS filters through OGR.
70+
The security release of MapServer 8.4.1 has been issued in order to fix
71+
a vulnerability for WFS filters through OGR.
5672
See the :ref:`changelog <changelog-8-4-1>` for the list of changes.
5773
You may also review MapServer's `Security Policy <https://github.com/MapServer/MapServer/blob/main/SECURITY.md>`__,
5874
the CVE record: `CVE-2025-59431 <https://www.cve.org/CVERecord?id=CVE-2025-59431>`__,

‎en/mapscript/index.txt‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@
1010

1111
Since the MapServer 8.0.0 release PHP support is only available through
1212
MapServer's :ref:`SWIG API <swig>`. Supported versions are PHP 8.5 and
13-
PHP 8.4 with MapServer 8.6.1
13+
PHP 8.4 with MapServer 8.6.3
1414

1515
.. toctree::
1616
:maxdepth: 2

‎en/mapscript/mapscript-api/index.rst‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -47,7 +47,7 @@ meaningless, and even dangerous attributes might be exposed by objects.
4747

4848
Since the MapServer 8.0.0 release PHP support is only available through
4949
MapServer's :ref:`SWIG API <swig>`. Supported versions are PHP 8.5 and
50-
PHP 8.4 with MapServer 8.6.1
50+
PHP 8.4 with MapServer 8.6.3
5151

5252
=============================================================================
5353
Appendices

0 commit comments

Comments
 (0)