From noreply at github.com  Mon Aug  3 03:12:52 2026
From: noreply at github.com (Naveed)
Date: Mon, 03 Aug 2026 03:12:52 -0700
Subject: [mapserver-commits] [MapServer/MapServer] 40624a: size
 msClipPolygonRect buffer for 3 emitted points...
Message-ID: <MapServer/MapServer/push/refs/heads/main/1a70b3-40624a@github.com>

  Branch: refs/heads/main
  Home:   https://github.com/MapServer/MapServer
  Commit: 40624a2b48fec104ab252542347eba870fe96717
      https://github.com/MapServer/MapServer/commit/40624a2b48fec104ab252542347eba870fe96717
  Author: Naveed <naveed at bugqore.com>
  Date:   2026-08-03 (Mon, 03 Aug 2026)

  Changed paths:
    A msautotest/misc/clip_polygon_corners.map
    A msautotest/misc/expected/clip_polygon_corners.png
    M src/mapprimitive.cpp

  Log Message:
  -----------
  size msClipPolygonRect buffer for 3 emitted points per edge (#7577)

* size msClipPolygonRect buffer for 3 emitted points per edge

* add msautotest case for polygon clipping at the rect corners

Two inline rings whose edges cut across the corners of the clip rectangle,
so a single edge emits three points and the clipped rings come out at 14 and
16 points from 6 and 7. Against the previous 2*numpoints allocation this
aborts under ASAN in msDrawShape().



To unsubscribe from these emails, change your notification settings at https://github.com/MapServer/MapServer/settings/notifications

From noreply at github.com  Mon Aug  3 03:13:08 2026
From: noreply at github.com (Naveed)
Date: Mon, 03 Aug 2026 03:13:08 -0700
Subject: [mapserver-commits] [MapServer/MapServer] df2449: size
 msClipPolygonRect buffer for 3 emitted points...
Message-ID: <MapServer/MapServer/push/refs/heads/backport-7577-to-branch-8-6/000000-e5b65d@github.com>

  Branch: refs/heads/backport-7577-to-branch-8-6
  Home:   https://github.com/MapServer/MapServer
  Commit: df2449c8e64898740995029973542681813b109a
      https://github.com/MapServer/MapServer/commit/df2449c8e64898740995029973542681813b109a
  Author: Naveed <naveed at bugqore.com>
  Date:   2026-08-03 (Mon, 03 Aug 2026)

  Changed paths:
    M src/mapprimitive.cpp

  Log Message:
  -----------
  size msClipPolygonRect buffer for 3 emitted points per edge


  Commit: e5b65db13c2e3e5d76caf5a9ad446a05e1da3ab6
      https://github.com/MapServer/MapServer/commit/e5b65db13c2e3e5d76caf5a9ad446a05e1da3ab6
  Author: Naveed <naveed at bugqore.com>
  Date:   2026-08-03 (Mon, 03 Aug 2026)

  Changed paths:
    A msautotest/misc/clip_polygon_corners.map
    A msautotest/misc/expected/clip_polygon_corners.png

  Log Message:
  -----------
  add msautotest case for polygon clipping at the rect corners

Two inline rings whose edges cut across the corners of the clip rectangle,
so a single edge emits three points and the clipped rings come out at 14 and
16 points from 6 and 7. Against the previous 2*numpoints allocation this
aborts under ASAN in msDrawShape().


Compare: https://github.com/MapServer/MapServer/compare/df2449c8e648%5E...e5b65db13c2e

To unsubscribe from these emails, change your notification settings at https://github.com/MapServer/MapServer/settings/notifications

From noreply at github.com  Mon Aug  3 06:46:08 2026
From: noreply at github.com (Zhen Yan)
Date: Mon, 03 Aug 2026 06:46:08 -0700
Subject: [mapserver-commits] [MapServer/MapServer] d28fc4: Fix WCS 2.0
 GetCoverage DoS from non-positive RESO...
Message-ID: <MapServer/MapServer/push/refs/heads/main/40624a-d28fc4@github.com>

  Branch: refs/heads/main
  Home:   https://github.com/MapServer/MapServer
  Commit: d28fc42ad364fbe64aa669ca793af6e833b372bc
      https://github.com/MapServer/MapServer/commit/d28fc42ad364fbe64aa669ca793af6e833b372bc
  Author: Zhen Yan <89853352+sdjasj at users.noreply.github.com>
  Date:   2026-08-03 (Mon, 03 Aug 2026)

  Changed paths:
    M HISTORY.md
    A msautotest/wxs/expected/wcs_20_exception_neg_resolution.xml
    A msautotest/wxs/expected/wcs_20_exception_zero_resolution.xml
    M msautotest/wxs/wcs_simple.map
    M src/mapwcs20.cpp

  Log Message:
  -----------
  Fix WCS 2.0 GetCoverage DoS from non-positive RESOLUTION (GHSA-6jr5-rc9c-p3cj) (#7575)

An unauthenticated, remotely reachable denial-of-service vulnerability
exists in MapServer's WCS 2.0 GetCoverage path. The parser accepts any
RESOLUTION value that parses as a double ? including negative, zero, and
nan ? without a > 0 / finiteness check. The resulting negative image
dimensions are then cast to size_t (huge value) inside
msSmallMalloc()/msSmallCalloc(). Allocation fails, and MapServer's
"safe" allocator terminates the process via exit(1). A single crafted
request kills the handling CGI/FastCGI worker.

