update with results of commit MapServer/MapServer-documentation@74a325b

Author: MapServer deploybot

MIGRATION_GUIDE.html

@@ -5,7 +5,7 @@
     <meta charset="utf-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />
 
-    <title>MapServer Migration Guide &#8212; MapServer 8.6.4 documentation</title>
+    <title>MapServer Migration Guide &#8212; MapServer 8.6.5 documentation</title>
     <link rel="stylesheet" type="text/css" href="_static/pygments.css?v=03e43079" />
     <link rel="stylesheet" type="text/css" href="_static/sphinx.css?v=48f05237" />
     <link rel="stylesheet" type="text/css" href="_static/copybutton.css?v=76b2166b" />
@@ -15,7 +15,7 @@
 
     <script src="_static/jquery.js?v=5d32c60e"></script>
     <script src="_static/_sphinx_javascript_frameworks_compat.js?v=2cd50e6c"></script>
-    <script src="_static/documentation_options.js?v=f59c4a7a"></script>
+    <script src="_static/documentation_options.js?v=51e4ce63"></script>
     <script src="_static/doctools.js?v=fd6eb6e6"></script>
     <script src="_static/sphinx_highlight.js?v=6ffebe34"></script>
     <script src="_static/clipboard.min.js?v=a7894cd8"></script>
@@ -112,7 +112,7 @@ <h3>Navigation</h3>
           <a href="mapcache/coverage.html" title="Coverage Analyzer"
              accesskey="P">previous</a> |</li>
         <li class="nav-item nav-item-0"><a href="index.html">Home</a> &#187;</li>
-          <li class="nav-item nav-item-1"><a href="documentation.html" accesskey="U">MapServer 8.6.4 Documentation</a> &#187;</li>
+          <li class="nav-item nav-item-1"><a href="documentation.html" accesskey="U">MapServer 8.6.5 Documentation</a> &#187;</li>
         <li class="nav-item nav-item-this"><a href="">MapServer Migration Guide</a></li> 
       </ul>
     </div>
@@ -161,6 +161,16 @@ <h3>Navigation</h3>
 <section id="mapserver-8-4-to-8-6-migration">
 <span id="migration-8-6"></span><h2><a class="toc-backref" href="#table-of-contents" role="doc-backlink">MapServer 8.4 to 8.6 Migration</a><a class="headerlink" href="#mapserver-8-4-to-8-6-migration" title="Link to this heading">¶</a></h2>
 <ul>
+<li><p>The 8.6.5 release includes fixes for six vulnerabilities, see the advisories:</p>
+<ul class="simple">
+<li><p><a class="reference external" href="https://github.com/MapServer/MapServer/security/advisories/GHSA-288j-mhpj-gmmr">OGCAPI Features support</a> advisory</p></li>
+<li><p><a class="reference external" href="https://github.com/MapServer/MapServer/security/advisories/GHSA-35qh-49hm-5rcx">WCS support</a> advisory</p></li>
+<li><p><a class="reference external" href="https://github.com/MapServer/MapServer/security/advisories/GHSA-52rr-p4x5-2x6x">OpenLayers viewer with WMS</a> advisory</p></li>
+<li><p><a class="reference external" href="https://github.com/MapServer/MapServer/security/advisories/GHSA-4mwc-qc95-5959">WMS GetLegendGraphic support</a> advisory</p></li>
+<li><p><a class="reference external" href="https://github.com/MapServer/MapServer/security/advisories/GHSA-7624-4mwh-9cxr">MySQL JOIN support</a> advisory</p></li>
+<li><p><a class="reference external" href="https://github.com/MapServer/MapServer/security/advisories/GHSA-m3xh-ccmh-x8rw">PostgreSQL JOIN support</a> advisory</p></li>
+</ul>
+</li>
 <li><p>The 8.6.4 release includes fixes for two vulnerabilities, see the advisories:</p>
 <ul class="simple">
 <li><p><a class="reference external" href="https://github.com/MapServer/MapServer/security/advisories/GHSA-xqj6-vjqr-33vv">OpenLayers viewer with WMS</a> advisory</p></li>
@@ -1584,7 +1594,7 @@ <h3>Navigation</h3>
           <a href="mapcache/coverage.html" title="Coverage Analyzer"
              >previous</a> |</li>
         <li class="nav-item nav-item-0"><a href="index.html">Home</a> &#187;</li>
-          <li class="nav-item nav-item-1"><a href="documentation.html" >MapServer 8.6.4 Documentation</a> &#187;</li>
+          <li class="nav-item nav-item-1"><a href="documentation.html" >MapServer 8.6.5 Documentation</a> &#187;</li>
         <li class="nav-item nav-item-this"><a href="">MapServer Migration Guide</a></li> 
       </ul>
     </div>

