From jmckenna at gatewaygeomatics.com  Tue Jun  2 11:00:50 2026
From: jmckenna at gatewaygeomatics.com (Jeff McKenna)
Date: Tue, 2 Jun 2026 15:00:50 -0300
Subject: [MapServer-users] security release available: MapServer 8.6.4
Message-ID: <965ae214-a936-469a-874c-75bf9553a751@gatewaygeomatics.com>

The MapServer team announces the immediate availability of security 
release of 8.6.4

This release contains a fix for two vulnerabilities. See the changelog 
for the list of changes ( 
https://mapserver.org/development/changelog/changelog-8-6.html#changelog-8-6-4 
).

You may also review the security advisories for this release:
  - OpenLayers viewer with WMS advisory: 
https://github.com/MapServer/MapServer/security/advisories/GHSA-xqj6-vjqr-33vv
  - PostGIS support advisory: 
https://github.com/MapServer/MapServer/security/advisories/GHSA-xp29-8wp5-wc3p

Please note: as security support for the 7.6 branch has ended, and 
branches 8.4, 8.2 & 8.0 are not supported, all users are strongly 
encouraged to upgrade to the MapServer 8.6.4 release.

Here is the direct download for today's release:

  - tar.gz: https://download.osgeo.org/mapserver/mapserver-8.6.4.tar.gz
  - zip: https://download.osgeo.org/mapserver/mapserver-8.6.4.zip

(all services on demo.mapserver.org have been upgraded as well)

Thanks,

-- 
The MapServer Team