Fix:
1. msWCSParseResolutionString20(): After parsing, reject non-finite
   values and values <= 0 with InvalidParameterValue. This mirrors the
   existing validation in msWCSParseScaleString20() which already
   rejects scale <= 0.
2. msWCSGetCoverage20(): Add a defensive guard that rejects width <= 0
   or height <= 0 before the existing MAXSIZE check. This catches any
   edge case where a non-positive dimension reaches this point.

Tests added in msautotest/wxs/wcs_simple.map:
- Negative RESOLUTION ? InvalidParameterValue (was exit(1))
- Zero RESOLUTION ? InvalidParameterValue (was raw alloc error)

Co-authored-by: ?? <yz534720 at antgroup.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MapServer/MapServer/settings/notifications

From noreply at github.com  Mon Aug  3 06:46:32 2026
From: noreply at github.com (github-actions[bot])
Date: Mon, 03 Aug 2026 06:46:32 -0700
Subject: [mapserver-commits] [MapServer/MapServer] 6cccc5: Fix WCS 2.0
 GetCoverage DoS from non-positive RESO...
Message-ID: <MapServer/MapServer/push/refs/heads/backport-7575-to-branch-8-6/000000-6cccc5@github.com>

  Branch: refs/heads/backport-7575-to-branch-8-6
  Home:   https://github.com/MapServer/MapServer
  Commit: 6cccc5ac00bdc8e36b36393fb4ef1e49dcdb9189
      https://github.com/MapServer/MapServer/commit/6cccc5ac00bdc8e36b36393fb4ef1e49dcdb9189
  Author: ?? <yz534720 at antgroup.com>
  Date:   2026-08-03 (Mon, 03 Aug 2026)

  Changed paths:
    M HISTORY.md
    A msautotest/wxs/expected/wcs_20_exception_neg_resolution.xml
    A msautotest/wxs/expected/wcs_20_exception_zero_resolution.xml
    M msautotest/wxs/wcs_simple.map
    M src/mapwcs20.cpp

  Log Message:
  -----------
  Fix WCS 2.0 GetCoverage DoS from non-positive RESOLUTION (GHSA-6jr5-rc9c-p3cj)

An unauthenticated, remotely reachable denial-of-service vulnerability
exists in MapServer's WCS 2.0 GetCoverage path. The parser accepts any
RESOLUTION value that parses as a double ? including negative, zero, and
nan ? without a > 0 / finiteness check. The resulting negative image
dimensions are then cast to size_t (huge value) inside
msSmallMalloc()/msSmallCalloc(). Allocation fails, and MapServer's
"safe" allocator terminates the process via exit(1). A single crafted
request kills the handling CGI/FastCGI worker.

Fix:
1. msWCSParseResolutionString20(): After parsing, reject non-finite
   values and values <= 0 with InvalidParameterValue. This mirrors the
   existing validation in msWCSParseScaleString20() which already
   rejects scale <= 0.
2. msWCSGetCoverage20(): Add a defensive guard that rejects width <= 0
   or height <= 0 before the existing MAXSIZE check. This catches any
   edge case where a non-positive dimension reaches this point.

Tests added in msautotest/wxs/wcs_simple.map:
- Negative RESOLUTION ? InvalidParameterValue (was exit(1))
- Zero RESOLUTION ? InvalidParameterValue (was raw alloc error)



To unsubscribe from these emails, change your notification settings at https://github.com/MapServer/MapServer/settings/notifications

From noreply at github.com  Mon Aug  3 06:50:13 2026
From: noreply at github.com (Zhen Yan)
Date: Mon, 03 Aug 2026 06:50:13 -0700
Subject: [mapserver-commits] [MapServer/MapServer] 7f354f: Fix SMOOTHSIA
 point-shape DoS in CGI query path (G...
Message-ID: <MapServer/MapServer/push/refs/heads/main/d28fc4-7f354f@github.com>

  Branch: refs/heads/main
  Home:   https://github.com/MapServer/MapServer
  Commit: 7f354ff84a53dd6f535b3aa35459db9319a265fd
      https://github.com/MapServer/MapServer/commit/7f354ff84a53dd6f535b3aa35459db9319a265fd
  Author: Zhen Yan <89853352+sdjasj at users.noreply.github.com>
  Date:   2026-08-03 (Mon, 03 Aug 2026)

  Changed paths:
    M HISTORY.md
    A msautotest/query/data/point.geojson
    A msautotest/query/expected/smoothsia_point_test001.txt
    A msautotest/query/smoothsia_point.map
    M src/mapsmoothing.c

  Log Message:
  -----------
  Fix SMOOTHSIA point-shape DoS in CGI query path (GHSA-33h3-f4q2-pq5q) (#7576)

An unauthenticated denial of service was possible in the CGI query path
(mode=ITEMNQUERY / ITEMQUERY). The qstring expression exposes
SMOOTHSIA([shape], ss, si); msSmoothShapeSIA() derived the per-line
smoothing window size without guarding the single-point case. For a
point feature, numpoints == 1 makes ws collapse to 0 and then to -1,
which is widened to a huge size_t in initLineWindow()'s first
allocation. msSmallMalloc() cannot satisfy it, prints an out-of-memory
message and calls exit(1), killing the worker on every request.

Fixes:
- msSmoothShapeSIA(): skip lines with fewer than 3 points (copied
  verbatim, since they cannot be smoothed) and clamp the derived window
  size to a positive odd number.
- initLineWindow(): defensively clamp a non-positive size to 1 so a
  future caller cannot re-introduce the huge-allocation crash.

Adds an msautotest regression test (query/smoothsia_point.map) that runs
SMOOTHSIA on a point layer via an itemnquery qstring and confirms the
worker no longer terminates.