_modules/index.html

@@ -4,7 +4,7 @@
   <head>
     <meta charset="utf-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <title>Overview: module code &#8212; MapServer 8.6.4 documentation</title>
+    <title>Overview: module code &#8212; MapServer 8.6.5 documentation</title>
     <link rel="stylesheet" type="text/css" href="../_static/pygments.css?v=03e43079" />
     <link rel="stylesheet" type="text/css" href="../_static/sphinx.css?v=48f05237" />
     <link rel="stylesheet" type="text/css" href="../_static/copybutton.css?v=76b2166b" />
@@ -14,7 +14,7 @@
 
     <script src="../_static/jquery.js?v=5d32c60e"></script>
     <script src="../_static/_sphinx_javascript_frameworks_compat.js?v=2cd50e6c"></script>
-    <script src="../_static/documentation_options.js?v=f59c4a7a"></script>
+    <script src="../_static/documentation_options.js?v=51e4ce63"></script>
     <script src="../_static/doctools.js?v=fd6eb6e6"></script>
     <script src="../_static/sphinx_highlight.js?v=6ffebe34"></script>
     <script src="../_static/clipboard.min.js?v=a7894cd8"></script>

_modules/mapscript/mapscript.html

@@ -4,7 +4,7 @@
   <head>
     <meta charset="utf-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <title>mapscript.mapscript &#8212; MapServer 8.6.4 documentation</title>
+    <title>mapscript.mapscript &#8212; MapServer 8.6.5 documentation</title>
     <link rel="stylesheet" type="text/css" href="../../_static/pygments.css?v=03e43079" />
     <link rel="stylesheet" type="text/css" href="../../_static/sphinx.css?v=48f05237" />
     <link rel="stylesheet" type="text/css" href="../../_static/copybutton.css?v=76b2166b" />
@@ -14,7 +14,7 @@
 
     <script src="../../_static/jquery.js?v=5d32c60e"></script>
     <script src="../../_static/_sphinx_javascript_frameworks_compat.js?v=2cd50e6c"></script>
-    <script src="../../_static/documentation_options.js?v=f59c4a7a"></script>
+    <script src="../../_static/documentation_options.js?v=51e4ce63"></script>
     <script src="../../_static/doctools.js?v=fd6eb6e6"></script>
     <script src="../../_static/sphinx_highlight.js?v=6ffebe34"></script>
     <script src="../../_static/clipboard.min.js?v=a7894cd8"></script>

_sources/MIGRATION_GUIDE.txt

@@ -22,6 +22,15 @@ MapServer Migration Guide
 MapServer 8.4 to 8.6 Migration
 ==============================
 
