From jmckenna at gatewaygeomatics.com Fri Jul 10 13:29:50 2026 From: jmckenna at gatewaygeomatics.com (Jeff McKenna) Date: Fri, 10 Jul 2026 17:29:50 -0300 Subject: [mapserver-announce] security release available: MapServer 8.6.5 In-Reply-To: <73eeffb8-dafb-45a7-9114-d79547b1c657@gatewaygeomatics.com> References: <73eeffb8-dafb-45a7-9114-d79547b1c657@gatewaygeomatics.com> Message-ID: The MapServer team announces the immediate availability of security release of 8.6.5 This release contains a fix for 6 vulnerabilities. See the changelog for the list of changes ( https://mapserver.org/development/changelog/changelog-8-6.html#changelog-8-6-5 ). You may also review the security advisories for this release: - OGCAPI Features support advisory: https://github.com/MapServer/MapServer/security/advisories/GHSA-288j-mhpj-gmmr - WCS support advisory: https://github.com/MapServer/MapServer/security/advisories/GHSA-35qh-49hm-5rcx - OpenLayers viewer with WMS advisory: https://github.com/MapServer/MapServer/security/advisories/GHSA-52rr-p4x5-2x6x - WMS GetLegendGraphic support advisory: https://github.com/MapServer/MapServer/security/advisories/GHSA-4mwc-qc95-5959 - MySQL JOIN support advisory: https://github.com/MapServer/MapServer/security/advisories/GHSA-7624-4mwh-9cxr - PostgreSQL JOIN support advisory: https://github.com/MapServer/MapServer/security/advisories/GHSA-m3xh-ccmh-x8rw Please note: as security support for the 7.6 branch has ended, and branches 8.4, 8.2 & 8.0 are not supported, all users are strongly encouraged to upgrade to the MapServer 8.6.5 release. Here is the direct download for today's release: - tar.gz: https://download.osgeo.org/mapserver/mapserver-8.6.5.tar.gz - zip: https://download.osgeo.org/mapserver/mapserver-8.6.5.zip (all services on demo.mapserver.org have been upgraded as well) Thanks, -- The MapServer Team