Co-authored-by: ?? <yz534720 at antgroup.com>
Co-authored-by: Jeff McKenna <jmckenna at gatewaygeomatics.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MapServer/MapServer/settings/notifications

From noreply at github.com  Mon Aug  3 06:58:49 2026
From: noreply at github.com (Zhen Yan)
Date: Mon, 03 Aug 2026 06:58:49 -0700
Subject: [mapserver-commits] [MapServer/MapServer] 5f314c: Fix SMOOTHSIA
 point-shape DoS in CGI query path (G...
Message-ID: <MapServer/MapServer/push/refs/heads/branch-8-6/a6e6fe-5f314c@github.com>

  Branch: refs/heads/branch-8-6
  Home:   https://github.com/MapServer/MapServer
  Commit: 5f314cf8e3ad0e9f54205e6044324ae94a6ce886
      https://github.com/MapServer/MapServer/commit/5f314cf8e3ad0e9f54205e6044324ae94a6ce886
  Author: Zhen Yan <89853352+sdjasj at users.noreply.github.com>
  Date:   2026-08-03 (Mon, 03 Aug 2026)

  Changed paths:
    M HISTORY.md
    A msautotest/query/data/point.geojson
    A msautotest/query/expected/smoothsia_point_test001.txt
    A msautotest/query/smoothsia_point.map
    M src/mapsmoothing.c

  Log Message:
  -----------
  Fix SMOOTHSIA point-shape DoS in CGI query path (GHSA-33h3-f4q2-pq5q) (#7576)

An unauthenticated denial of service was possible in the CGI query path
(mode=ITEMNQUERY / ITEMQUERY). The qstring expression exposes
SMOOTHSIA([shape], ss, si); msSmoothShapeSIA() derived the per-line
smoothing window size without guarding the single-point case. For a
point feature, numpoints == 1 makes ws collapse to 0 and then to -1,
which is widened to a huge size_t in initLineWindow()'s first
allocation. msSmallMalloc() cannot satisfy it, prints an out-of-memory
message and calls exit(1), killing the worker on every request.

Fixes:
- msSmoothShapeSIA(): skip lines with fewer than 3 points (copied
  verbatim, since they cannot be smoothed) and clamp the derived window
  size to a positive odd number.
- initLineWindow(): defensively clamp a non-positive size to 1 so a
  future caller cannot re-introduce the huge-allocation crash.

Adds an msautotest regression test (query/smoothsia_point.map) that runs
SMOOTHSIA on a point layer via an itemnquery qstring and confirms the
worker no longer terminates.

Co-authored-by: ?? <yz534720 at antgroup.com>
Co-authored-by: Jeff McKenna <jmckenna at gatewaygeomatics.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MapServer/MapServer/settings/notifications

From noreply at github.com  Mon Aug  3 07:06:47 2026
From: noreply at github.com (github-actions[bot])
Date: Mon, 03 Aug 2026 07:06:47 -0700
Subject: [mapserver-commits] [MapServer/MapServer] 3d6ef7: [Backport
 branch-8-6] size msClipPolygonRect buffe...
Message-ID: <MapServer/MapServer/push/refs/heads/branch-8-6/5f314c-3d6ef7@github.com>

  Branch: refs/heads/branch-8-6
  Home:   https://github.com/MapServer/MapServer
  Commit: 3d6ef77735c61fe43dc23a9266eb9db0dfe92ce1
      https://github.com/MapServer/MapServer/commit/3d6ef77735c61fe43dc23a9266eb9db0dfe92ce1
  Author: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
  Date:   2026-08-03 (Mon, 03 Aug 2026)

  Changed paths:
    A msautotest/misc/clip_polygon_corners.map
    A msautotest/misc/expected/clip_polygon_corners.png
    M src/mapprimitive.cpp

  Log Message:
  -----------
  [Backport branch-8-6] size msClipPolygonRect buffer for 3 emitted points per edge (#7588)

* size msClipPolygonRect buffer for 3 emitted points per edge

* add msautotest case for polygon clipping at the rect corners

Two inline rings whose edges cut across the corners of the clip rectangle,
so a single edge emits three points and the clipped rings come out at 14 and
16 points from 6 and 7. Against the previous 2*numpoints allocation this
aborts under ASAN in msDrawShape().

---------

Co-authored-by: Naveed <naveed at bugqore.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MapServer/MapServer/settings/notifications

From noreply at github.com  Mon Aug  3 07:06:48 2026
From: noreply at github.com (Jeff McKenna)
Date: Mon, 03 Aug 2026 07:06:48 -0700
Subject: [mapserver-commits] [MapServer/MapServer]
Message-ID: <MapServer/MapServer/push/refs/heads/backport-7577-to-branch-8-6/e5b65d-000000@github.com>

  Branch: refs/heads/backport-7577-to-branch-8-6
  Home:   https://github.com/MapServer/MapServer

To unsubscribe from these emails, change your notification settings at https://github.com/MapServer/MapServer/settings/notifications

From noreply at github.com  Mon Aug  3 10:34:14 2026
From: noreply at github.com (dependabot[bot])
Date: Mon, 03 Aug 2026 10:34:14 -0700
Subject: [mapserver-commits] [MapServer/MapServer] fedd87: build(deps): bump
 github/codeql-action from 4 to 4...
Message-ID: <MapServer/MapServer/push/refs/heads/dependabot/github_actions/github/codeql-action-4.37.4/000000-fedd87@github.com>

