The open-source geospatial community has a new software version to deploy as the GeoServer development team officially announces the immediate availability of GeoServer version 2.28.5. This latest maintenance release is now ready for public download, offering existing installations a series of minor updates, essential bug fixes, and critical security considerations designed to ensure the stability and safety of production mapping environments worldwide.
Built in close coordination with the broader geospatial software ecosystem, GeoServer 2.28.5 has been developed in conjunction with GeoTools 34.5 and GeoWebCache 1.28.5. This synchronized release schedule ensures high compatibility across core libraries and tile caching components, providing enterprise users and GIS administrators with a cohesive technology stack. The release is the collaborative effort of key maintainers within the open-source community, with special acknowledgments directed toward Andrea Aime of GeoSolutions and Jody Garnett of GeoCat for their dedicated work in steering this version to completion.
Administrators and system integrators can now access the full suite of installation files and supporting documentation. The software is distributed across multiple formats to accommodate diverse deployment architectures. Available packages include the standard binary archive (bin), the web archive format (war) for deployment within Java servlet containers, and a dedicated Windows setup executable (winsetup.exe) for native environments running on Microsoft Windows operating systems. Additionally, comprehensive offline HTML documentation (htmldoc.zip) and a full repository of add-on extensions have been published alongside the core releases to support advanced mapping use cases, spatial data formats, and specialized rendering engines.
Security Considerations
A primary driver behind the deployment of GeoServer 2.28.5 is the inclusion of vital security patches. This release directly addresses identified security vulnerabilities, making it an urgent update for all production systems currently running older iterations of the software. Because geospatial servers often handle sensitive spatial data, internal corporate infrastructure, and critical public-facing infrastructure, maintaining an up-to-date security posture is paramount for system administrators.
The project maintains a rigorous vulnerability management protocol, utilizing the Common Vulnerabilities and Exposures (CVE) system to transparently communicate security risks. By leveraging the CVE framework, the GeoServer development team can reach a significantly broader audience of system administrators, security auditors, and IT professionals than would otherwise be possible through standard project blog posts alone. Organizations managing spatial databases and map services are strongly encouraged to review the official project security policy hosted on the main code repository to understand how vulnerabilities are identified, evaluated, and resolved by the core contributor base.
Release Notes and Ongoing Improvements
While maintenance updates primarily focus on stability, the 2.28.5 release incorporates a carefully curated set of improvements, bug fixes, tasks, and sub-tasks aimed at refining the user experience and resolving edge cases reported by the global community. The development cycle relies heavily on user feedback, issue tracking, and collaborative code contributions submitted via the platform’s version control and project management systems.
For teams requiring an exhaustive breakdown of every code change, patch, and pull request integrated into this version, the complete and detailed release notes are publicly accessible via the official code repository’s release tag for version 2.28.5. This granular log serves as an invaluable reference for technical staff performing impact assessments prior to rolling out updates across large-scale enterprise deployments.
Alongside the core server codebase, the project continues to foster innovation through its community module development framework. Community modules represent experimental or specialized features shared as source code to encourage active collaboration among developers and domain experts. Because these modules are developed outside the core release requirements, they rely heavily on community engagement. The GeoServer project invites interested users and developers who find a particular topic or module of interest to contact the respective module developers directly to offer assistance, test code, or contribute new capabilities.
About the GeoServer 2.28 Series
GeoServer 2.28.5 represents the latest milestone in the ongoing lifecycle of the 2.28 release series. Each version in this lineage builds upon the last, providing a steady cadence of maintenance, security hardening, and incremental enhancements. For organizations tracking the evolution of this series, a complete historical record of past releases—including versions 2.28.4, 2.28.3, 2.28.2, 2.28.1, and the initial 2.28.0 release—remains accessible through the project’s repository release archives, allowing developers to trace the chronological development and verify upgrade paths as needed.
