There is a small possibility of buffer overflow in processLine() (maptemplate.c). To trigger it you'd need a mapfile with a layer name, group name or metadata entry name longer than 5120 chars which is probably larger than what the parser would accept, but we'll fix it just in case. ------------------ Version 4.10.3 (2007-08-22) * Fixed XSS vulnerabilities (#2256) * Fixed possible buffer overflow in template processing (#2252) * Rename libmap.a to libmapserver.a for commonality with libmapserver.so (#2150) * Fixed size of output buffer in msGetEncodedString() (#2132) * SOS : backport fixes related to large xml outputs (#1938, #2146) * WCS : Fixed resampling/reprojecting for tileindex datasets (#2180) -----------------