  Branch: refs/heads/dependabot/github_actions/github/codeql-action-4.37.4
  Home:   https://github.com/MapServer/MapServer
  Commit: fedd87a04f79559a5c05f78ca68adedb601c0c77
      https://github.com/MapServer/MapServer/commit/fedd87a04f79559a5c05f78ca68adedb601c0c77
  Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
  Date:   2026-08-03 (Mon, 03 Aug 2026)

  Changed paths:
    M .github/workflows/codeql.yml

  Log Message:
  -----------
  build(deps): bump github/codeql-action from 4 to 4.37.4

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4 to 4.37.4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v4...v4.37.4)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.37.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support at github.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MapServer/MapServer/settings/notifications

From noreply at github.com  Mon Aug  3 10:57:20 2026
From: noreply at github.com (Jeff McKenna)
Date: Mon, 03 Aug 2026 10:57:20 -0700
Subject: [mapserver-commits] [MapServer/MapServer] 5f314c: Fix SMOOTHSIA
 point-shape DoS in CGI query path (G...
Message-ID: <MapServer/MapServer/push/refs/heads/backport-7575-to-branch-8-6/6cccc5-7685c4@github.com>

  Branch: refs/heads/backport-7575-to-branch-8-6
  Home:   https://github.com/MapServer/MapServer
  Commit: 5f314cf8e3ad0e9f54205e6044324ae94a6ce886
      https://github.com/MapServer/MapServer/commit/5f314cf8e3ad0e9f54205e6044324ae94a6ce886
  Author: Zhen Yan <89853352+sdjasj at users.noreply.github.com>
  Date:   2026-08-03 (Mon, 03 Aug 2026)

  Changed paths:
    M HISTORY.md
    A msautotest/query/data/point.geojson
    A msautotest/query/expected/smoothsia_point_test001.txt
    A msautotest/query/smoothsia_point.map
    M src/mapsmoothing.c

  Log Message:
  -----------
  Fix SMOOTHSIA point-shape DoS in CGI query path (GHSA-33h3-f4q2-pq5q) (#7576)

An unauthenticated denial of service was possible in the CGI query path
(mode=ITEMNQUERY / ITEMQUERY). The qstring expression exposes
SMOOTHSIA([shape], ss, si); msSmoothShapeSIA() derived the per-line
smoothing window size without guarding the single-point case. For a
point feature, numpoints == 1 makes ws collapse to 0 and then to -1,
which is widened to a huge size_t in initLineWindow()'s first
allocation. msSmallMalloc() cannot satisfy it, prints an out-of-memory
message and calls exit(1), killing the worker on every request.

Fixes:
- msSmoothShapeSIA(): skip lines with fewer than 3 points (copied
  verbatim, since they cannot be smoothed) and clamp the derived window
  size to a positive odd number.
- initLineWindow(): defensively clamp a non-positive size to 1 so a
  future caller cannot re-introduce the huge-allocation crash.

Adds an msautotest regression test (query/smoothsia_point.map) that runs
SMOOTHSIA on a point layer via an itemnquery qstring and confirms the
worker no longer terminates.

Co-authored-by: ?? <yz534720 at antgroup.com>
Co-authored-by: Jeff McKenna <jmckenna at gatewaygeomatics.com>


  Commit: 3d6ef77735c61fe43dc23a9266eb9db0dfe92ce1
      https://github.com/MapServer/MapServer/commit/3d6ef77735c61fe43dc23a9266eb9db0dfe92ce1
  Author: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
  Date:   2026-08-03 (Mon, 03 Aug 2026)

  Changed paths:
    A msautotest/misc/clip_polygon_corners.map
    A msautotest/misc/expected/clip_polygon_corners.png
    M src/mapprimitive.cpp

  Log Message:
  -----------
  [Backport branch-8-6] size msClipPolygonRect buffer for 3 emitted points per edge (#7588)

* size msClipPolygonRect buffer for 3 emitted points per edge

* add msautotest case for polygon clipping at the rect corners

Two inline rings whose edges cut across the corners of the clip rectangle,
so a single edge emits three points and the clipped rings come out at 14 and
16 points from 6 and 7. Against the previous 2*numpoints allocation this
aborts under ASAN in msDrawShape().

---------

Co-authored-by: Naveed <naveed at bugqore.com>


  Commit: 7685c4f6410fadba053bca7d5ba6da2156e53d67
      https://github.com/MapServer/MapServer/commit/7685c4f6410fadba053bca7d5ba6da2156e53d67
  Author: Jeff McKenna <jmckenna at gatewaygeomatics.com>
  Date:   2026-08-03 (Mon, 03 Aug 2026)

  Changed paths:
    M HISTORY.md
    A msautotest/misc/clip_polygon_corners.map
    A msautotest/misc/expected/clip_polygon_corners.png
    A msautotest/query/data/point.geojson
    A msautotest/query/expected/smoothsia_point_test001.txt
    A msautotest/query/smoothsia_point.map
    M src/mapprimitive.cpp
    M src/mapsmoothing.c

  Log Message:
  -----------
  Merge branch 'branch-8-6' into backport-7575-to-branch-8-6


Compare: https://github.com/MapServer/MapServer/compare/6cccc5ac00bd...7685c4f6410f

To unsubscribe from these emails, change your notification settings at https://github.com/MapServer/MapServer/settings/notifications

From noreply at github.com  Mon Aug  3 13:40:46 2026
From: noreply at github.com (github-actions[bot])
Date: Mon, 03 Aug 2026 13:40:46 -0700
Subject: [mapserver-commits] [MapServer/MapServer] 244b6b: Fix WCS 2.0
 GetCoverage DoS from non-positive RESO...
Message-ID: <MapServer/MapServer/push/refs/heads/branch-8-6/3d6ef7-244b6b@github.com>

