[Git][debian-gis-team/mapserver][trixie-backports] 10 commits: Enable build profile CI job.
Bas Couwenberg (@sebastic)
gitlab at salsa.debian.org
Wed Apr 22 04:48:38 BST 2026
Bas Couwenberg pushed to branch trixie-backports at Debian GIS Project / mapserver
Commits:
e17a4084 by Bas Couwenberg at 2026-03-29T14:34:39+02:00
Enable build profile CI job.
- - - - -
38c4bdc1 by Bas Couwenberg at 2026-04-04T10:14:30+02:00
Bump Standards-Version to 4.7.4, changes: priority.
- - - - -
1268363a by Bas Couwenberg at 2026-04-04T10:53:03+02:00
Fix changelog entry.
- - - - -
b8048063 by Bas Couwenberg at 2026-04-19T16:52:27+02:00
New upstream version 8.6.2
- - - - -
30b66e07 by Bas Couwenberg at 2026-04-19T16:52:41+02:00
Update upstream source from tag 'upstream/8.6.2'
Update to upstream version '8.6.2'
with Debian dir 2da4c95c9572757901fe1cc7810ff76ecba68e1f
- - - - -
33110ea3 by Bas Couwenberg at 2026-04-19T16:52:59+02:00
New upstream release.
- - - - -
0a7101a9 by Bas Couwenberg at 2026-04-19T17:02:03+02:00
Update symbols for 8.6.2.
- - - - -
ccffece6 by Bas Couwenberg at 2026-04-19T17:02:03+02:00
Set distribution to unstable.
- - - - -
fe47a0a7 by Bas Couwenberg at 2026-04-22T05:43:48+02:00
Merge tag 'debian/8.6.2-1' into trixie-backports
releasing package mapserver version 8.6.2-1
- - - - -
860a927a by Bas Couwenberg at 2026-04-22T05:43:55+02:00
Rebuild for trixie-backports.
- - - - -
12 changed files:
- .github/workflows/start.sh
- CITATION.cff
- CMakeLists.txt
- HISTORY.md
- debian/.gitlab-ci.yml
- debian/changelog
- debian/control
- debian/libmapserver2t64.symbols
- src/apps/mapserv.c
- src/maprasterquery.c
- src/maptemplate.c
- src/maputil.c
Changes:
=====================================
.github/workflows/start.sh
=====================================
@@ -1,4 +1,4 @@
-#!/bin/sh
+#!/bin/bash
set -e
=====================================
CITATION.cff
=====================================
@@ -1,8 +1,8 @@
cff-version: 1.2.0
title: MapServer
message: If you use this software, please cite it using the metadata from this file.
-version: 8.6.1
-date-released: 2026-03-23
+version: 8.6.2
+date-released: 2026-04-19
abstract: MapServer is an Open Source platform for publishing spatial data and interactive mapping applications to the web.
type: software
authors:
=====================================
CMakeLists.txt
=====================================
@@ -17,7 +17,7 @@ include(CheckCSourceCompiles)
set (MapServer_VERSION_MAJOR 8)
set (MapServer_VERSION_MINOR 6)
-set (MapServer_VERSION_REVISION 1)
+set (MapServer_VERSION_REVISION 2)
set (MapServer_VERSION_SUFFIX "")
# Set C++ version
=====================================
HISTORY.md
=====================================
@@ -13,6 +13,15 @@ https://mapserver.org/development/changelog/
The online Migration Guide can be found at https://mapserver.org/MIGRATION_GUIDE.html
+8.6.2 release (2026-04-19)
+--------------------------
+
+- security: only allow SRS or CRS parameters for OpenLayers template (#7480)
+
+- fix segmentation fault in PHP MapScriptNG (#7471)
+
+see detailed changelog for other fixes
+
8.6.1 release (2026-03-23)
--------------------------
=====================================
debian/.gitlab-ci.yml
=====================================
@@ -4,9 +4,18 @@ include:
variables:
RELEASE: 'trixie-backports'
+ SALSA_CI_ENABLE_BUILD_PACKAGE_PROFILES: 1
SALSA_CI_ENABLE_VALIDATE_PACKAGE_CLEAN_UP: 1
blhc:
allow_failure: true
debrebuild:
allow_failure: true
+
+test-build-profiles:
+ extends: .test-build-package-profiles
+ parallel:
+ matrix:
+ - BUILD_PROFILES:
+ - nocheck
+ - nodoc
=====================================
debian/changelog
=====================================
@@ -1,3 +1,17 @@
+mapserver (8.6.2-1~bpo13+1) trixie-backports; urgency=medium
+
+ * Rebuild for trixie-backports.
