Skip to content

Commit 0db13de

Browse files
committed
add security note to changelogs [build_translations]
1 parent 9cfd6aa commit 0db13de

8 files changed

Lines changed: 42 additions & 0 deletions

File tree

en/development/changelog/changelog-7-0.txt

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,9 @@ file from the source directory.
1212
Changes from 7.0.7 to 7.0.8
1313
===========================
1414

15+
.. important::
16+
Security release
17+
1518
* CVE-2021-32062: Address flaw in CGI mapfile loading that makes it possible to bypass security controls ( `#6313 <https://github.com/MapServer/MapServer/issues/6313>`__ ) ( `#6314 <https://github.com/MapServer/MapServer/issues/6314>`__ ) (Steve Lime) : `82a3eb5 <https://github.com/MapServer/MapServer/commit/82a3eb5f6c8f75cedd095b909cc4990f3d8a99e1>`__
1619
* Use CPLSetConfigOption/CPLGetConfigOption for some CGI/FastCGI-related env vars ( `#6305 <https://github.com/MapServer/MapServer/issues/6305>`__ ) (Seth G) : `3c3c9b3 <https://github.com/MapServer/MapServer/commit/3c3c9b3934f42808c15957f9378dec904203228d>`__
1720
* handle phpmapscript vulnerability in error handling ( `#6014 <https://github.com/MapServer/MapServer/issues/6014>`__ ) (Jeff McKenna) : `7e36981 <https://github.com/MapServer/MapServer/commit/7e36981948cb3a304f17256f0ea051e5c32d330f>`__

en/development/changelog/changelog-7-2.txt

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,9 @@ file from the source directory.
1212
Changes from 7.2.2 to 7.2.3
1313
===========================
1414

15+
.. important::
16+
Security release
17+
1518
* CVE-2021-32062: Address flaw in CGI mapfile loading that makes it possible to bypass security controls ( `#6313 <https://github.com/MapServer/MapServer/issues/6313>`__ ) ( `#6314 <https://github.com/MapServer/MapServer/issues/6314>`__ ) (Steve Lime) : `7db7cbb <https://github.com/MapServer/MapServer/commit/7db7cbb26b6bc6e651db268e9536836a56e6825a>`__
1619
* Use CPLSetConfigOption/CPLGetConfigOption for some CGI/FastCGI-related env vars ( `#6305 <https://github.com/MapServer/MapServer/issues/6305>`__ ) (Seth G) : `c079fb1 <https://github.com/MapServer/MapServer/commit/c079fb110b335d0ece78049ba7bc5d1d67023003>`__
1720
* handle PHPMapScript vulnerability in error handling ( `#6014 <https://github.com/MapServer/MapServer/issues/6014>`__ ) (Jeff McKenna) : `1ce0d4d <https://github.com/MapServer/MapServer/commit/1ce0d4dc7e4f3f7e503f6499e14d2bd74e62ce4d>`__

en/development/changelog/changelog-7-4.txt

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,9 @@ file from the source directory.
1212
Changes from 7.4.4 to 7.4.5
1313
===========================
1414

15+
.. important::
16+
Security release
17+
1518
* CVE-2021-32062: Address flaw in CGI mapfile loading that makes it possible to bypass security controls ( `#6313 <https://github.com/MapServer/MapServer/issues/6313>`__ ) ( `#6314 <https://github.com/MapServer/MapServer/issues/6314>`__ ) (Steve Lime) : `d611782 <https://github.com/MapServer/MapServer/commit/d6117828a160feed354bce90e5ddb2874f0e306f>`__
1619
* Use CPLSetConfigOption/CPLGetConfigOption for some CGI/FastCGI-related env vars ( `#6305 <https://github.com/MapServer/MapServer/issues/6305>`__ ) (Seth G) : `f19c8b7 <https://github.com/MapServer/MapServer/commit/f19c8b7a615fefd751056b8c1d3749f9ff31ff10>`__
1720
* WCS 1.1 and 2.0: fix support of netCDF output (complementary fix to refs `#5968 <https://github.com/MapServer/MapServer/issues/5968>`__ ) (Even Rouault) : `6bd9301 <https://github.com/MapServer/MapServer/commit/6bd9301b6204043773ed904ced606a83659c9ca9>`__

en/development/changelog/changelog-7-6.txt

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -12,13 +12,19 @@ file from the source directory.
1212
Changes from 7.6.6 to 7.6.7
1313
===========================
1414