  Branch: refs/heads/branch-8-6
  Home:   https://github.com/MapServer/MapServer
  Commit: 244b6b17e57b924681e0eb71a55d0eb6e657b091
      https://github.com/MapServer/MapServer/commit/244b6b17e57b924681e0eb71a55d0eb6e657b091
  Author: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
  Date:   2026-08-03 (Mon, 03 Aug 2026)

  Changed paths:
    A msautotest/wxs/expected/wcs_20_exception_neg_resolution.xml
    A msautotest/wxs/expected/wcs_20_exception_zero_resolution.xml
    M msautotest/wxs/wcs_simple.map
    M src/mapwcs20.cpp

  Log Message:
  -----------
  Fix WCS 2.0 GetCoverage DoS from non-positive RESOLUTION (GHSA-6jr5-rc9c-p3cj) (#7589)

An unauthenticated, remotely reachable denial-of-service vulnerability
exists in MapServer's WCS 2.0 GetCoverage path. The parser accepts any
RESOLUTION value that parses as a double ? including negative, zero, and
nan ? without a > 0 / finiteness check. The resulting negative image
dimensions are then cast to size_t (huge value) inside
msSmallMalloc()/msSmallCalloc(). Allocation fails, and MapServer's
"safe" allocator terminates the process via exit(1). A single crafted
request kills the handling CGI/FastCGI worker.

Fix:
1. msWCSParseResolutionString20(): After parsing, reject non-finite
   values and values <= 0 with InvalidParameterValue. This mirrors the
   existing validation in msWCSParseScaleString20() which already
   rejects scale <= 0.
2. msWCSGetCoverage20(): Add a defensive guard that rejects width <= 0
   or height <= 0 before the existing MAXSIZE check. This catches any
   edge case where a non-positive dimension reaches this point.

Tests added in msautotest/wxs/wcs_simple.map:
- Negative RESOLUTION ? InvalidParameterValue (was exit(1))
- Zero RESOLUTION ? InvalidParameterValue (was raw alloc error)

Co-authored-by: ?? <yz534720 at antgroup.com>
Co-authored-by: Jeff McKenna <jmckenna at gatewaygeomatics.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MapServer/MapServer/settings/notifications

From noreply at github.com  Mon Aug  3 13:40:48 2026
From: noreply at github.com (Jeff McKenna)
Date: Mon, 03 Aug 2026 13:40:48 -0700
Subject: [mapserver-commits] [MapServer/MapServer]
Message-ID: <MapServer/MapServer/push/refs/heads/backport-7575-to-branch-8-6/7685c4-000000@github.com>

  Branch: refs/heads/backport-7575-to-branch-8-6
  Home:   https://github.com/MapServer/MapServer

To unsubscribe from these emails, change your notification settings at https://github.com/MapServer/MapServer/settings/notifications

From noreply at github.com  Tue Aug  4 03:15:52 2026
From: noreply at github.com (dependabot[bot])
Date: Tue, 04 Aug 2026 03:15:52 -0700
Subject: [mapserver-commits] [MapServer/MapServer] 76e575: build(deps): bump
 github/codeql-action from 4 to 4...
Message-ID: <MapServer/MapServer/push/refs/heads/main/7f354f-76e575@github.com>

  Branch: refs/heads/main
  Home:   https://github.com/MapServer/MapServer
  Commit: 76e57518a0d7148fa09a3762c40a7153901bc947
      https://github.com/MapServer/MapServer/commit/76e57518a0d7148fa09a3762c40a7153901bc947
  Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
  Date:   2026-08-04 (Tue, 04 Aug 2026)

  Changed paths:
    M .github/workflows/codeql.yml

  Log Message:
  -----------
  build(deps): bump github/codeql-action from 4 to 4.37.4 (#7590)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4 to 4.37.4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v4...v4.37.4)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.37.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support at github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MapServer/MapServer/settings/notifications

From noreply at github.com  Tue Aug  4 03:15:54 2026
From: noreply at github.com (Jeff McKenna)
Date: Tue, 04 Aug 2026 03:15:54 -0700
Subject: [mapserver-commits] [MapServer/MapServer]
Message-ID: <MapServer/MapServer/push/refs/heads/dependabot/github_actions/github/codeql-action-4.37.4/fedd87-000000@github.com>

  Branch: refs/heads/dependabot/github_actions/github/codeql-action-4.37.4
  Home:   https://github.com/MapServer/MapServer

To unsubscribe from these emails, change your notification settings at https://github.com/MapServer/MapServer/settings/notifications

From noreply at github.com  Sat Aug  8 04:27:32 2026
From: noreply at github.com (Naveed)
Date: Sat, 08 Aug 2026 04:27:32 -0700
Subject: [mapserver-commits] [MapServer/MapServer] 43d12f: bound wms
 exception response copy to result_size (...
Message-ID: <MapServer/MapServer/push/refs/heads/main/76e575-43d12f@github.com>

  Branch: refs/heads/main
  Home:   https://github.com/MapServer/MapServer
  Commit: 43d12f80b9b0a74ef3a8b491d0ae3f2afc23e97d
      https://github.com/MapServer/MapServer/commit/43d12f80b9b0a74ef3a8b491d0ae3f2afc23e97d
  Author: Naveed <naveed at bugqore.com>
  Date:   2026-08-08 (Sat, 08 Aug 2026)

  Changed paths:
    M src/mapwmslayer.c

  Log Message:
  -----------
  bound wms exception response copy to result_size (#7578)



To unsubscribe from these emails, change your notification settings at https://github.com/MapServer/MapServer/settings/notifications