+
+ -- Bas Couwenberg <sebastic at debian.org> Wed, 22 Apr 2026 05:43:51 +0200
+
+mapserver (8.6.2-1) unstable; urgency=high
+
+ * New upstream release.
+ * Bump Standards-Version to 4.7.4, no changes.
+ * Update symbols for 8.6.2.
+
+ -- Bas Couwenberg <sebastic at debian.org> Sun, 19 Apr 2026 16:54:05 +0200
+
mapserver (8.6.1-1~bpo13+1) trixie-backports; urgency=medium
* Rebuild for trixie-backports.
=====================================
debian/control
=====================================
@@ -47,7 +47,7 @@ Build-Depends: ant,
xsltproc,
zlib1g-dev (>= 1.1.4)
Build-Conflicts: libcurl3-openssl-dev
-Standards-Version: 4.7.3
+Standards-Version: 4.7.4
Vcs-Browser: https://salsa.debian.org/debian-gis-team/mapserver
Vcs-Git: https://salsa.debian.org/debian-gis-team/mapserver.git -b trixie-backports
Homepage: https://mapserver.org
=====================================
debian/libmapserver2t64.symbols
=====================================
@@ -1,4 +1,4 @@
-# SymbolsHelper-Confirmed: 8.6.0~rc1 amd64 armhf i386 powerpc
+# SymbolsHelper-Confirmed: 8.6.2 amd64
libmapserver.so.2 #PACKAGE# #MINVER#
* Build-Depends-Package: libmapserver-dev
CompareEllipseRegion at Base 6.2.1
@@ -1843,6 +1843,7 @@ libmapserver.so.2 #PACKAGE# #MINVER#
freeTileDummy at Base 6.2.1
freeWeb at Base 6.2.1
ft_caches at Base 7.0.0
+ gdal_destroyed at Base 8.6.2
generateClassTemplate at Base 6.2.1
generateGroupTemplate at Base 6.2.1
generateLayerTemplate at Base 6.2.1
=====================================
src/apps/mapserv.c
=====================================
@@ -284,7 +284,7 @@ int main(int argc, char *argv[]) {
goto end_request;
}
}
- if (ms_index_dir != NULL &&
+ if (ms_index_dir != NULL && mapserv->request->path_info != NULL &&
strcmp(mapserv->request->path_info, "/") == 0) {
// return the landing page
msCGIDispatchIndexRequest(mapserv, config);
=====================================
src/maprasterquery.c
=====================================
@@ -329,11 +329,20 @@ static void msRasterQueryAddPixel(layerObj *layer, pointObj *location,
/* -------------------------------------------------------------------- */
else {
if (rlinfo->band_count >= 3) {
- red = (int)MS_MAX(0, MS_MIN(255, values[0]));
- green = (int)MS_MAX(0, MS_MIN(255, values[1]));
- blue = (int)MS_MAX(0, MS_MIN(255, values[2]));
+ if (!CPLIsFinite(values[0]) || !CPLIsFinite(values[1]) ||
+ !CPLIsFinite(values[2])) {
+ nodata = TRUE;
+ } else {
+ red = (int)MS_MAX(0, MS_MIN(255, values[0]));
+ green = (int)MS_MAX(0, MS_MIN(255, values[1]));
+ blue = (int)MS_MAX(0, MS_MIN(255, values[2]));
+ }
} else {
- red = green = blue = (int)MS_MAX(0, MS_MIN(255, values[0]));
+ if (!CPLIsFinite(values[0])) {
+ nodata = TRUE;
+ } else {
+ red = green = blue = (int)MS_MAX(0, MS_MIN(255, values[0]));
+ }
}
}
@@ -345,7 +354,7 @@ static void msRasterQueryAddPixel(layerObj *layer, pointObj *location,
/* described in: */
/* http://mapserver.gis.umn.edu/bugs/show_bug.cgi?id=1021 */
/* -------------------------------------------------------------------- */
- if (rlinfo->qc_class != NULL) {
+ if (rlinfo->qc_class != NULL && !nodata) {
p_class = msGetClass_FloatRGB(layer, values[0], red, green, blue);
if (p_class == -1)
=====================================
src/maptemplate.c
=====================================
@@ -5001,21 +5001,36 @@ int msReturnOpenLayersPage(mapservObj *mapserv) {
