[mapserver-announce] security release available: MapServer 8.6.5

[Jeff McKenna]

The MapServer team announces the immediate availability of security 
release of 8.6.5

This release contains a fix for 6 vulnerabilities. See the changelog for 
the list of changes ( 
https://mapserver.org/development/changelog/changelog-8-6.html#changelog-8-6-5 
).

You may also review the security advisories for this release:
   - OGCAPI Features support advisory: 
https://github.com/MapServer/MapServer/security/advisories/GHSA-288j-mhpj-gmmr
   - WCS support advisory: 
https://github.com/MapServer/MapServer/security/advisories/GHSA-35qh-49hm-5rcx
   - OpenLayers viewer with WMS advisory: 
https://github.com/MapServer/MapServer/security/advisories/GHSA-52rr-p4x5-2x6x
   - WMS GetLegendGraphic support advisory: 
https://github.com/MapServer/MapServer/security/advisories/GHSA-4mwc-qc95-5959
   - MySQL JOIN support advisory: 
https://github.com/MapServer/MapServer/security/advisories/GHSA-7624-4mwh-9cxr
   - PostgreSQL JOIN support advisory: 
https://github.com/MapServer/MapServer/security/advisories/GHSA-m3xh-ccmh-x8rw


Please note: as security support for the 7.6 branch has ended, and 
branches 8.4, 8.2 & 8.0 are not supported, all users are strongly 
encouraged to upgrade to the MapServer 8.6.5 release.

Here is the direct download for today's release:

  - tar.gz: https://download.osgeo.org/mapserver/mapserver-8.6.5.tar.gz
  - zip: https://download.osgeo.org/mapserver/mapserver-8.6.5.zip

(all services on demo.mapserver.org have been upgraded as well)

Thanks,

-- 
The MapServer Team