update for 8.6.6 release [build_translations]

conf.py

@@ -94,7 +94,7 @@ def __getattr__(cls, name):
 # The short X.Y version.
 version = '8.6'
 # The full version, including alpha/beta/rc tags.
-release = '8.6.5'
+release = '8.6.6'
 # The language for content autogenerated by Sphinx. Refer to documentation
 # for a list of supported languages.
 #language = None

en/MIGRATION_GUIDE.txt

@@ -6,7 +6,7 @@
 MapServer Migration Guide
 *****************************************************************************
 
-:Last Updated: 2026-07-15
+:Last Updated: 2026-09-06
 
 .. contents:: Table of Contents
     :depth: 2
@@ -22,6 +22,19 @@ MapServer Migration Guide
 MapServer 8.4 to 8.6 Migration
 ==============================
 
+- The 8.6.6 release includes fixes for six vulnerabilities, see the advisories:
+
+  - `WCS 2.0 support <https://github.com/MapServer/MapServer/security/advisories/GHSA-6jr5-rc9c-p3cj>`__ advisory
+  - `CGI/FastCGI with SMOOTHSIA <https://github.com/MapServer/MapServer/security/advisories/GHSA-33h3-f4q2-pq5q>`__ advisory
+  - `WMS Filter <https://github.com/MapServer/MapServer/security/advisories/GHSA-5fx4-vjp9-863f>`__ advisory
+  - `WMS with interpolation layers <https://github.com/MapServer/MapServer/security/advisories/GHSA-59gr-4vvx-5f56>`__ advisory
+  - `FlatGeobuf support <https://github.com/MapServer/MapServer/security/advisories/GHSA-5v7w-325g-gpr9>`__ advisory
+  - `WMS error image <https://github.com/MapServer/MapServer/security/advisories/GHSA-qcjf-q672-q63w>`__ advisory
+
+  .. note::
+      For those leveraging an older `librsvg` version, the 8.6.6 release fixes a problem 
+      of SVG scaling that had existed since the 8.6.0 release (see `#7583 <https://github.com/MapServer/MapServer/pull/7583>`__).
+
 - The 8.6.5 release includes fixes for six vulnerabilities, see the advisories:
 
   - `OGCAPI Features support <https://github.com/MapServer/MapServer/security/advisories/GHSA-288j-mhpj-gmmr>`__ advisory

en/announcements/announcements_archive.txt

@@ -4,6 +4,30 @@
  MapServer Announcement Archives
 *****************************************************************************
 
+**2026-09-06 - MapServer 8.6.6 is released**
+
+.. important::  
+   Security release available
+
+The security release of MapServer 8.6.6 has been issued in order to fix
+six vulnerabilities. See the :ref:`changelog <changelog-8-6-6>` 
+for the list of changes. 
+You may also review the security advisories for this release:
+
+1. `WCS 2.0 support <https://github.com/MapServer/MapServer/security/advisories/GHSA-6jr5-rc9c-p3cj>`__ advisory
+2. `CGI/FastCGI with SMOOTHSIA <https://github.com/MapServer/MapServer/security/advisories/GHSA-33h3-f4q2-pq5q>`__ advisory
+3. `WMS Filter <https://github.com/MapServer/MapServer/security/advisories/GHSA-5fx4-vjp9-863f>`__ advisory
+4. `WMS with interpolation layers <https://github.com/MapServer/MapServer/security/advisories/GHSA-59gr-4vvx-5f56>`__ advisory
+5. `FlatGeobuf support <https://github.com/MapServer/MapServer/security/advisories/GHSA-5v7w-325g-gpr9>`__ advisory
+6. `WMS error image <https://github.com/MapServer/MapServer/security/advisories/GHSA-qcjf-q672-q63w>`__ advisory
+
+You may also review MapServer's `Security Policy <https://github.com/MapServer/MapServer/blob/main/SECURITY.md>`__.
+As security for the 7.6 branch has ended, and branches 8.4, 8.2 & 8.0 are not supported, 
+all users are strongly encouraged to upgrade to the MapServer 8.6.6 release (see the 
+:ref:`Migration Guide <migration>`).
+
+Head to :ref:`download` to obtain a copy.
+
 **2026-07-10 - MapServer 8.6.5 is released**
 
 .. important::  

en/development/changelog/changelog-8-6.txt

@@ -7,6 +7,43 @@
 The summary of major changes for this release can be found in the `HISTORY.md <https://github.com/MapServer/MapServer/blob/branch-8-6/HISTORY.md>`__
 file from the source directory.
 