From noreply at github.com  Sat Aug  8 04:27:51 2026
From: noreply at github.com (Naveed)
Date: Sat, 08 Aug 2026 04:27:51 -0700
Subject: [mapserver-commits] [MapServer/MapServer] fde3f5: bound wms
 exception response copy to result_size
Message-ID: <MapServer/MapServer/push/refs/heads/backport-7578-to-branch-8-6/000000-fde3f5@github.com>

  Branch: refs/heads/backport-7578-to-branch-8-6
  Home:   https://github.com/MapServer/MapServer
  Commit: fde3f5dd28d34c8e35b532245af6ec018a23d367
      https://github.com/MapServer/MapServer/commit/fde3f5dd28d34c8e35b532245af6ec018a23d367
  Author: Naveed <naveed at bugqore.com>
  Date:   2026-08-08 (Sat, 08 Aug 2026)

  Changed paths:
    M src/mapwmslayer.c

  Log Message:
  -----------
  bound wms exception response copy to result_size



To unsubscribe from these emails, change your notification settings at https://github.com/MapServer/MapServer/settings/notifications

From noreply at github.com  Sat Aug  8 08:35:35 2026
From: noreply at github.com (github-actions[bot])
Date: Sat, 08 Aug 2026 08:35:35 -0700
Subject: [mapserver-commits] [MapServer/MapServer] 18171b: bound wms
 exception response copy to result_size (...
Message-ID: <MapServer/MapServer/push/refs/heads/branch-8-6/244b6b-18171b@github.com>

  Branch: refs/heads/branch-8-6
  Home:   https://github.com/MapServer/MapServer
  Commit: 18171bd8d31abcb6875d8a920f51371841d087ea
      https://github.com/MapServer/MapServer/commit/18171bd8d31abcb6875d8a920f51371841d087ea
  Author: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
  Date:   2026-08-08 (Sat, 08 Aug 2026)

  Changed paths:
    M src/mapwmslayer.c

  Log Message:
  -----------
  bound wms exception response copy to result_size (#7592)

Co-authored-by: Naveed <naveed at bugqore.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MapServer/MapServer/settings/notifications

From noreply at github.com  Sat Aug  8 08:35:36 2026
From: noreply at github.com (Seth G)
Date: Sat, 08 Aug 2026 08:35:36 -0700
Subject: [mapserver-commits] [MapServer/MapServer]
Message-ID: <MapServer/MapServer/push/refs/heads/backport-7578-to-branch-8-6/fde3f5-000000@github.com>

  Branch: refs/heads/backport-7578-to-branch-8-6
  Home:   https://github.com/MapServer/MapServer

To unsubscribe from these emails, change your notification settings at https://github.com/MapServer/MapServer/settings/notifications

From noreply at github.com  Mon Aug 10 10:36:13 2026
From: noreply at github.com (dependabot[bot])
Date: Mon, 10 Aug 2026 10:36:13 -0700
Subject: [mapserver-commits] [MapServer/MapServer] 36478a: build(deps): bump
 github/codeql-action from 4.37.4...
Message-ID: <MapServer/MapServer/push/refs/heads/dependabot/github_actions/github/codeql-action-4.37.6/000000-36478a@github.com>

  Branch: refs/heads/dependabot/github_actions/github/codeql-action-4.37.6
  Home:   https://github.com/MapServer/MapServer
  Commit: 36478a45d2c56c359eef9212def4ae70f95cd4a8
      https://github.com/MapServer/MapServer/commit/36478a45d2c56c359eef9212def4ae70f95cd4a8
  Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
  Date:   2026-08-10 (Mon, 10 Aug 2026)

  Changed paths:
    M .github/workflows/codeql.yml

  Log Message:
  -----------
  build(deps): bump github/codeql-action from 4.37.4 to 4.37.6

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.37.4 to 4.37.6.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v4.37.4...v4.37.6)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.37.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support at github.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MapServer/MapServer/settings/notifications

From noreply at github.com  Tue Aug 11 04:37:47 2026
From: noreply at github.com (Johannes Eberenz)
Date: Tue, 11 Aug 2026 04:37:47 -0700
Subject: [mapserver-commits] [MapServer/MapServer] 3abd4d: mapcairo.c: avoid
 double scaling of SVG symbols (f...
Message-ID: <MapServer/MapServer/push/refs/heads/main/43d12f-3abd4d@github.com>

  Branch: refs/heads/main
  Home:   https://github.com/MapServer/MapServer
  Commit: 3abd4dc9d5dc8c0eb834e2db509e46636f6d4c3c
      https://github.com/MapServer/MapServer/commit/3abd4dc9d5dc8c0eb834e2db509e46636f6d4c3c
  Author: Johannes Eberenz <johanez at users.noreply.github.com>
  Date:   2026-08-11 (Tue, 11 Aug 2026)

  Changed paths:
    M msautotest/renderers/expected/line_marker_svg.png
    M msautotest/renderers/expected/point_svg.png
    M msautotest/sld/expected/map_linemark.png
    M msautotest/sld/expected/sld_linemark.png
    M msautotest/sld/expected/sld_url_linemark.png
    M msautotest/wxs/expected/point_symbol_identification_anchor.png
    M msautotest/wxs/expected/wms_get_map_symbol_ext_svg_sld.png
    M msautotest/wxs/point_symbol_identification.map
    M src/mapcairo.c

  Log Message:
  -----------
  mapcairo.c: avoid double scaling of SVG symbols (fixes: #7430) (#7583)

* mapcairo.c: revert to svg_handle_render_cairo() (fixes: #7430)

Since 8.6, rsvg_handle_render_cairo() (marked as depriceated) was replaced with the newer rsvg_handle_render_document(), however this caused scaling issues (#7430). This PR implements a simple workaround by reverting back to the legacy function, solving the issues.