char *format = NULL;
/* 2 CGI parameters are used in the template. we need to transform them
- * to be sure the case match during the template processing. We also
- * need to search the SRS/CRS parameter to get the projection info. OGC
- * services version >= 1.3.0 uses CRS rather than SRS */
+ * to be sure the case matches during the template processing.*/
+
+ const char *version = NULL;
for (i = 0; i < mapserv->request->NumParams; i++) {
- if ((strcasecmp(mapserv->request->ParamNames[i], "SRS") == 0) ||
- (strcasecmp(mapserv->request->ParamNames[i], "CRS") == 0)) {
- projection = mapserv->request->ParamValues[i];
- } else if (strcasecmp(mapserv->request->ParamNames[i], "LAYERS") == 0) {
+ if (strcasecmp(mapserv->request->ParamNames[i], "LAYERS") == 0) {
free(mapserv->request->ParamNames[i]);
mapserv->request->ParamNames[i] = msStrdup("LAYERS");
} else if (strcasecmp(mapserv->request->ParamNames[i], "VERSION") == 0) {
free(mapserv->request->ParamNames[i]);
mapserv->request->ParamNames[i] = msStrdup("VERSION");
+ version = mapserv->request->ParamValues[i];
}
}
+
+ /* Determine whether this is a 1.3.0 request.
+ * CRS is used for VERSION 1.3.0, SRS for earlier versions. */
+
+ if (mapserv->Mode != BROWSE) {
+ const int use_crs = (version != NULL && strcmp(version, "1.3.0") >= 0);
+ const char *proj_param = use_crs ? "CRS" : "SRS";
+
+ /* get the correct projection parameter */
+ for (i = 0; i < mapserv->request->NumParams; i++) {
+ if (strcasecmp(mapserv->request->ParamNames[i], proj_param) == 0) {
+ projection = msEncodeHTMLEntities(mapserv->request->ParamValues[i]);
+ break;
+ }
+ }
+ }
+
if (mapserv->map->outputformat->mimetype &&
*mapserv->map->outputformat->mimetype) {
format = mapserv->map->outputformat->mimetype;
@@ -5055,6 +5070,7 @@ int msReturnOpenLayersPage(mapservObj *mapserv) {
msIO_fwrite(buffer, strlen(buffer), 1, stdout);
free(layer);
free(buffer);
+ free(projection);
return MS_SUCCESS;
}
=====================================
src/maputil.c
=====================================
@@ -62,6 +62,8 @@ extern char *msyystring_buffer;
extern int msyylex_destroy(void);
extern int yyparse(parseObj *);
+int gdal_destroyed = 0;
+
int msScaleInBounds(double scale, double minscale, double maxscale) {
if (scale > 0) {
if (maxscale != -1 && scale >= maxscale)
@@ -2130,6 +2132,13 @@ int msSetup() {
msThreadInit();
#endif
+ if (gdal_destroyed) {
+ msAcquireLock(TLOCK_GDAL);
+ GDALAllRegister();
+ gdal_destroyed = 0;
+ msReleaseLock(TLOCK_GDAL);
+ }
+
/* Use PROJ_DATA/PROJ_LIB env vars if set */
msProjDataInitFromEnv();
@@ -2176,6 +2185,7 @@ void msCleanup() {
msAcquireLock(TLOCK_GDAL);
/* Cleanup some GDAL global resources in particular */
GDALDestroy();
+ gdal_destroyed = 1;
msReleaseLock(TLOCK_GDAL);
msSetPROJ_DATA(NULL, NULL);
View it on GitLab: https://salsa.debian.org/debian-gis-team/mapserver/-/compare/a94f8b7b81500845d2b5e257deb7a0422e2de7fe...860a927a7744336058202a750ec5ee62de3cae0f
--
View it on GitLab: https://salsa.debian.org/debian-gis-team/mapserver/-/compare/a94f8b7b81500845d2b5e257deb7a0422e2de7fe...860a927a7744336058202a750ec5ee62de3cae0f
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-grass-devel/attachments/20260422/c4524962/attachment-0001.htm>
More information about the Pkg-grass-devel
mailing list