15+
.. important::
16+
Security release
17+
1518
* tostring() expression function: validate format string, and make sure buffer is large enough (Even Rouault) : `31bf282 <https://github.com/MapServer/MapServer/commit/31bf2825dfdd5323f9691bfd7861e97960d15da8>`__
1619

1720
.. _changelog-7-6-6:
1821

1922
Changes from 7.6.5 to 7.6.6
2023
===========================
2124

25+
.. important::
26+
Security release
27+
2228
* mapregex.c: fix invalid mapping of MS_REG_NOSUB and MS_REG_NEWLINE with GNU regex (Even Rouault) : `7b4f1b0 <https://github.com/MapServer/MapServer/commit/7b4f1b0df83ea1a225217226d741fa26e8654b8a>`__
2329
* OGR output format: avoid potential stack buffer overflow on too long filename (Even Rouault) : `63ad0ab <https://github.com/MapServer/MapServer/commit/63ad0ab801cf70c1ca0a8aca69e0987f4382dcdb>`__
2430
* update license year (Jeff McKenna) : `3bfaddb <https://github.com/MapServer/MapServer/commit/3bfaddbde45dc67d005bea9ae061c1f411a1457e>`__
@@ -125,6 +131,9 @@ Changes from 7.6.3 to 7.6.4
125131
Changes from 7.6.2 to 7.6.3
126132
===========================
127133

134+
.. important::
135+
Security release
136+
128137
* CVE-2021-32062: Address flaw in CGI mapfile loading that makes it possible to bypass security controls ( `#6313 <https://github.com/MapServer/MapServer/issues/6313>`__ ) ( `#6314 <https://github.com/MapServer/MapServer/issues/6314>`__ ) ( `#6315 <https://github.com/MapServer/MapServer/issues/6315>`__ ) (Even Rouault) : `927ac97 <https://github.com/MapServer/MapServer/commit/927ac97cb9ece305306b5ab2b5600d3afe8c1732>`__
129138
* Fix most of remaining Coverity scan warnings with high priority ( `#6307 <https://github.com/MapServer/MapServer/issues/6307>`__ ) (Even Rouault) : `f89e386 <https://github.com/MapServer/MapServer/commit/f89e386ba5e1e23160d044e1f38f094b979ad303>`__
130139
* Use CPLSetConfigOption/CPLGetConfigOption for some CGI/FastCGI-related env vars. ( `#6304 <https://github.com/MapServer/MapServer/issues/6304>`__ ) (Steve Lime) : `b128dac <https://github.com/MapServer/MapServer/commit/b128dace3ec3e61bf063f7285d1279e9f9fd9e28>`__

en/development/changelog/changelog-8-0.txt

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,9 @@ file from the source directory.
1212
Changes from 8.0.1 to 8.0.2
1313
===========================
1414

15+
.. important::
16+
Security release
17+
1518
* mapregex.c: fix invalid mapping of MS_REG_NOSUB and MS_REG_NEWLINE with GNU regex (Even Rouault) : `18d2833 <https://github.com/MapServer/MapServer/commit/18d28333c64b7e2f0ddd102a42ba5c89311ee76b>`__
1619
* OGR output format: avoid potential stack buffer overflow on too long filename (Even Rouault) : `33cc8c2 <https://github.com/MapServer/MapServer/commit/33cc8c25d9d052dad17324248ac66449e92e839f>`__
1720
* mapogr.cpp: do not emit some debug messages in default debug mode ( `#7063 <https://github.com/MapServer/MapServer/issues/7063>`__ ) (github-actions[bot]) : `597d17d <https://github.com/MapServer/MapServer/commit/597d17d29cfafa335d23e1b70d69448d6ff6686c>`__

en/development/changelog/changelog-8-2.txt

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -25,6 +25,9 @@ Changes from 8.2.1 to 8.2.2
2525
Changes from 8.2.0 to 8.2.1
2626
===========================
2727

