From jmckenna at gatewaygeomatics.com  Fri Sep 19 13:20:26 2025
From: jmckenna at gatewaygeomatics.com (Jeff McKenna)
Date: Fri, 19 Sep 2025 17:20:26 -0300
Subject: [mapserver-announce] security release available: MapServer 8.4.1
Message-ID: <3a4ac140-480f-43a8-a3f0-b4b8941bec21@gatewaygeomatics.com>

The MapServer team announces the immediate availability of security 
release of 8.4.1

This release contains a fix for a security flaw for WFS filters through 
OGR. See the changelog for the list of changes ( 
https://mapserver.org/development/changelog/changelog-8-4.html#changelog-8-4-1 
). You may also review MapServer?s Security Policy ( 
https://github.com/MapServer/MapServer/blob/main/SECURITY.md ), as well 
as this specific Security Advisory ( 
https://github.com/MapServer/MapServer/security/advisories/GHSA-256m-rx4h-r55w 
). Please note: as security for the 7.6 branch has ended, and branches 
8.2 & 8.0 are not supported, all users are strongly encouraged to 
upgrade to the MapServer 8.4.1 release.

Here is the direct download for today's release:

  - tar.gz: https://download.osgeo.org/mapserver/mapserver-8.4.1.tar.gz
  - zip: https://download.osgeo.org/mapserver/mapserver-8.4.1.zip

(all services on demo.mapserver.org have been upgraded as well)

Thanks,

-- 
The MapServer Team