+- The 8.6.5 release includes fixes for six vulnerabilities, see the advisories:
+  
+  - `OGCAPI Features support <https://github.com/MapServer/MapServer/security/advisories/GHSA-288j-mhpj-gmmr>`__ advisory
+  - `WCS support <https://github.com/MapServer/MapServer/security/advisories/GHSA-35qh-49hm-5rcx>`__ advisory
+  - `OpenLayers viewer with WMS <https://github.com/MapServer/MapServer/security/advisories/GHSA-52rr-p4x5-2x6x>`__ advisory
+  - `WMS GetLegendGraphic support <https://github.com/MapServer/MapServer/security/advisories/GHSA-4mwc-qc95-5959>`__ advisory
+  - `MySQL JOIN support <https://github.com/MapServer/MapServer/security/advisories/GHSA-7624-4mwh-9cxr>`__ advisory
+  - `PostgreSQL JOIN support <https://github.com/MapServer/MapServer/security/advisories/GHSA-m3xh-ccmh-x8rw>`__ advisory
+
 - The 8.6.4 release includes fixes for two vulnerabilities, see the advisories:
 
   - `OpenLayers viewer with WMS <https://github.com/MapServer/MapServer/security/advisories/GHSA-xqj6-vjqr-33vv>`__ advisory

_sources/announcements/announcements_archive.txt

@@ -4,6 +4,30 @@
  MapServer Announcement Archives
 *****************************************************************************
 
+**2026-07-10 - MapServer 8.6.5 is released**
+
+.. important::  
+   Security release available
+
+The security release of MapServer 8.6.5 has been issued in order to fix
+six vulnerabilities. See the :ref:`changelog <changelog-8-6-5>` 
+for the list of changes. 
+You may also review the security advisories for this release:
+
+1. `OGCAPI Features support <https://github.com/MapServer/MapServer/security/advisories/GHSA-288j-mhpj-gmmr>`__ advisory
+2. `WCS support <https://github.com/MapServer/MapServer/security/advisories/GHSA-35qh-49hm-5rcx>`__ advisory
+3. `OpenLayers viewer with WMS <https://github.com/MapServer/MapServer/security/advisories/GHSA-52rr-p4x5-2x6x>`__ advisory
+4. `WMS GetLegendGraphic support <https://github.com/MapServer/MapServer/security/advisories/GHSA-4mwc-qc95-5959>`__ advisory
+5. `MySQL JOIN support <https://github.com/MapServer/MapServer/security/advisories/GHSA-7624-4mwh-9cxr>`__ advisory
+6. `PostgreSQL JOIN support <https://github.com/MapServer/MapServer/security/advisories/GHSA-m3xh-ccmh-x8rw>`__ advisory
+
+You may also review MapServer's `Security Policy <https://github.com/MapServer/MapServer/blob/main/SECURITY.md>`__.
+As security for the 7.6 branch has ended, and branches 8.4, 8.2 & 8.0 are not supported, 
+all users are strongly encouraged to upgrade to the MapServer 8.6.5 release (see the 
+:ref:`Migration Guide <migration>`).
+
+Head to :ref:`download` to obtain a copy.
+
 **2026-06-01 - MapServer 8.6.4 is released**
 
 .. important::  

_sources/development/changelog/changelog-8-6.txt

@@ -7,6 +7,31 @@
 The summary of major changes for this release can be found in the `HISTORY.md <https://github.com/MapServer/MapServer/blob/branch-8-6/HISTORY.md>`__
 file from the source directory.
 
