update for 8.4.1 release

conf.py

@@ -94,7 +94,7 @@ def __getattr__(cls, name):
 # The short X.Y version.
 version = '8.4'
 # The full version, including alpha/beta/rc tags.
-release = '8.4.0'
+release = '8.4.1'
 # The language for content autogenerated by Sphinx. Refer to documentation
 # for a list of supported languages.
 #language = None

en/announcements/announcements_archive.txt

@@ -4,6 +4,16 @@
  MapServer Announcement Archives
 *****************************************************************************
 
+**2025-09-19 - MapServer 8.4.1 is released**
+
+The maintenance release of MapServer has been issued in order to fix
+a security flaw for WFS filters through OGR.
+See the :ref:`changelog <changelog-8-4-1>` for the list of changes. 
+You may also review MapServer's `Security Policy <https://github.com/MapServer/MapServer/blob/main/SECURITY.md>`__, 
+as well as this `Security Advisory <https://github.com/MapServer/MapServer/security/advisories/GHSA-256m-rx4h-r55w>`__.
+As security for the 7.6 branch has ended, and branches 8.2 & 8.0 are not supported, 
+all users are strongly encouraged to upgrade to the MapServer 8.4.1 release.
+
 **2025-01-15 - MapServer 8.4.0 is released**
 
 The major version MapServer 8.4 has been released. The list of

en/development/changelog/changelog-8-4.txt

@@ -7,6 +7,44 @@
 The summary of major changes for this release can be found in the `HISTORY.md <https://github.com/MapServer/MapServer/blob/branch-8-4/HISTORY.md>`__
 file from the source directory.
 