* fix svg scaling by using rsvg_handle_render_document without cairo_scale

* correctly rendered test result

* update test coordinates for correctly rendeted SVG

* use symbol size for rsvg_handle_render_document and check vor librscg version

This allows cairo and older rsvgr rendering with scale_cairo>
Also fixed incorrect test png file name

* update expected results

---------

Co-authored-by: Jeff McKenna <jmckenna at gatewaygeomatics.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MapServer/MapServer/settings/notifications

From noreply at github.com  Tue Aug 11 04:38:11 2026
From: noreply at github.com (Jeff McKenna)
Date: Tue, 11 Aug 2026 04:38:11 -0700
Subject: [mapserver-commits] [MapServer/MapServer] 842039: mapcairo.c:
 revert to svg_handle_render_cairo() (f...
Message-ID: <MapServer/MapServer/push/refs/heads/backport-7583-to-branch-8-6/000000-d13097@github.com>

  Branch: refs/heads/backport-7583-to-branch-8-6
  Home:   https://github.com/MapServer/MapServer
  Commit: 842039a05077a7dd8786051f051142f0b1fdd192
      https://github.com/MapServer/MapServer/commit/842039a05077a7dd8786051f051142f0b1fdd192
  Author: Johannes Eberenz <johannes.eberenz at alliander.com>
  Date:   2026-08-11 (Tue, 11 Aug 2026)

  Changed paths:
    M src/mapcairo.c

  Log Message:
  -----------
  mapcairo.c: revert to svg_handle_render_cairo() (fixes: #7430)

Since 8.6, rsvg_handle_render_cairo() (marked as depriceated) was replaced with the newer rsvg_handle_render_document(), however this caused scaling issues (#7430). This PR implements a simple workaround by reverting back to the legacy function, solving the issues.


  Commit: 58e503d351c5012ac626284abc98f71d911f1906
      https://github.com/MapServer/MapServer/commit/58e503d351c5012ac626284abc98f71d911f1906
  Author: Johannes Eberenz <johannes.eberenz at alliander.com>
  Date:   2026-08-11 (Tue, 11 Aug 2026)

  Changed paths:
    M src/mapcairo.c

  Log Message:
  -----------
  fix svg scaling by using rsvg_handle_render_document without cairo_scale


  Commit: 84cafdc9fb3afa3552814031ec722e0f93b055cf
      https://github.com/MapServer/MapServer/commit/84cafdc9fb3afa3552814031ec722e0f93b055cf
  Author: Johannes Eberenz <johannes.eberenz at alliander.com>
  Date:   2026-08-11 (Tue, 11 Aug 2026)

  Changed paths:
    M msautotest/sld/expected/map_linemark.png

  Log Message:
  -----------
  correctly rendered test result


  Commit: 91f552a6be64a0c81aa950e7d329117168db3066
      https://github.com/MapServer/MapServer/commit/91f552a6be64a0c81aa950e7d329117168db3066
  Author: Johannes Eberenz <johannes.eberenz at alliander.com>
  Date:   2026-08-11 (Tue, 11 Aug 2026)

  Changed paths:
    A msautotest/wxs/expected/point_symbol_identification_anchor copy.png
    M msautotest/wxs/point_symbol_identification.map

  Log Message:
  -----------
  update test coordinates for correctly rendeted SVG


  Commit: 71943461c4bbc7b4b0c7256eb522ffa0bb718a0b
      https://github.com/MapServer/MapServer/commit/71943461c4bbc7b4b0c7256eb522ffa0bb718a0b
  Author: Johannes Eberenz <johannes.eberenz at alliander.com>
  Date:   2026-08-11 (Tue, 11 Aug 2026)

  Changed paths:
    R msautotest/wxs/expected/point_symbol_identification_anchor copy.png
    M msautotest/wxs/expected/point_symbol_identification_anchor.png
    M src/mapcairo.c

  Log Message:
  -----------
  use symbol size for rsvg_handle_render_document and check vor librscg version

This allows cairo and older rsvgr rendering with scale_cairo>
Also fixed incorrect test png file name


  Commit: d1309757bd92ca17fb784bfe715e58251ec5dfaf
      https://github.com/MapServer/MapServer/commit/d1309757bd92ca17fb784bfe715e58251ec5dfaf
  Author: Jeff McKenna <jmckenna at gatewaygeomatics.com>
  Date:   2026-08-11 (Tue, 11 Aug 2026)

  Changed paths:
    M msautotest/renderers/expected/line_marker_svg.png
    M msautotest/renderers/expected/point_svg.png
    M msautotest/sld/expected/map_linemark.png
    M msautotest/sld/expected/sld_linemark.png
    M msautotest/sld/expected/sld_url_linemark.png
    M msautotest/wxs/expected/wms_get_map_symbol_ext_svg_sld.png

  Log Message:
  -----------
  update expected results


Compare: https://github.com/MapServer/MapServer/compare/842039a05077%5E...d1309757bd92

To unsubscribe from these emails, change your notification settings at https://github.com/MapServer/MapServer/settings/notifications

From noreply at github.com  Tue Aug 11 09:40:07 2026
From: noreply at github.com (dependabot[bot])
Date: Tue, 11 Aug 2026 09:40:07 -0700
Subject: [mapserver-commits] [MapServer/MapServer] c36491: build(deps): bump
 github/codeql-action from 4.37.4...
Message-ID: <MapServer/MapServer/push/refs/heads/main/3abd4d-c36491@github.com>

