The GeoServer development team has officially announced the immediate availability of GeoServer 3.0.2, a stable production-ready release designed to deliver robust performance, critical security enhancements, and advanced geospatial capabilities. System administrators and GIS professionals can now download the latest software packages, which include standard binary archives, WAR files for Java application server deployments, and a dedicated Windows installer. Alongside the core application, the project has also rolled out updated documentation bundles and a comprehensive suite of compatible extensions.
As a designated stable release recommended for enterprise production environments, GeoServer 3.0.2 integrates several foundational upstream updates. The software now incorporates GeoTools 35.2 and GeoWebCache 2.0.2, ensuring high-performance spatial data processing and map tile caching. Furthermore, the release updates mapfish-print-v2 to version 2.5.2 and includes ImageN 0.9.3. In a significant milestone for containerized and cloud-native deployments, GeoServer Cloud 3.0.2 has been released simultaneously with the core platform, marking the first time an updated cloud edition has been made available directly on release day.
The successful orchestration and delivery of this release were made possible through the collaborative efforts of key open-source contributors. Jody Garnett of GeoCat spearheaded the release management process, while Andrea Aime of GeoSolutions handled rigorous testing procedures. Additionally, Gabriel Roldan of Camptocamp managed the concurrent launch of the GeoServer Cloud variant.
Security Considerations
Maintaining the integrity and safety of enterprise mapping infrastructure remains a top priority for the GeoServer community. This latest release addresses critical security vulnerabilities, making it an essential upgrade for any organization operating production-grade spatial data servers. While the development team has prioritized these patches to safeguard systems against potential threats, comprehensive technical details regarding the specific vulnerabilities and their respective fixes will be publicly disclosed at the beginning of November.
Organizations planning their deployment schedules are encouraged to review the official project security policy hosted on GitHub to understand how vulnerabilities are identified, managed, and mitigated across the platform’s lifecycle.
OGC API Maps 1.0
Interoperability continues to be a driving force behind spatial data infrastructure development. With the arrival of version 3.0.2, the OGC API Maps community module has undergone significant refinement to fully align with the final OGC API – Maps 1.0.0 standard. This compliance ensures that users can leverage modern, lightweight web APIs to serve map resources in strict accordance with international open standards defined by the Open Geospatial Consortium.
Comprehensive guidance on configuring and utilizing these capabilities can be found in the updated OGC API Maps section of the official user manual. The alignment work for this standard was led by Andrea Aime of GeoSolutions, with crucial backporting to the 3.0.x branch and enhancements to the conformance table editor provided by Jody Garnett of GeoCat.
GeoFence for GeoServer 3
Enterprise security and access control take a major step forward with the introduction of GeoFence extensions for the GeoServer 3 series. This release marks the successful completion of Milestone 4, designated as the Integration phase of the ambitious GeoServer 3 crowdfunding campaign.
To ensure long-term viability, performance, and compatibility with modern enterprise Java architectures, GeoFence has been thoroughly modernized. The extension has been updated to support Jakarta EE, Spring Framework 7, and Hibernate 7. Administrators already utilizing GeoFence in legacy environments are strongly advised to consult the official migration guide prior to executing an upgrade. Crucial architectural changes include the renaming of the datasource configuration file and the complete removal of the legacy GeoFence authentication provider.
The engineering effort behind the GeoFence modernization was led by Emanuele Tajariol of GeoSolutions. This milestone achievement was made possible through the generous financial backing of the GeoServer 3 crowdfunding sponsors. The project’s ongoing development and stability are supported by a diverse coalition of organizational sponsors and individual donors. Institutional supporters include AfriGIS, Camptocamp, DLR, Dorset Council, Deutsche Telekom, Frachtwerk GmbH, GeoCat BV, Geocrafter, Comune di Genova, g.on, GeoSolutions SRL, geosos, Geospatial Enabling Technologies, Incloud Limited, HL Consulting, Institut national de l’information géographique et forestière, ITS Digital, JDev, Kreditanstalt für Wiederaufbau, Mammoth Geospatial, National Ocean Service, Plangis, Office of Public Works, Open Geo Groep, OSGeo:Korea, OSGeo:UK, Quarticle Research Srl, Sea Island Software, Tailormap, terrestris, Ubigu, Value AG, Region Västra Götaland, and WaldExpert, alongside numerous individual community contributors.
FIPS
Addressing the strict regulatory requirements of government agencies and defense contractors, GeoServer 3.0.2 introduces a new FIPS community module. Federal agencies and their supply chain partners within the United States are frequently mandated to operate software that relies exclusively on validated cryptographic modules compliant with the Federal Information Processing Standard, specifically FIPS 140-3.
The introduction of this module enables compliant cryptographic operations within supported server environments. However, administrators must note specific deployment constraints. The module currently operates exclusively on Linux-based operating systems and requires a freshly initialized data directory, as an automated migration tool for existing data directories is not yet available.
Release Notes and Community Development
The 3.0.2 release incorporates numerous bug fixes, performance improvements, and task completions across the core codebase. Detailed change logs categorized by new features, enhancements, bug fixes, and maintenance tasks are documented within the official GitHub release notes for version 3.0.2.
Alongside the core platform updates, active development continues on various community modules. These modules are shared openly as source code to foster community collaboration and experimentation. Developers and users interested in specific experimental topics are encouraged to reach out directly to module authors to participate, test, or offer assistance.
As part of the ongoing evolution of the platform, the GeoServer 3.0 series continues to receive iterative improvements, building upon the foundations established by versions 3.0.0 and 3.0.1 to deliver a secure, highly scalable, and standards-compliant geospatial server platform.