+.. _changelog-8-4-1:
+
+Changes from 8.4.0 to 8.4.1
+===========================
+
+* Security: Add missing column name escaping in FLTGetCommonExpression() ( `#7349 <https://github.com/mapserver/mapserver/issues/7349>`__ ) (Even Rouault) : `1c73aca <https://github.com/mapserver/mapserver/commit/1c73acaa2d7a8b1d3955f076186e57fc8c06e0c6>`__
+* Make projection context ref counting thread safe again ( `#7079 <https://github.com/mapserver/mapserver/issues/7079>`__ ) ( `#7346 <https://github.com/mapserver/mapserver/issues/7346>`__ ) (github-actions[bot]) : `94d49b6 <https://github.com/mapserver/mapserver/commit/94d49b69aecd5b3f7a7f91eb5808ab2f322bc34c>`__
+* build(deps): bump actions/setup-python from 5 to 6 ( `#7339 <https://github.com/mapserver/mapserver/issues/7339>`__ ) (dependabot[bot]) : `c271c32 <https://github.com/mapserver/mapserver/commit/c271c325c4ef30a039961488e88e84a35012e880>`__
+* Handle various GDAL version formats (sethg) : `6396818 <https://github.com/mapserver/mapserver/commit/6396818a8f8a487cb8e3081e1b22b0c03283cab9>`__
+* Remove comma check (sethg) : `767fd18 <https://github.com/mapserver/mapserver/commit/767fd189861eea667a1c12924fb3ae451db58532>`__
+* [Backport branch-8-4] Update SDTS test to use SXF driver ( `#7332 <https://github.com/mapserver/mapserver/issues/7332>`__ ) (github-actions[bot]) : `5560cca <https://github.com/mapserver/mapserver/commit/5560cca20e656d8d85ea9e5e0a02ec5f85cb319f>`__
+* [Backport branch-8-4] Fixed non numerical expressions in a getFeature request ( `#7323 <https://github.com/mapserver/mapserver/issues/7323>`__ ) (github-actions[bot]) : `32786ac <https://github.com/mapserver/mapserver/commit/32786ac6d69a44c2d18696b41eb70e1a8f971a38>`__
+* build(deps): bump actions/checkout from 4 to 5 ( `#7322 <https://github.com/mapserver/mapserver/issues/7322>`__ ) (dependabot[bot]) : `7503865 <https://github.com/mapserver/mapserver/commit/7503865b086c09809a1df20db2d3e244f6e9bdab>`__
+* msautotest: fix get_gdal_version() to support GDAL version nickname ( `#7319 <https://github.com/mapserver/mapserver/issues/7319>`__ ) (github-actions[bot]) : `9cd969e <https://github.com/mapserver/mapserver/commit/9cd969e7bb59b8ddd8c967c0c926e666bdd16cdd>`__
+* Fix GDAL 3.12dev deprecation warnings about GDALGetDataTypeSize() (Even Rouault) : `eacdaee <https://github.com/mapserver/mapserver/commit/eacdaee40cbc7dfe6f09c27a10bcc3fd7d60a574>`__
+* maptree.c: fix warning with latest GCC (Even Rouault) : `6992c26 <https://github.com/mapserver/mapserver/commit/6992c264ef275eaee65ee3314dec1eb22571ccd4>`__
+* Fix vector tileindex infinite recursion (Patrik Sylve) : `547e558 <https://github.com/mapserver/mapserver/commit/547e55887b8fdb0ebf0deddc08e50c04825f2bad>`__
+* Check for all possible use_default_extent_for_getfeature  metadata keys ( `#7311 <https://github.com/mapserver/mapserver/issues/7311>`__ ) (github-actions[bot]) : `8e96877 <https://github.com/mapserver/mapserver/commit/8e96877d06dbeacb410bdf735ce0e1cfb7224afb>`__
+* use master for CRLF check (Jeff McKenna) : `77f74de <https://github.com/mapserver/mapserver/commit/77f74de08baeed114cf70dca7a36e227846df8cd>`__
+* [Backport branch-8-4] OGC API: fix issue  `#7177 <https://github.com/mapserver/mapserver/issues/7177>`__  (feature geometry of multipolygons is returned with errors) ( `#7306 <https://github.com/mapserver/mapserver/issues/7306>`__ ) (github-actions[bot]) : `6d0016c <https://github.com/mapserver/mapserver/commit/6d0016ca462d0dc3bcc7658c571cee63b191f6e0>`__
+* Update INSTALL.CMAKE ( `#7304 <https://github.com/mapserver/mapserver/issues/7304>`__ ) (github-actions[bot]) : `5db5354 <https://github.com/mapserver/mapserver/commit/5db53548ccfcc7451b3aa9b86ac06cc95c748e6e>`__
+* Check wms_onlineresource for OpenLayers output ( `#7301 <https://github.com/mapserver/mapserver/issues/7301>`__ ) (github-actions[bot]) : `a06a1dc <https://github.com/mapserver/mapserver/commit/a06a1dcfcc7d714b1adfabe6e37c577b88149499>`__
+* [Backport branch-8-4] Shapefile: Parse CPG values ( `#7302 <https://github.com/mapserver/mapserver/issues/7302>`__ ) (github-actions[bot]) : `e59604c <https://github.com/mapserver/mapserver/commit/e59604c4ab8bb80c3af3ae8dc76ffd5faad32b07>`__
+* add private vulnerability reporting steps ( `#7300 <https://github.com/mapserver/mapserver/issues/7300>`__ ) (github-actions[bot]) : `49c0d38 <https://github.com/mapserver/mapserver/commit/49c0d38fe269d6c65a6c1205168b5b70746c1edd>`__
+* Fix regex and use PROJ_DATA ( `#7291 <https://github.com/mapserver/mapserver/issues/7291>`__ ) (github-actions[bot]) : `00d904e <https://github.com/mapserver/mapserver/commit/00d904e10c56d8aee1e740023bea16bedd172889>`__
+* [Backport branch-8-4] Allow FILTER expressions with SCALETOKENs ( `#7285 <https://github.com/mapserver/mapserver/issues/7285>`__ ) (github-actions[bot]) : `71b617a <https://github.com/mapserver/mapserver/commit/71b617ad35c65a5be3c07805d9938d2988ce90fe>`__
+* [Backport branch-8-4] SHP/DBF: Attempt to read encoding from CPG file   ( `#7276 <https://github.com/mapserver/mapserver/issues/7276>`__ ) (github-actions[bot]) : `15b3ee3 <https://github.com/mapserver/mapserver/commit/15b3ee3930212d5adc288c25082cb0dfa7416154>`__
+* Fix MSSQL driver crash with NULL fid ( `#7270 <https://github.com/mapserver/mapserver/issues/7270>`__ ) ( `#7272 <https://github.com/mapserver/mapserver/issues/7272>`__ ) (github-actions[bot]) : `598859a <https://github.com/mapserver/mapserver/commit/598859ae2b499514dc44321ff6ec73bf8297a515>`__
+* [Backport branch-8-4] update OGCAPI Common schemas url ( `#7269 <https://github.com/mapserver/mapserver/issues/7269>`__ ) (github-actions[bot]) : `2c9c805 <https://github.com/mapserver/mapserver/commit/2c9c80590662b613377699ea744a2a00945b5ab2>`__
+* [Backport branch-8-4] CI: handle Flake8 unused variable violation code ( `#7265 <https://github.com/mapserver/mapserver/issues/7265>`__ ) (github-actions[bot]) : `61c4762 <https://github.com/mapserver/mapserver/commit/61c47624a17bfb8abbb01e4ae1efff418f39b7c4>`__
+* Bump C/C++ standard to 17 for ICU 76. ( `#7259 <https://github.com/mapserver/mapserver/issues/7259>`__ ) (Bas Couwenberg) : `0e9f04e <https://github.com/mapserver/mapserver/commit/0e9f04e609530f144647e221156bcb631622f9d1>`__
+* Fix opacity for gradient legend symbol ( `#7256 <https://github.com/mapserver/mapserver/issues/7256>`__ ) (github-actions[bot]) : `85fa884 <https://github.com/mapserver/mapserver/commit/85fa884d5a0464a5117b693490f6d24202877e5c>`__
+* [Backport branch-8-4] Make sure 130 tests make request for WMS version 1.3.0 ( `#7253 <https://github.com/mapserver/mapserver/issues/7253>`__ ) (github-actions[bot]) : `7596347 <https://github.com/mapserver/mapserver/commit/75963471e6ae23dbbc592a10847f375829f4f863>`__
+* [Backport branch-8-4] Python MapScript updates ( `#7222 <https://github.com/mapserver/mapserver/issues/7222>`__ ) (github-actions[bot]) : `36b9a46 <https://github.com/mapserver/mapserver/commit/36b9a469a8cc127a2fd7b7ce11bcc7c13103f0a8>`__
+* Attempt at fuzzer fix ( `#7220 <https://github.com/mapserver/mapserver/issues/7220>`__ ) (github-actions[bot]) : `fff513a <https://github.com/mapserver/mapserver/commit/fff513a976f58866f083238b6a2c0fa16798b9a9>`__
+* msDrawRasterBuildRasterPath(): micro-optimization: do not attempt to open non-exiting file ( `#7216 <https://github.com/mapserver/mapserver/issues/7216>`__ ) (github-actions[bot]) : `16b85d0 <https://github.com/mapserver/mapserver/commit/16b85d0d8c4b32d5b10c0b164aebba9338ef41aa>`__
+* [CI] bump PCRE2 for SWIG build ( `#7214 <https://github.com/mapserver/mapserver/issues/7214>`__ ) (github-actions[bot]) : `2bffd04 <https://github.com/mapserver/mapserver/commit/2bffd04c54c92ee97846221c26134b1603a63cd0>`__
+
 .. _changelog-8-4-0:
 
