[mapserver-announce] security release available: MapServer 8.6.2

Jeff McKenna jmckenna at gatewaygeomatics.com
Sun Apr 19 09:35:08 PDT 2026


The MapServer team announces the immediate availability of security 
release of 8.6.2

This release contains a fix for a security flaw in the OpenLayers viewer 
(with WMS 1.3.0 requests). See the changelog for the list of changes ( 
https://mapserver.org/development/changelog/changelog-8-6.html#changelog-8-6-2 
). You may also review this specific Security Advisory ( 
https://github.com/MapServer/MapServer/security/advisories/GHSA-4g9f-ph64-hg2x 
) as well as MapServer’s Security Policy ( 
https://github.com/MapServer/MapServer/blob/main/SECURITY.md ). Please 
note: as security support for the 7.6 branch has ended, and branches 
8.4, 8.2 & 8.0 are not supported, all users are strongly encouraged to 
upgrade to the MapServer 8.6.2 release.

Here is the direct download for today's release:

  - tar.gz: https://download.osgeo.org/mapserver/mapserver-8.6.2.tar.gz
  - zip: https://download.osgeo.org/mapserver/mapserver-8.6.2.zip

(all services on demo.mapserver.org have been upgraded as well)

Thanks,

-- 
The MapServer Team










More information about the MapServer-announce mailing list