Stay Secure with the Latest Linux Advisories

security advisorySQL Injectioncritical

Debian 11 Mapserver DLA-4506-1 Critical SQL Injection Threat

Vulnerabilities were found in mapserver, a CGI-based framework for Internet map services, which could lead to security controls bypass or SQL injection. CVE-2021-32062 Due to a logic flaw associated with processing map parameter, it is. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4506-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Guilhem Moulin March 23, 2026 https://wiki.debian.org/LTS ------------------------------------------------------------------------- Package : mapserver Version : 7.6.2-1+deb11u1 CVE ID : CVE-2021-32062 CVE-2025-59431 Debian Bug : 988208 Vulnerabilities were found in mapserver, a CGI-based framework for Internet map services, which could lead to security controls bypass or SQL injection. CVE-2021-32062 Due to a logic flaw associated with processing map parameter, it is possible to specify an arbitrary mapfile that bypasses the `MS_MAP_NO_PATH` and `MS_MAP_PATTERN` security control checks. CVE-2025-59431 Alwin Warringa discovered that XML Filter Query directive `PropertyName` is vulnerably to Boolean-based SQL injection, allowing to manipulate backend database queries via crafted XML Filter Query directives. For Debian 11 bullseye, these problems have been fixed in version 7.6.2-1+deb11u1. We recommend that you upgrade your mapserver packages. For the detailed security status of mapserver please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/mapserver Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Critical vulnerabilities in mapserver on Debian could lead to SQL injection and bypass security measures. Update recommended.. Debian, Mapserver, Security Advisory, SQL Injection, Critical Vulnerability. .Severity: Critical. LinuxSecurity.com Team

Mar 23, 2026 •Critical Debian LTS