+.. _changelog-8-6-6:
+
+Changes from 8.6.5 to 8.6.6
+===========================
+
+.. important::  
+   Security release
+
+* mapcontext: fix out-of-bounds read on short BoundingBox SRS ( `#7644 <https://github.com/mapserver/mapserver/issues/7644>`__ ) (github-actions[bot]) : `548180a <https://github.com/mapserver/mapserver/commit/548180af3063ceaa74004e8394c82772d5fa7c2a>`__
+* maperror: size the error image within MAXSIZE (GHSA-qcjf-q672-q63w) ( `#7643 <https://github.com/mapserver/mapserver/issues/7643>`__ ) (github-actions[bot]) : `bf71dcf <https://github.com/mapserver/mapserver/commit/bf71dcf46fa66c544f338614eb2187a75105b504>`__
+* kml: use snprintf when formatting coordinates, extents and widths ( `#7639 <https://github.com/mapserver/mapserver/issues/7639>`__ ) (github-actions[bot]) : `c150388 <https://github.com/mapserver/mapserver/commit/c1503886cfebc4be18accec43ecf4381ed1e0238>`__
+* CI: upgrade PCRE2 to 10.48 release ( `#7641 <https://github.com/mapserver/mapserver/issues/7641>`__ ) (github-actions[bot]) : `33e9610 <https://github.com/mapserver/mapserver/commit/33e961049cb416912ee4c88ddb874d07ca73d61f>`__
+* Fix memleak in mapogcsld ( `#7638 <https://github.com/mapserver/mapserver/issues/7638>`__ ) (github-actions[bot]) : `a3c3f68 <https://github.com/mapserver/mapserver/commit/a3c3f682e12d87c2d241ab67f32bdc6772c45df2>`__
+* mappool.c: only raise connectionMax after a successful realloc (fixes  `#7614 <https://github.com/mapserver/mapserver/issues/7614>`__ ) ( `#7634 <https://github.com/mapserver/mapserver/issues/7634>`__ ) (github-actions[bot]) : `e5b4335 <https://github.com/mapserver/mapserver/commit/e5b4335b84ad59591d921c164383d0388c82039e>`__
+* Handle NaN coordinates in WFS geometry filters ( `#7633 <https://github.com/mapserver/mapserver/issues/7633>`__ ) (github-actions[bot]) : `2c7dd03 <https://github.com/mapserver/mapserver/commit/2c7dd03c7ccc078d26596175b2018172e58c3f20>`__
+* Restore the missing first line of the licence grant in four headers ( `#7632 <https://github.com/mapserver/mapserver/issues/7632>`__ ) (github-actions[bot]) : `a04a50e <https://github.com/mapserver/mapserver/commit/a04a50ee28dd7417435216278e935a44368cd7e1>`__
+* msDBFOpenVirtualFile(): validate field extents against record length ( `#7629 <https://github.com/mapserver/mapserver/issues/7629>`__ ) (github-actions[bot]) : `0f2c4d8 <https://github.com/mapserver/mapserver/commit/0f2c4d8097cc90589473df0e78def9dd4875b7f9>`__
+* mapogcfilter: limit filter operation count ( `#7621 <https://github.com/mapserver/mapserver/issues/7621>`__ ) (github-actions[bot]) : `509ad65 <https://github.com/mapserver/mapserver/commit/509ad65e61d5c238a67a3b2763d766e657bc5243>`__
+* Fix heap out-of-bounds write in interpolation layers (GHSA-59gr-4vvx-5f56) ( `#7620 <https://github.com/mapserver/mapserver/issues/7620>`__ ) (github-actions[bot]) : `c3e81ac <https://github.com/mapserver/mapserver/commit/c3e81ac9c0c6592f8a8b050b66f1d456c751c7d4>`__
+* bound WKB point reads to the Z/M byte stride in mappostgis ( `#7619 <https://github.com/mapserver/mapserver/issues/7619>`__ ) (github-actions[bot]) : `988fbf0 <https://github.com/mapserver/mapserver/commit/988fbf06297c9042e527a18c6e956a907eade427>`__
+* Fix integer overflows in WCS parsing ( `#7628 <https://github.com/mapserver/mapserver/issues/7628>`__ ) (github-actions[bot]) : `f1a9091 <https://github.com/mapserver/mapserver/commit/f1a9091e10f077f4fbb5af9148d07f2c16823bca>`__
+* Update FlatGeobuf from upstream ( `#7627 <https://github.com/mapserver/mapserver/issues/7627>`__ ) (github-actions[bot]) : `3ffa8c1 <https://github.com/mapserver/mapserver/commit/3ffa8c1df442e2544f1f688062dea7fe42283ce6>`__