+.. _changelog-8-6-5:
+
+Changes from 8.6.4 to 8.6.5
+===========================
+
+.. important::  
+   Security release
+
+* OGC API Features: validate offset before rendering to fix reflected XSS (GHSA-288j-mhpj-gmmr) ( `#7573 <https://github.com/mapserver/mapserver/issues/7573>`__ ) (Philip G.) : `47720e8 <https://github.com/mapserver/mapserver/commit/47720e835de4d80a602210461d3b52c9f3d5c34c>`__
+* msautotest fix for branch-8-6 ( `#7572 <https://github.com/mapserver/mapserver/issues/7572>`__ ) (Jeff McKenna) : `9ecef16 <https://github.com/mapserver/mapserver/commit/9ecef167ebeafbee9a875cf912b39c0f570c96cd>`__
+* msSLDParseSLD(): limit depth to 256 ( `#7570 <https://github.com/mapserver/mapserver/issues/7570>`__ ) (github-actions[bot]) : `df9ab37 <https://github.com/mapserver/mapserver/commit/df9ab37ca376c4b2ffb0402ac081a9b7504e4517>`__
+* WMS: GetLegendGraphic: avoid potential write heap buffer overflow via repeated LAYER parameters ( `#7569 <https://github.com/mapserver/mapserver/issues/7569>`__ ) (github-actions[bot]) : `a7d5eb8 <https://github.com/mapserver/mapserver/commit/a7d5eb844a59ea076b7972a018753242f18e6f7b>`__
+* WCS Post request: avoid nullptr deref on missing 'crs' attribute in BoundingBox ( `#7568 <https://github.com/mapserver/mapserver/issues/7568>`__ ) (github-actions[bot]) : `debd347 <https://github.com/mapserver/mapserver/commit/debd347ae53caa4969f87fd9dae5ff73a42d48a0>`__
+* msMySQLJoinNext(): prevent SQL injection ( `#7567 <https://github.com/mapserver/mapserver/issues/7567>`__ ) (github-actions[bot]) : `f4f9505 <https://github.com/mapserver/mapserver/commit/f4f95059e2610d431e0b46d75d713cd52b84f64c>`__
+* msPOSTGRESQLJoinNext(): avoid potential SQL injection ( `#7566 <https://github.com/mapserver/mapserver/issues/7566>`__ ) (github-actions[bot]) : `05babb8 <https://github.com/mapserver/mapserver/commit/05babb88314b8f022eb47a3ab1a00eb37f92085f>`__
+* reject flatgeobuf feature on property decode error and add bounds test (Naveed) : `c84e116 <https://github.com/mapserver/mapserver/commit/c84e1160412377dd7b06ec864f8e2eacf74d1e35>`__
+* bound property value reads to buffer size in flatgeobuf decode (Naveed) : `972b769 <https://github.com/mapserver/mapserver/commit/972b769b799ae81216511a785e94192e66227726>`__
+* Python mapscript: no longer use Python 2 functions whose compatibility layer has been removed in SWIG master 4.5dev (Even Rouault) : `2df008d <https://github.com/mapserver/mapserver/commit/2df008de8d4962612528c0f75cba3463f97558f5>`__
+* WMS OpenLayers output: escape angle brackets in mapserv_onlineresource (MarkLee131) : `57a5d59 <https://github.com/mapserver/mapserver/commit/57a5d592a4270137c20f33459d59d370b5374426>`__
+* bound quadtree shape ids to the shapefile record count (Naveed) : `b93c185 <https://github.com/mapserver/mapserver/commit/b93c1859f3b8ebd3fae9477be32a73b191a314b9>`__
+* bound gif palette index reads to the color table size ( `#7551 <https://github.com/mapserver/mapserver/issues/7551>`__ ) (github-actions[bot]) : `ca4d255 <https://github.com/mapserver/mapserver/commit/ca4d255846f4f52ae79fec94bcbc34c7f545925a>`__
+* Fix memory leak on param handling ( `#7548 <https://github.com/mapserver/mapserver/issues/7548>`__ ) (github-actions[bot]) : `55f9081 <https://github.com/mapserver/mapserver/commit/55f908143926484635c680af38fa4b8c9e58070f>`__
+* Set OpenLayers resolution on CGI output maps ( `#7536 <https://github.com/mapserver/mapserver/issues/7536>`__ ) (github-actions[bot]) : `6193da1 <https://github.com/mapserver/mapserver/commit/6193da12b321f335f8d3a59e8f409c866209b80a>`__
+* Fix SLD generation when using string operators such as `le` ( `#7523 <https://github.com/mapserver/mapserver/issues/7523>`__ ) (github-actions[bot]) : `e23eda2 <https://github.com/mapserver/mapserver/commit/e23eda203e850e4d6acd0ef5f14e3e720ac7a62a>`__
+
 .. _changelog-8-6-4:
 
 Changes from 8.6.3 to 8.6.4

_sources/download.txt

@@ -18,7 +18,7 @@ Current Release(s)
 
