[mapserver-commits] r11900 - branches/branch-4-10/mapserver
svn at osgeo.org
svn at osgeo.org
Tue Jul 12 09:57:15 EDT 2011
Author: dmorissette
Date: 2011-07-12 06:57:15 -0700 (Tue, 12 Jul 2011)
New Revision: 11900
Modified:
branches/branch-4-10/mapserver/HISTORY.TXT
branches/branch-4-10/mapserver/map.h
Log:
Update for 4.10.7 release
Modified: branches/branch-4-10/mapserver/HISTORY.TXT
===================================================================
--- branches/branch-4-10/mapserver/HISTORY.TXT 2011-07-12 13:45:17 UTC (rev 11899)
+++ branches/branch-4-10/mapserver/HISTORY.TXT 2011-07-12 13:57:15 UTC (rev 11900)
@@ -9,10 +9,10 @@
For a complete change history, please see the Subversion log comments.
-Current Version:
-----------------
+Version 4.10.7 (2010-07-12)
+---------------------------
-IMPORTANT SECURITY FIXE:
+IMPORTANT SECURITY FIXES:
- Fixes to prevent SQL injections through OGC filter encoding (in WMS, WFS
and SOS), as well as a potential SQL injection in WMS time support.
@@ -20,6 +20,8 @@
enabled, with layers connecting to an SQL RDBMS backend, either
natively or via OGR (#3903)
+- Fixed potentially exploitable buffer overflows in OGC Filter Encoding
+ support (#3903)
Version 4.10.6 (2010-07-09)
---------------------------
Modified: branches/branch-4-10/mapserver/map.h
===================================================================
--- branches/branch-4-10/mapserver/map.h 2011-07-12 13:45:17 UTC (rev 11899)
+++ branches/branch-4-10/mapserver/map.h 2011-07-12 13:57:15 UTC (rev 11900)
@@ -120,7 +120,7 @@
/* General defines, wrapable */
-#define MS_VERSION "4.10.6"
+#define MS_VERSION "4.10.7"
#define MS_TRUE 1 /* logical control variables */
#define MS_FALSE 0
More information about the mapserver-commits
mailing list