Debian Patches

Status for mapserver/8.0.0-3+deb12u1

Patch Description Author Forwarded Bugs Origin Last update
perl-mapscript-install.patch Fix the Perl mapscript module installation directory. Bas Couwenberg <sebastic@debian.org> not-needed 2013-09-02
java-hardening.patch fixes hardened java Java doesn't compile with hardened options. Adapted from ruby mapscript Ezequiel Lara Gómez <ezequiel.lara@qualitasremos.com> not-needed debian
interpreter-path.path Fix example-unusual-interpreter lintian issue. Bas Couwenberg <sebastic@debian.org> not-needed
setuptools.patch Fix installation with setuptools 65.3.0. Bas Couwenberg <sebastic@debian.org> not-needed
0005-maplexer.l-avoid-non-null-terminated-msyystring_buff.patch maplexer.l: avoid non-null terminated msyystring_buffer that can cause read heap-buffer-overflow Even Rouault <even.rouault@spatialys.com> yes upstream https://github.com/MapServer/MapServer/commit/76c504a8acacde15781179c4b29e4123d0858c52 2022-10-07
0006-maplexer.l-fix-heap-buffer-overflow-issues-with-NUL-.patch maplexer.l: fix heap-buffer-overflow issues with NUL characters Even Rouault <even.rouault@spatialys.com> yes upstream https://github.com/MapServer/MapServer/commit/700ea8243c496f3d574102c432deaf1a85472271 2022-10-11
0007-mapfile-parser-fix-double-free-when-included-file-do.patch mapfile parser: fix double-free when included file doesn't exist Even Rouault <even.rouault@spatialys.com> yes upstream https://github.com/MapServer/MapServer/commit/e3ca3cb2007c494d7dec8aec0e6443abd5ce62a2 2023-04-08
CVE-2025-59431.patch Add missing column name escaping in FLTGetCommonExpression()
and use msLayerEscapePropertyName() insead of msOGRGetQuotedItem() in
OGR backend
Even Rouault <even.rouault@spatialys.com> yes upstream https://github.com/MapServer/MapServer/commit/1c73acaa2d7a8b1d3955f076186e57fc8c06e0c6 2025-09-18
CVE-2026-33721.patch msSLDParseRasterSymbolizer(): fix potential heap buffer overflow
Credits to Trail of Bits and Anthropic for reporting and patch
suggestion
"github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> yes upstream https://github.com/MapServer/MapServer/commit/fb08dad4afee081b81c57ca0c5d37c149e7755f9 2026-03-23
9999-Update-maplexer.c.patch Update maplexer.c
Manually generated with `make lexer`, see scripts/vagrant/mapserver.sh
and the first paragraph in maplexer.l .

It's pointless to carry individual re-generations in the patch queue, so
we do it once as the last patch.
Guilhem Moulin <guilhem@debian.org> no 2026-03-23

All known versions for source package 'mapserver'

Links