28+
.. important::
29+
Security release
30+
2831
* tostring() expression function: validate format string, and make sure buffer is large enough (Even Rouault) : `6f26c4f <https://github.com/MapServer/MapServer/commit/6f26c4f8e419c1355d8866df00d541e622a563af>`__
2932
* msProcessProjection(): strip epsgaxis= MapServer specific parameter that confuses PROJ < 9.5.0 (Even Rouault) : `147e7b9 <https://github.com/MapServer/MapServer/commit/147e7b97edbf7366fdf6747ebc2c21f1ed8addfe>`__
3033
* Fix build -DWITH_OGCAPI=1 -DWITH_WFS=0 ( `#7116 <https://github.com/MapServer/MapServer/issues/7116>`__ ) (github-actions[bot]) : `e1ded1c <https://github.com/MapServer/MapServer/commit/e1ded1c6f1f99bf07a557cf72c4dc2bf8d418159>`__
@@ -62,6 +65,9 @@ Changes from 8.2.0-beta3 to 8.2.0-rc1
6265
Changes from 8.2.0-beta2 to 8.2.0-beta3
6366
=======================================
6467

68+
.. important::
69+
Security release
70+
6571
* mapregex.c: fix invalid mapping of MS_REG_NOSUB and MS_REG_NEWLINE with GNU regex (Even Rouault) : `af7fe77 <https://github.com/MapServer/MapServer/commit/af7fe7765aecf03482317778205c45c186651232>`__
6672
* OGR output format: avoid potential stack buffer overflow on too long filename (Even Rouault) : `33381a9 <https://github.com/MapServer/MapServer/commit/33381a9ee0f9c66d7eaf339f8f6a9a90639ce56b>`__
6773

en/development/changelog/changelog-8-4.txt

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,9 @@ file from the source directory.
1212
Changes from 8.4.0 to 8.4.1
1313
===========================
1414

15+
.. important::
16+
Security release
17+
1518
* Security: Add missing column name escaping in FLTGetCommonExpression() ( `#7349 <https://github.com/MapServer/MapServer/issues/7349>`__ ) (Even Rouault) : `1c73aca <https://github.com/MapServer/MapServer/commit/1c73acaa2d7a8b1d3955f076186e57fc8c06e0c6>`__
1619
* Make projection context ref counting thread safe again ( `#7079 <https://github.com/MapServer/MapServer/issues/7079>`__ ) ( `#7346 <https://github.com/MapServer/MapServer/issues/7346>`__ ) (github-actions[bot]) : `94d49b6 <https://github.com/MapServer/MapServer/commit/94d49b69aecd5b3f7a7f91eb5808ab2f322bc34c>`__
1720
* build(deps): bump actions/setup-python from 5 to 6 ( `#7339 <https://github.com/MapServer/MapServer/issues/7339>`__ ) (dependabot[bot]) : `c271c32 <https://github.com/MapServer/MapServer/commit/c271c325c4ef30a039961488e88e84a35012e880>`__

en/development/changelog/changelog-8-6.txt

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,9 @@ file from the source directory.
1212
Changes from 8.6.3 to 8.6.4
1313
===========================
1414

