MapCache 1.6.1 and 1.4.2 are released

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

MapCache 1.6.1 and 1.4.2 are released

jmckenna
Administrator
Today the project team released versions 1.6.1 and 1.4.2 of MapCache.
This is primarily a security release to address CVE-2017-12808. That
issue involves a vulnerability involving WMS and WMTS error messages.

All users are encouraged to update to the latest version as soon as
possible. Source distributions are available through
http://mapserver.org/ and we expect binary distributions to be updated
in the near future.

-jeff




_______________________________________________
mapserver-users mailing list
[hidden email]
https://lists.osgeo.org/mailman/listinfo/mapserver-users
Reply | Threaded
Open this post in threaded view
|

Re: MapCache 1.6.1 and 1.4.2 are released

Lime, Steve D (MNIT)
Thanks for handling Jeff and a big thanks for Even for the fix! Note this is fixing a XSS vulnerability associated with the WMS/WMTS error responses - in case you don't want track down the CVE id. --Steve

-----Original Message-----
From: mapserver-users [mailto:[hidden email]] On Behalf Of Jeff McKenna
Sent: Friday, September 29, 2017 7:20 PM
To: MapServer <[hidden email]>
Subject: [mapserver-users] MapCache 1.6.1 and 1.4.2 are released

Today the project team released versions 1.6.1 and 1.4.2 of MapCache.
This is primarily a security release to address CVE-2017-12808. That
issue involves a vulnerability involving WMS and WMTS error messages.

All users are encouraged to update to the latest version as soon as
possible. Source distributions are available through
http://mapserver.org/ and we expect binary distributions to be updated
in the near future.

-jeff




_______________________________________________
mapserver-users mailing list
[hidden email]
https://lists.osgeo.org/mailman/listinfo/mapserver-users
_______________________________________________
mapserver-users mailing list
[hidden email]
https://lists.osgeo.org/mailman/listinfo/mapserver-users