  Branch: refs/heads/main
  Home:   https://github.com/MapServer/MapServer
  Commit: c36491849326d35cf8eb9abab80064cd80e00a6f
      https://github.com/MapServer/MapServer/commit/c36491849326d35cf8eb9abab80064cd80e00a6f
  Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
  Date:   2026-08-11 (Tue, 11 Aug 2026)

  Changed paths:
    M .github/workflows/codeql.yml

  Log Message:
  -----------
  build(deps): bump github/codeql-action from 4.37.4 to 4.37.6 (#7594)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.37.4 to 4.37.6.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v4.37.4...v4.37.6)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.37.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support at github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MapServer/MapServer/settings/notifications

From noreply at github.com  Tue Aug 11 09:40:08 2026
From: noreply at github.com (Jeff McKenna)
Date: Tue, 11 Aug 2026 09:40:08 -0700
Subject: [mapserver-commits] [MapServer/MapServer]
Message-ID: <MapServer/MapServer/push/refs/heads/dependabot/github_actions/github/codeql-action-4.37.6/36478a-000000@github.com>

  Branch: refs/heads/dependabot/github_actions/github/codeql-action-4.37.6
  Home:   https://github.com/MapServer/MapServer

To unsubscribe from these emails, change your notification settings at https://github.com/MapServer/MapServer/settings/notifications

From noreply at github.com  Wed Aug 12 02:30:08 2026
From: noreply at github.com (github-actions[bot])
Date: Wed, 12 Aug 2026 02:30:08 -0700
Subject: [mapserver-commits] [MapServer/MapServer] fb438a: [Backport
 branch-8-6] mapcairo.c: avoid double sca...
Message-ID: <MapServer/MapServer/push/refs/heads/branch-8-6/18171b-fb438a@github.com>

  Branch: refs/heads/branch-8-6
  Home:   https://github.com/MapServer/MapServer
  Commit: fb438a846e806b6ca73334480d9fcf30ff8f8d7e
      https://github.com/MapServer/MapServer/commit/fb438a846e806b6ca73334480d9fcf30ff8f8d7e
  Author: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
  Date:   2026-08-12 (Wed, 12 Aug 2026)

  Changed paths:
    M msautotest/renderers/expected/line_marker_svg.png
    M msautotest/renderers/expected/point_svg.png
    M msautotest/sld/expected/map_linemark.png
    M msautotest/sld/expected/sld_linemark.png
    M msautotest/sld/expected/sld_url_linemark.png
    M msautotest/wxs/expected/point_symbol_identification_anchor.png
    M msautotest/wxs/expected/wms_get_map_symbol_ext_svg_sld.png
    M msautotest/wxs/point_symbol_identification.map
    M src/mapcairo.c

  Log Message:
  -----------
  [Backport branch-8-6] mapcairo.c: avoid double scaling of SVG symbols (fixes: #7430) (#7595)

* mapcairo.c: revert to svg_handle_render_cairo() (fixes: #7430)

Since 8.6, rsvg_handle_render_cairo() (marked as depriceated) was replaced with the newer rsvg_handle_render_document(), however this caused scaling issues (#7430). This PR implements a simple workaround by reverting back to the legacy function, solving the issues.

* fix svg scaling by using rsvg_handle_render_document without cairo_scale

* correctly rendered test result

* update test coordinates for correctly rendeted SVG

* use symbol size for rsvg_handle_render_document and check vor librscg version

This allows cairo and older rsvgr rendering with scale_cairo>
Also fixed incorrect test png file name

* update expected results

---------

Co-authored-by: Johannes Eberenz <johannes.eberenz at alliander.com>
Co-authored-by: Jeff McKenna <jmckenna at gatewaygeomatics.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MapServer/MapServer/settings/notifications

From noreply at github.com  Wed Aug 12 02:30:10 2026
From: noreply at github.com (Jeff McKenna)
Date: Wed, 12 Aug 2026 02:30:10 -0700
Subject: [mapserver-commits] [MapServer/MapServer]
Message-ID: <MapServer/MapServer/push/refs/heads/backport-7583-to-branch-8-6/d13097-000000@github.com>

  Branch: refs/heads/backport-7583-to-branch-8-6
  Home:   https://github.com/MapServer/MapServer

To unsubscribe from these emails, change your notification settings at https://github.com/MapServer/MapServer/settings/notifications

From noreply at github.com  Mon Aug 17 11:53:27 2026
From: noreply at github.com (dependabot[bot])
Date: Mon, 17 Aug 2026 11:53:27 -0700
Subject: [mapserver-commits] [MapServer/MapServer] d26516: build(deps): bump
 github/codeql-action from 4.37.6...
Message-ID: <MapServer/MapServer/push/refs/heads/dependabot/github_actions/github/codeql-action-4.37.7/000000-d26516@github.com>

  Branch: refs/heads/dependabot/github_actions/github/codeql-action-4.37.7
  Home:   https://github.com/MapServer/MapServer
  Commit: d2651651e67a3171cb7aa6c1a2e6cce3a0cddb71
      https://github.com/MapServer/MapServer/commit/d2651651e67a3171cb7aa6c1a2e6cce3a0cddb71
  Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
  Date:   2026-08-17 (Mon, 17 Aug 2026)

  Changed paths:
    M .github/workflows/codeql.yml

  Log Message:
  -----------
  build(deps): bump github/codeql-action from 4.37.6 to 4.37.7

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.37.6 to 4.37.7.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v4.37.6...v4.37.7)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.37.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support at github.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MapServer/MapServer/settings/notifications