 Changes from 8.4.0-rc1 to 8.4.0

en/download.txt

@@ -18,7 +18,7 @@ Current Release(s)
 
 * MapServer
 
-  * **2025-01-15** MapServer-8.4.0 `tar.gz <https://download.osgeo.org/mapserver/mapserver-8.4.0.tar.gz>`__ | `.zip <https://download.osgeo.org/mapserver/mapserver-8.4.0.zip>`__ | :ref:`Changelog <changelog-8-4>`
+  * **2025-09-19** MapServer-8.4.1 `tar.gz <https://download.osgeo.org/mapserver/mapserver-8.4.1.tar.gz>`__ | `.zip <https://download.osgeo.org/mapserver/mapserver-8.4.1.zip>`__ | :ref:`Changelog <changelog-8-4>`
   * **2024-09-02** MapServer-8.2.2 `tar.gz <https://download.osgeo.org/mapserver/mapserver-8.2.2.tar.gz>`__ | `.zip <https://download.osgeo.org/mapserver/mapserver-8.2.2.zip>`__ | :ref:`Changelog <changelog-8-2>`
   * **2024-06-11** MapServer-8.0.2 `tar.gz <https://download.osgeo.org/mapserver/mapserver-8.0.2.tar.gz>`__ | :ref:`Changelog <changelog-8-0>`
   * **2024-07-21** MapServer-7.6.7 `tar.gz <https://download.osgeo.org/mapserver/mapserver-7.6.7.tar.gz>`__ | `.zip <https://download.osgeo.org/mapserver/mapserver-7.6.7.zip>`__ | :ref:`Changelog <changelog-7-6>`

en/download_archives.txt

@@ -15,6 +15,8 @@
 Past Releases
 ..............................................................................
 
+* **2025-09-19** MapServer-8.4.1 `tar.gz <https://download.osgeo.org/mapserver/mapserver-8.4.1.tar.gz>`__ | `.zip <https://download.osgeo.org/mapserver/mapserver-8.4.1.zip>`__ | :ref:`Changelog <changelog-8-4>`
+
 * **2025-01-15** MapServer-8.4.0 `tar.gz <https://download.osgeo.org/mapserver/mapserver-8.4.0.tar.gz>`__ | `.zip <https://download.osgeo.org/mapserver/mapserver-8.4.0.zip>`__ | :ref:`Changelog <changelog-8-4>`
 
 * **2024-09-02** MapServer-8.2.2 `tar.gz <https://download.osgeo.org/mapserver/mapserver-8.2.2.tar.gz>`__ | `.zip <https://download.osgeo.org/mapserver/mapserver-8.2.2.zip>`__ | :ref:`Changelog <changelog-8-2>`

en/include/announcements.inc

@@ -1,3 +1,15 @@
+**2025-09-19 - MapServer 8.4.1 is released**
+
+The maintenance release of MapServer has been issued in order to fix
+a security flaw for WFS filters through OGR.
+See the :ref:`changelog <changelog-8-4-1>` for the list of changes. 
+You may also review MapServer's `Security Policy <https://github.com/MapServer/MapServer/blob/main/SECURITY.md>`__, 
+as well as this `Security Advisory <https://github.com/MapServer/MapServer/security/advisories/GHSA-256m-rx4h-r55w>`__.
+As security for the 7.6 branch has ended, and branches 8.2 & 8.0 are not supported, 
+all users are strongly encouraged to upgrade to the MapServer 8.4.1 release.
+
+Head to :ref:`download` to obtain a copy.
+
 **2025-01-15 - MapServer 8.4.0 is released**
 
 The major version MapServer 8.4 has been released. The list of