PR 46504 By Wen Heping.
Version 5.6.8 (2012-02-08):
---------------------------
- Fix security issue with quote escape in WFS GetFeature Filter (#4087)
- Fix segfault on join with postgresql tables (#4074)
- Define Z_BEST_COMPRESSION for newer libpng versions (#4033)
- Fixes to support latest PROJ versions (#4008)
Version 5.6.7 (2011-07-12):
---------------------------
IMPORTANT SECURITY FIXES:
- Fixes to prevent SQL injections through OGC filter encoding (in WMS, WFS
and SOS), as well as a potential SQL injection in WMS time support.
Your system may be vulnerable if it has MapServer with OGC protocols
enabled, with layers connecting to an SQL RDBMS backend, either
natively or via OGR (#3903)
- Fixed potentially exploitable buffer overflows in OGC Filter Encoding
support (#3903)
Other Fixes:
- Fixed PHP/MapScript ms_iogetstdoutbufferbytes() always returning 0 bytes
written (#3041)
- OGC Filter: fix segfault when a ows_varname_type or wfs_varname_type is
defined but not a gml_varname_type (#3902)
- Fixed mssql2008 to return correct geometries with chart layer type (#3894)
- Fix segfault with png-inimage exceptions and quantize_force=on (#2903)
- Fix segfault on malformed <PropertyIsLike> filters (#3888)
- Fixed potential crash with AVERAGE resampling and crazy reprojection (#3886)
- Fixed segmentation fault on invalid symbol (#3849)
- add support for gml:Box for spatial filters (#3789)
- Fixed false computation of symbol size when used as a brush on line (#3760)
- Fixed SQL Spatial to be able to use UniqueIdentifier field as unique key (#3722)
- Fixed possible seg. fault when using "OGR:Label*" special attributes (#3667)
- Fixed bug with newlines around multipart boundaries in wcs multipart (#3672)
Version 5.6.6 (2011-01-17):
---------------------------
- SLD: Fix point symbolizer issue when color is not set (#3658)
- Fix WMS EXCEPTIONS parameter issue with fastcgi (#3525)
- Fixed missing time in msDrawMap logging (#3651)
- Fixed Internal error with Oracle Spatial multi point geometries (#3627)
- Fixed double free in shp2img.c (#3497)
- Fixed free(): invalid next size in mapfile.c (#3604)
- Fix for the memory corruption when mapping the string data type in the
Java bindings (3491)
- Correct wms 1.3.0 latlong bbox error (#2578)
- Fix ProperyIsLike not used efficiently with Oracle (#3557)
- Fixed msOGRGetSymbolId according to the changes in gdal 1.8 (#3556)
- Fixed crash when drawing a map using UNIQUE fid in the layer data (#3271)
- Fixed Oracle Spatial Data gets corrupt (#3541)
- Fixed issue with multiple styles and binding (#3538)
- Fixed multiple include tags not supported in xml mapfiles (#3530)
- Ensure the class is not marked BeforeFieldInit causing memory corruption
with C#/CLR4 (#3438)
- Fixed MSSQL2008 driver returning invalid extent (#3498)
- Fix computation of shape bounds when the first line contains no points
(#3119)(fixes#3383)
- Fixed error message tiles on zero-sized map cause memory allocation errors
in maperror.c. (#3524)
* Fixed scale calculation problem caused by mapscale.c's inchesPerUnits
array being out of synch with MS_UNITS enum
* Fixed bitmap text font rendering (tiny was not working)
Changes 5.6.4:
IMPORTANT SECURITY FIXES:
* Disabled some insecure (and potentially exploitable) mapserv command-line
debug arguments.
* Fixed possible buffer overflow in msTmpFile()
Other fixes:
* Fixed possible race condition with connectiontype WFS layers
* Modified mapserver units enum order to fix some problems with external
packages
* fix blending of transparent layers with AGG on MSB archs
* Fixed imageObj->saveImage() sends unnecessary headers
* Correct PropertyName parsing for wfs post requests
* Ensure mapwmslayer.c does not unlink file before closing connection on it
* Fix security exception issue in C# with MSVC2010
* Write out join CONNECTIONTYPE when saving a mapfile.
* Fixed attribute queries to use an extent stored (and cached) as part of
the queryObj rather than the map->extent.
* Reverted msLayerWhichItems() to 5.4-like behavior although still supporting
retrieving all items
* Grid layer: remove drawing of unnecessary gird lines
* OGC Filters for spatial dbs should be enclosed in parentheses
* Improve the handling of simple string comparisons for raster classified
values
* Add the ogc namspace to filters generated by Mapserver
* Fix MS_NONSQUARE to work in mode=map
* Improve error message when loadQuery() filename extension check fails
* Fix GetLegendGraphic using keyimages
* Fix getFeatureInfo queries on WFS layers
* Fixed mapstring.c build problem related to errno
* Correct ungeoreferenced defaults via GetExtent() on raster layer
* More adjustments to how TLOCK_GDAL held around msGetGDALGeoTransform
- Fixed XML transformation issues with expressions and symbols
- Fixed problem with PostGIS SQL bbox introduced in 5.6.2
- Fix backwards handling of iconv errors (w/ SDE) introduced in 5.6.2
Changes 5.6.2:
- Check error returns from mapstring functions
- Correct mutex locking problem with rasters with no inherent georef.
- Fixed problem with isValidItem vs OGR special attributes
- Support wrap character for SVG output
- Fixed msMSSQL2008CloseConnection() to free the statement handle properly
- Fixed PHP MapScript's metadata.nextkey() that was sometimes skipping some
entries on first call because the NULL arg was not properly handled
- Fixed the query handling with the MSSQL2008 driver
- Fixed swig zoomRectangle() method: the maxy in the rect object have to
be < miny value
- Backport fix for SLD filters column names detection
- Backport fix for WFS OGC filters regex tests
- Changed msSaveImageBufferGD to be in accordance with msSaveImageGD
- Changed the query map rendering implementation without adding extra layers
to the map
- SQL Server 2008 plugin is not handling null field values correctly
- Hatch symbol not properly saved
- Expose symbolObj.inmapfile to the SWIG API, have already been exposed to PHP
- Expose getGeomTransform/setGeomTransform to SWIG instead of exposing the
private vars for rfc48
- Fixed writeSymbol to support writing 'ANGLE AUTO'
- Fixed problems with point queries not working via the CGI (mode=query
or mode=nquery)
Changes 5.6.0:
- Fixed potential leak of env. vars through msEvalRegex()
- WFS hits count is incorrect if the request contain 2 layers or more
- Fixed a problem with layer plugin where copyVirtualTable didn't copy
the LayerResultsGetShape function pointer
brook at biology dot nmsu dot edu and his team at NMSU.
MapServer is an OpenSource development environment for building spatially
enabled Internet applications. It now supports MapScript which allows popular
scripting languages such as Perl, Python, Tk/Tcl, Guile and even Java to
access the MapServer C API. MapScript provides a rich environment for
developing applications that integrate disparate data.
