Debian Patches

Status for mapserver/8.4.0-4+deb13u2

Patch Description Author Forwarded Bugs Origin Last update
perl-mapscript-install.patch Fix the Perl mapscript module installation directory. Bas Couwenberg <sebastic@debian.org> not-needed
java-hardening.patch fixes hardened java Java doesn't compile with hardened options. Adapted from ruby mapscript Ezequiel Lara Gómez <ezequiel.lara@qualitasremos.com> not-needed debian
icu.patch Bump C/C++ standard to 17 for ICU 76. Bas Couwenberg <sebastic@debian.org> yes
CVE-2025-59431.patch Add missing column name escaping in FLTGetCommonExpression() and use msLayerEscapePropertyName() insead of msOGRGetQuotedItem() in
OGR backend
.
Fixes https://github.com/MapServer/MapServer/security/advisories/GHSA-256m-rx4h-r55w
Even Rouault <even.rouault@spatialys.com> not-needed https://github.com/MapServer/MapServer/pull/7349
CVE-2026-33721.patch msSLDParseRasterSymbolizer(): fix potential heap buffer overflow
Credits to Trail of Bits and Anthropic for reporting and patch
suggestion
"github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> yes upstream https://github.com/MapServer/MapServer/commit/fb08dad4afee081b81c57ca0c5d37c149e7755f9 2026-03-23

All known versions for source package 'mapserver'

Links