15+
.. important::
16+
Security release
17+
1518
* PostGIS: make sure identifier value is numeric when the declared type is numeric too ( `#7519 <https://github.com/MapServer/MapServer/issues/7519>`__ ) (Even Rouault) : `65f1b53 <https://github.com/MapServer/MapServer/commit/65f1b53c258df2abdf6ce1f437c29e75e9976247>`__
1619
* WMS OpenLayers output: properly escape mapserv_onlineresource ( `#7518 <https://github.com/MapServer/MapServer/issues/7518>`__ ) (Even Rouault) : `ff17ef1 <https://github.com/MapServer/MapServer/commit/ff17ef190caaeaa9002ac3d1c7969ec5315c345e>`__
1720
* cgiutil: fix handling of malformed percent-encoding ( `#7515 <https://github.com/MapServer/MapServer/issues/7515>`__ ) (Stefan Gloor) : `6364c71 <https://github.com/MapServer/MapServer/commit/6364c71bff48d669fd62866ad52e2b1292f23da9>`__
@@ -23,6 +26,9 @@ Changes from 8.6.3 to 8.6.4
2326
Changes from 8.6.2 to 8.6.3
2427
===========================
2528

29+
.. important::
30+
Security release
31+
2632
* SLD parser: fix out of bounds access on SLD with only a Rule with a ElseFilter but without a symbolizer ( `#7497 <https://github.com/MapServer/MapServer/issues/7497>`__ ) (Even Rouault) : `0f05c57 <https://github.com/MapServer/MapServer/commit/0f05c578ce31ab1bc11a12c8a828163fc07b9320>`__
2733
* Oracle: revert change regarding case insensitive ogc filters ( `#7493 <https://github.com/MapServer/MapServer/issues/7493>`__ ) (Pierre-Étienne Lord) : `ce02b66 <https://github.com/MapServer/MapServer/commit/ce02b664e1c6c2457bb717097a3504d8a9dde71b>`__
2834
* update CMake install README ( `#7488 <https://github.com/MapServer/MapServer/issues/7488>`__ ) (Jeff McKenna) : `dcdfcda <https://github.com/MapServer/MapServer/commit/dcdfcda6bcb8100c55b1a0f78bf120a9c56c5aff>`__
@@ -33,6 +39,9 @@ Changes from 8.6.2 to 8.6.3
3339
Changes from 8.6.1 to 8.6.2
3440
===========================
3541

42+
.. important::
43+
Security release
44+
3645
* Allow only SRS or CRS parameters for OpenLayers template output ( `#7481 <https://github.com/MapServer/MapServer/issues/7481>`__ ) (Seth G) : `9d0d2c0 <https://github.com/MapServer/MapServer/commit/9d0d2c0a8e4037022933914d54a820811e91557d>`__
3746
* Fix GetFeatureInfo raster queries with NaN ( `#7482 <https://github.com/MapServer/MapServer/issues/7482>`__ ) (Seth G) : `0eade28 <https://github.com/MapServer/MapServer/commit/0eade282392e7976b6676874c4a237180dacede6>`__
3847
* Fix segmentation fault in PHP MapScriptNG ( `#7472 <https://github.com/MapServer/MapServer/issues/7472>`__ ) (Björn Boldt) : `b35d4d4 <https://github.com/MapServer/MapServer/commit/b35d4d40a9cc3e15fdaa401dde182a4a685b7f9e>`__
@@ -43,6 +52,9 @@ Changes from 8.6.1 to 8.6.2
4352
Changes from 8.6.0 to 8.6.1
4453
===========================
4554

55+
.. important::
56+
Security release
57+
4658
* msSLDParseRasterSymbolizer(): fix potential heap buffer overflow ( `#7461 <https://github.com/MapServer/MapServer/issues/7461>`__ ) (github-actions[bot]) : `fb08dad <https://github.com/MapServer/MapServer/commit/fb08dad4afee081b81c57ca0c5d37c149e7755f9>`__
4759
* mapwcs20.cpp: remove debug fprintf (Even Rouault) : `90bae9f <https://github.com/MapServer/MapServer/commit/90bae9fbf7b219f97b7ad7a288c3e17f07c9934c>`__
4860
* Fix C5208 warning ( `#7455 <https://github.com/MapServer/MapServer/issues/7455>`__ ) (github-actions[bot]) : `9698439 <https://github.com/MapServer/MapServer/commit/9698439f8ae1fe429a1048dfae507a50b5f0a9cf>`__

0 commit comments

Comments
 (0)