+* mapproject.c: check msProjectCreateReprojector() result in msProjectRect() (fixes  `#7613 <https://github.com/mapserver/mapserver/issues/7613>`__ ) ( `#7626 <https://github.com/mapserver/mapserver/issues/7626>`__ ) (github-actions[bot]) : `b437b13 <https://github.com/mapserver/mapserver/commit/b437b13a5353d8b3889da03917d32dc85e7b9f8d>`__
+* mapobject.c: clear cached reprojectors in msRemoveLayer() (fixes  `#7611 <https://github.com/mapserver/mapserver/issues/7611>`__ ) ( `#7618 <https://github.com/mapserver/mapserver/issues/7618>`__ ) (github-actions[bot]) : `0368328 <https://github.com/mapserver/mapserver/commit/036832880af49e1243650306d524cb3b533f4dee>`__
+* Add guard against empty lines to fix oss-fuzzer 551099259 ( `#7617 <https://github.com/mapserver/mapserver/issues/7617>`__ ) (github-actions[bot]) : `c6954a3 <https://github.com/mapserver/mapserver/commit/c6954a3fd73a5872c9062165eff6cd01deed2acf>`__
+* Fix integer overflow oss-fuzz 4545217852932096 ( `#7610 <https://github.com/mapserver/mapserver/issues/7610>`__ ) (github-actions[bot]) : `30831d6 <https://github.com/mapserver/mapserver/commit/30831d61210717c2d93dd85b01258e42b44f7734>`__
+* Fix memory leak in mapows and mapwcs ( `#7601 <https://github.com/mapserver/mapserver/issues/7601>`__ ) (github-actions[bot]) : `df90df7 <https://github.com/mapserver/mapserver/commit/df90df7b3f664bfc6aa9e04db0d2a3e89f195630>`__
+* fix out-of-bounds read in SLD arithmetic operator parsing ( `#7598 <https://github.com/mapserver/mapserver/issues/7598>`__ ) (github-actions[bot]) : `8ef661d <https://github.com/mapserver/mapserver/commit/8ef661dccc2367a0593ed3501193f8847170208b>`__
+* mapcairo.c: avoid double scaling of SVG symbols (fixes:  `#7430 <https://github.com/mapserver/mapserver/issues/7430>`__ ) ( `#7595 <https://github.com/mapserver/mapserver/issues/7595>`__ ) (github-actions[bot]) : `fb438a8 <https://github.com/mapserver/mapserver/commit/fb438a846e806b6ca73334480d9fcf30ff8f8d7e>`__
+* bound wms exception response copy to result_size ( `#7592 <https://github.com/mapserver/mapserver/issues/7592>`__ ) (github-actions[bot]) : `18171bd <https://github.com/mapserver/mapserver/commit/18171bd8d31abcb6875d8a920f51371841d087ea>`__
+* Fix WCS 2.0 GetCoverage DoS from non-positive RESOLUTION (GHSA-6jr5-rc9c-p3cj) ( `#7589 <https://github.com/mapserver/mapserver/issues/7589>`__ ) (github-actions[bot]) : `244b6b1 <https://github.com/mapserver/mapserver/commit/244b6b17e57b924681e0eb71a55d0eb6e657b091>`__
+* size msClipPolygonRect buffer for 3 emitted points per edge ( `#7588 <https://github.com/mapserver/mapserver/issues/7588>`__ ) (github-actions[bot]) : `3d6ef77 <https://github.com/mapserver/mapserver/commit/3d6ef77735c61fe43dc23a9266eb9db0dfe92ce1>`__
+* Fix SMOOTHSIA point-shape DoS in CGI query path (GHSA-33h3-f4q2-pq5q) ( `#7576 <https://github.com/mapserver/mapserver/issues/7576>`__ ) (Zhen Yan) : `5f314cf <https://github.com/mapserver/mapserver/commit/5f314cf8e3ad0e9f54205e6044324ae94a6ce886>`__
+* Remove any tolerance set on a layer for feature queries ( `#7587 <https://github.com/mapserver/mapserver/issues/7587>`__ ) (Seth G) : `a6e6fe9 <https://github.com/mapserver/mapserver/commit/a6e6fe9825f2513f764629efe25fa91cacdd4b6e>`__
+* Apply runtime substitutions before applying SLD files ( `#7586 <https://github.com/mapserver/mapserver/issues/7586>`__ ) (github-actions[bot]) : `2ae56a0 <https://github.com/mapserver/mapserver/commit/2ae56a092f7cfb122da26f43c9953e8573f91db2>`__
+* Build fixes for CMake 4.4 ( `#7580 <https://github.com/mapserver/mapserver/issues/7580>`__ ) (github-actions[bot]) : `1358bf3 <https://github.com/mapserver/mapserver/commit/1358bf39b01e198caad8f2343cd8d03522947201>`__
+
 .. _changelog-8-6-5:
 
