[mapserver-announce] security release available: MapServer 8.6.6

[Jeff McKenna]

The MapServer team announces the immediate availability of security 
release of 8.6.6

This release contains a fix for 6 vulnerabilities. See the changelog for 
the list of changes ( 
https://mapserver.org/development/changelog/changelog-8-6.html#changelog-8-6-6 
).

You may also review the security advisories for this release:
   - WCS 2.0 support advisory: 
https://github.com/MapServer/MapServer/security/advisories/GHSA-6jr5-rc9c-p3cj
   - CGI/FastCGI with SMOOTHSIA advisory: 
https://github.com/MapServer/MapServer/security/advisories/GHSA-33h3-f4q2-pq5q
   - WMS Filter advisory: 
https://github.com/MapServer/MapServer/security/advisories/GHSA-5fx4-vjp9-863f
   - WMS with interpolation layers: 
https://github.com/MapServer/MapServer/security/advisories/GHSA-59gr-4vvx-5f56
   - FlatGeobuf support : 
https://github.com/MapServer/MapServer/security/advisories/GHSA-5v7w-325g-gpr9
   - WMS error image: 
https://github.com/MapServer/MapServer/security/advisories/GHSA-qcjf-q672-q63w

The 8.6.6 release also fixes a problem of SVG scaling that had existed 
since the 8.6.0 release, for those leveraging an older librsvg version 
(see https://github.com/MapServer/MapServer/pull/7583 ).


Please note: as security support for the 7.6 branch has ended, and 
branches 8.4, 8.2 & 8.0 are not supported, all users are strongly 
encouraged to upgrade to the MapServer 8.6.6 release.

Here is the direct download for today's release:

  - tar.gz: https://download.osgeo.org/mapserver/mapserver-8.6.6.tar.gz
  - zip: https://download.osgeo.org/mapserver/mapserver-8.6.6.zip

(all services on demo.mapserver.org have been upgraded as well)

Thanks,

-- 
The MapServer Team