diff --git a/conf.py b/conf.py index 8c98cbf65b6..685e39ae8af 100644 --- a/conf.py +++ b/conf.py @@ -94,7 +94,7 @@ def __getattr__(cls, name): # The short X.Y version. version = '8.6' # The full version, including alpha/beta/rc tags. -release = '8.6.1' +release = '8.6.2' # The language for content autogenerated by Sphinx. Refer to documentation # for a list of supported languages. #language = None diff --git a/en/MIGRATION_GUIDE.txt b/en/MIGRATION_GUIDE.txt index e89dda25b40..8a4a1ccd88c 100644 --- a/en/MIGRATION_GUIDE.txt +++ b/en/MIGRATION_GUIDE.txt @@ -22,6 +22,9 @@ MapServer Migration Guide MapServer 8.4 to 8.6 Migration ============================== +- The 8.6.2 release includes a fix for a security flaw in the OpenLayers viewer + (see MapServer's `Security Advisory `__) + - The 8.6.1 release includes a fix for a security flaw in the SLD parser (see CVE record: `CVE-2026-33721 `__, or see MapServer's `Security Advisory `__) diff --git a/en/announcements/announcements_archive.txt b/en/announcements/announcements_archive.txt index 5cab9b46eed..81f4d92b9c3 100644 --- a/en/announcements/announcements_archive.txt +++ b/en/announcements/announcements_archive.txt @@ -4,6 +4,22 @@ MapServer Announcement Archives ***************************************************************************** +**2026-04-19 - MapServer 8.6.2 is released** + +.. important:: + Security release available + +The maintenance release of MapServer 8.6.2 has been issued in order to fix +a security flaw in the OpenLayers viewer (with WMS 1.3.0 requests). +See the :ref:`changelog ` for the list of changes. +You may also review this `Security Advisory `__, +as well as MapServer's `Security Policy `__. +As security for the 7.6 branch has ended, and branches 8.4, 8.2 & 8.0 are not supported, +all users are strongly encouraged to upgrade to the MapServer 8.6.2 release (see the +:ref:`Migration Guide `). + +Head to :ref:`download` to obtain a copy. + **2026-03-23 - MapServer 8.6.1 is released** .. important:: diff --git a/en/development/changelog/changelog-8-6.txt b/en/development/changelog/changelog-8-6.txt index 8a7d33efa4c..bd34b7eaacc 100644 --- a/en/development/changelog/changelog-8-6.txt +++ b/en/development/changelog/changelog-8-6.txt @@ -7,6 +7,16 @@ The summary of major changes for this release can be found in the `HISTORY.md `__ file from the source directory. +.. _changelog-8-6-2: + +Changes from 8.6.1 to 8.6.2 +=========================== + +* Allow only SRS or CRS parameters for OpenLayers template output ( `#7481 `__ ) (Seth G) : `9d0d2c0 `__ +* Fix GetFeatureInfo raster queries with NaN ( `#7482 `__ ) (Seth G) : `0eade28 `__ +* Fix segmentation fault in PHP MapScriptNG ( `#7472 `__ ) (Björn Boldt) : `b35d4d4 `__ +* Add guard for empty PATH_INFO ( `#7467 `__ ) (Seth G) : `f0b0867 `__ + .. _changelog-8-6-1: Changes from 8.6.0 to 8.6.1 @@ -18,9 +28,9 @@ Changes from 8.6.0 to 8.6.1 * Define _USE_MATH_DEFINES so that M_PI is available when include math.h (Even Rouault) : `ba08945 `__ * GetFeatureInfo with IDENTIFY CLASSAUTO: take into account SYMBOL.ANCHORPOINT (Even Rouault) : `90590e5 `__ * No longer depend on GDAL's cpl_port.h MIN/MAX/ABS macros (Even Rouault) : `a2cedd5 `__ -* [Backport branch-8-6] CI: upgrade PHPUnit version to 13 ( `#7428 `__ ) (github-actions[bot]) : `e272938 `__ +* CI: upgrade PHPUnit version to 13 ( `#7428 `__ ) (github-actions[bot]) : `e272938 `__ * WCS 2.0: fix issue when input raster in a rotated pole lon/lat CRS with lon_0 > 180 ( `#7429 `__ ) (github-actions[bot]) : `ff1f23e `__ -* [Backport branch-8-6] Contour: fix 2 reprojection related issues ( `#7424 `__ ) (github-actions[bot]) : `045cced `__ +* Contour: fix 2 reprojection related issues ( `#7424 `__ ) (github-actions[bot]) : `045cced `__ * Fix memory allocation for bool ( `#7419 `__ ) (github-actions[bot]) : `9bba2a2 `__ * Build: fix build against GDAL 3.13.0dev ( `#7416 `__ ) (github-actions[bot]) : `883a7a7 `__ * UVRaster: fix WMS-Time support on layers with TILEINDEX pointing to a shapefile ( `#7411 `__ ) (github-actions[bot]) : `1f754fc `__ diff --git a/en/download.txt b/en/download.txt index eb7ed3e3a4d..3dd5f7f7493 100644 --- a/en/download.txt +++ b/en/download.txt @@ -18,7 +18,7 @@ Current Release(s) * MapServer - * **2026-03-23** MapServer-8.6.1 `tar.gz `__ | `.zip `__ | :ref:`Changelog ` + * **2026-04-19** MapServer-8.6.2 `tar.gz `__ | `.zip `__ | :ref:`Changelog ` * **2025-09-19** MapServer-8.4.1 `tar.gz `__ | `.zip `__ | :ref:`Changelog ` * **2024-09-02** MapServer-8.2.2 `tar.gz `__ | `.zip `__ | :ref:`Changelog ` * **2024-06-11** MapServer-8.0.2 `tar.gz `__ | :ref:`Changelog ` diff --git a/en/download_archives.txt b/en/download_archives.txt index d8e172047ff..c3918777d86 100644 --- a/en/download_archives.txt +++ b/en/download_archives.txt @@ -15,6 +15,8 @@ Past Releases .............................................................................. +* **2026-04-19** MapServer-8.6.2 `tar.gz `__ | `.zip `__ | :ref:`Changelog ` + * **2026-03-23** MapServer-8.6.1 `tar.gz `__ | `.zip `__ | :ref:`Changelog ` * **2025-12-03** MapServer-8.6.0 `tar.gz `__ | `.zip `__ | :ref:`Changelog ` diff --git a/en/include/announcements.inc b/en/include/announcements.inc index 3be887e36f4..9908d09c118 100644 --- a/en/include/announcements.inc +++ b/en/include/announcements.inc @@ -1,3 +1,19 @@ +**2026-04-19 - MapServer 8.6.2 is released** + +.. important:: + Security release available + +The maintenance release of MapServer 8.6.2 has been issued in order to fix +a security flaw in the OpenLayers viewer (with WMS 1.3.0 requests). +See the :ref:`changelog ` for the list of changes. +You may also review this `Security Advisory `__, +as well as MapServer's `Security Policy `__. +As security for the 7.6 branch has ended, and branches 8.4, 8.2 & 8.0 are not supported, +all users are strongly encouraged to upgrade to the MapServer 8.6.2 release (see the +:ref:`Migration Guide `). + +Head to :ref:`download` to obtain a copy. + **2026-03-23 - MapServer 8.6.1 is released** .. important::