 Changes from 8.6.4 to 8.6.5

en/download.txt

@@ -18,7 +18,7 @@ Current Release(s)
 
 * MapServer
 
-  * **2026-07-10** MapServer-8.6.5 `tar.gz <https://download.osgeo.org/mapserver/mapserver-8.6.5.tar.gz>`__ | `.zip <https://download.osgeo.org/mapserver/mapserver-8.6.5.zip>`__ | :ref:`Changelog <changelog-8-6>`
+  * **2026-09-06** MapServer-8.6.6 `tar.gz <https://download.osgeo.org/mapserver/mapserver-8.6.6.tar.gz>`__ | `.zip <https://download.osgeo.org/mapserver/mapserver-8.6.6.zip>`__ | :ref:`Changelog <changelog-8-6>`
   * **2025-09-19** MapServer-8.4.1 `tar.gz <https://download.osgeo.org/mapserver/mapserver-8.4.1.tar.gz>`__ | `.zip <https://download.osgeo.org/mapserver/mapserver-8.4.1.zip>`__ | :ref:`Changelog <changelog-8-4>`
   * **2024-09-02** MapServer-8.2.2 `tar.gz <https://download.osgeo.org/mapserver/mapserver-8.2.2.tar.gz>`__ | `.zip <https://download.osgeo.org/mapserver/mapserver-8.2.2.zip>`__ | :ref:`Changelog <changelog-8-2>`
   * **2024-06-11** MapServer-8.0.2 `tar.gz <https://download.osgeo.org/mapserver/mapserver-8.0.2.tar.gz>`__ | :ref:`Changelog <changelog-8-0>`

en/download_archives.txt

@@ -15,6 +15,8 @@
 Past Releases
 ..............................................................................
 
+* **2026-09-06** MapServer-8.6.6 `tar.gz <https://download.osgeo.org/mapserver/mapserver-8.6.6.tar.gz>`__ | `.zip <https://download.osgeo.org/mapserver/mapserver-8.6.6.zip>`__ | :ref:`Changelog <changelog-8-6>`
+
 * **2026-07-10** MapServer-8.6.5 `tar.gz <https://download.osgeo.org/mapserver/mapserver-8.6.5.tar.gz>`__ | `.zip <https://download.osgeo.org/mapserver/mapserver-8.6.5.zip>`__ | :ref:`Changelog <changelog-8-6>`
 
 * **2026-06-01** MapServer-8.6.4 `tar.gz <https://download.osgeo.org/mapserver/mapserver-8.6.4.tar.gz>`__ | `.zip <https://download.osgeo.org/mapserver/mapserver-8.6.4.zip>`__ | :ref:`Changelog <changelog-8-6>`

en/include/announcements.inc

@@ -1,3 +1,27 @@
+**2026-09-06 - MapServer 8.6.6 is released**
+
+.. important::  
+   Security release available
+
+The security release of MapServer 8.6.6 has been issued in order to fix
+six vulnerabilities. See the :ref:`changelog <changelog-8-6-6>` 
+for the list of changes. 
+You may also review the security advisories for this release:
+
+1. `WCS 2.0 support <https://github.com/MapServer/MapServer/security/advisories/GHSA-6jr5-rc9c-p3cj>`__ advisory
+2. `CGI/FastCGI with SMOOTHSIA <https://github.com/MapServer/MapServer/security/advisories/GHSA-33h3-f4q2-pq5q>`__ advisory
+3. `WMS Filter <https://github.com/MapServer/MapServer/security/advisories/GHSA-5fx4-vjp9-863f>`__ advisory
+4. `WMS with interpolation layers <https://github.com/MapServer/MapServer/security/advisories/GHSA-59gr-4vvx-5f56>`__ advisory
+5. `FlatGeobuf support <https://github.com/MapServer/MapServer/security/advisories/GHSA-5v7w-325g-gpr9>`__ advisory
+6. `WMS error image <https://github.com/MapServer/MapServer/security/advisories/GHSA-qcjf-q672-q63w>`__ advisory
+
+You may also review MapServer's `Security Policy <https://github.com/MapServer/MapServer/blob/main/SECURITY.md>`__.
+As security for the 7.6 branch has ended, and branches 8.4, 8.2 & 8.0 are not supported, 
+all users are strongly encouraged to upgrade to the MapServer 8.6.6 release (see the 
+:ref:`Migration Guide <migration>`).
+
+Head to :ref:`download` to obtain a copy.
+
 **2026-07-10 - MapServer 8.6.5 is released**
 
 .. important::  

en/spelling_wordlist.dict

@@ -238,6 +238,7 @@ kml
 KML
 kmz
 KMZ
+kriging
 labelCacheObj
 labelLeaderObj
 labelled
@@ -521,6 +522,7 @@ srid
 srs
 SRS
 ssl
+stabilises
 stderr
 stdin
 stdout
@@ -583,6 +585,7 @@ unix
 unmerged
 unprojected
 unreferenced
+unsampled
 untiled
 uom
 uri