 * MapServer
 
-  * **2026-06-01** MapServer-8.6.4 `tar.gz <https://download.osgeo.org/mapserver/mapserver-8.6.4.tar.gz>`__ | `.zip <https://download.osgeo.org/mapserver/mapserver-8.6.4.zip>`__ | :ref:`Changelog <changelog-8-6>`
+  * **2026-07-10** MapServer-8.6.5 `tar.gz <https://download.osgeo.org/mapserver/mapserver-8.6.5.tar.gz>`__ | `.zip <https://download.osgeo.org/mapserver/mapserver-8.6.5.zip>`__ | :ref:`Changelog <changelog-8-6>`
   * **2025-09-19** MapServer-8.4.1 `tar.gz <https://download.osgeo.org/mapserver/mapserver-8.4.1.tar.gz>`__ | `.zip <https://download.osgeo.org/mapserver/mapserver-8.4.1.zip>`__ | :ref:`Changelog <changelog-8-4>`
   * **2024-09-02** MapServer-8.2.2 `tar.gz <https://download.osgeo.org/mapserver/mapserver-8.2.2.tar.gz>`__ | `.zip <https://download.osgeo.org/mapserver/mapserver-8.2.2.zip>`__ | :ref:`Changelog <changelog-8-2>`
   * **2024-06-11** MapServer-8.0.2 `tar.gz <https://download.osgeo.org/mapserver/mapserver-8.0.2.tar.gz>`__ | :ref:`Changelog <changelog-8-0>`

_sources/download_archives.txt

@@ -15,6 +15,8 @@
 Past Releases
 ..............................................................................
 
+* **2026-07-10** MapServer-8.6.5 `tar.gz <https://download.osgeo.org/mapserver/mapserver-8.6.5.tar.gz>`__ | `.zip <https://download.osgeo.org/mapserver/mapserver-8.6.5.zip>`__ | :ref:`Changelog <changelog-8-6>`
+
 * **2026-06-01** MapServer-8.6.4 `tar.gz <https://download.osgeo.org/mapserver/mapserver-8.6.4.tar.gz>`__ | `.zip <https://download.osgeo.org/mapserver/mapserver-8.6.4.zip>`__ | :ref:`Changelog <changelog-8-6>`
 
 * **2026-05-07** MapServer-8.6.3 `tar.gz <https://download.osgeo.org/mapserver/mapserver-8.6.3.tar.gz>`__ | `.zip <https://download.osgeo.org/mapserver/mapserver-8.6.3.zip>`__ | :ref:`Changelog <changelog-8-6>`

_static/documentation_options.js

@@ -1,5 +1,5 @@
 const DOCUMENTATION_OPTIONS = {
-    VERSION: '8.6.4',
+    VERSION: '8.6.5',
     LANGUAGE: 'en',
     COLLAPSE_INDEX: false,
     BUILDER: 'html',

about.html

@@ -5,7 +5,7 @@
     <meta charset="utf-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />
 
-    <title>About &#8212; MapServer 8.6.4 documentation</title>
+    <title>About &#8212; MapServer 8.6.5 documentation</title>
     <link rel="stylesheet" type="text/css" href="_static/pygments.css?v=03e43079" />
     <link rel="stylesheet" type="text/css" href="_static/sphinx.css?v=48f05237" />
     <link rel="stylesheet" type="text/css" href="_static/copybutton.css?v=76b2166b" />
@@ -15,7 +15,7 @@
 
     <script src="_static/jquery.js?v=5d32c60e"></script>
     <script src="_static/_sphinx_javascript_frameworks_compat.js?v=2cd50e6c"></script>
-    <script src="_static/documentation_options.js?v=f59c4a7a"></script>
+    <script src="_static/documentation_options.js?v=51e4ce63"></script>
     <script src="_static/doctools.js?v=fd6eb6e6"></script>
     <script src="_static/sphinx_highlight.js?v=6ffebe34"></script>
     <script src="_static/clipboard.min.js?v=a7894cd8"></script>