The GeoServer development community has officially announced the immediate availability of GeoServer 3.0.2, a stable production-ready release packed with significant feature enhancements, crucial security updates, and important infrastructural milestones. Available now for deployment across diverse operational environments, this latest version brings a robust array of core component updates, expanded standards compliance, and specialized modules designed to meet the rigorous demands of enterprise and government geographic information system (GIS) infrastructures.
Downloads for the new release are readily accessible across multiple platforms, including standard binary archives, Web Archive (WAR) distributions for servlet containers, and a dedicated Windows setup executable. Alongside the core application software, comprehensive user documentation packages and an extensive library of extensions have also been updated to align with the 3.0.2 release cycle. This ensures that administrators and developers have immediate access to the full ecosystem of tools necessary to maintain, scale, and secure their spatial data infrastructures.
Underpinning this stable release is an integration of several key underlying libraries and associated projects. GeoServer 3.0.2 incorporates the latest GeoTools 35.2 and GeoWebCache 2.0.2 releases, alongside mapfish-print-v2 version 2.5.2 and ImageN 0.9.3. Furthermore, this release cycle marks a notable milestone for cloud deployments: for the first time in the project’s history, an updated GeoServer Cloud 3.0.2 release has been made available simultaneously on official release day, streamlining containerized and distributed deployments for modern cloud-native architectures.
The successful coordination and execution of this release were made possible through the collaborative efforts of key community contributors. Special recognition goes to Jody Garnett of GeoCat for managing the release process, Andrea Aime of GeoSolutions for rigorous testing and validation, and Gabriel Roldan of Camptocamp for spearheading the synchronized GeoServer Cloud release.
Security Considerations
Security remains a paramount focus for the GeoServer project, particularly for systems deployed in critical production environments. GeoServer 3.0.2 addresses specific security vulnerabilities, making this update an essential upgrade for organizations running public-facing or sensitive geospatial web services. To allow system administrators adequate time to plan and execute maintenance windows, detailed technical information regarding the specific vulnerabilities and fixes addressed in this release will be published at the beginning of November.
Organizations managing spatial data infrastructures are encouraged to review the official project security policy maintained within the main repository to understand how vulnerabilities are handled, reported, and mitigated within the ecosystem. Timely application of these security patches ensures that production servers remain resilient against emerging threats and unauthorized data access attempts.
OGC API Maps 1.0
Interoperability continues to be a cornerstone of the GeoServer platform, and version 3.0.2 delivers important advancements in open standards compliance. The OGC API Maps community module has been thoroughly updated and aligned with the final, officially ratified OGC API – Maps 1.0.0 standard. This alignment enables organizations to serve map representations using modern, RESTful web APIs that adhere closely to international specifications established by the Open Geospatial Consortium.
The integration of the finalized OGC API – Maps standard facilitates seamless data sharing and visualization across modern web and mobile clients without relying on older, legacy protocols. Development work on this crucial module was driven by Andrea Aime of GeoSolutions, with Jody Garnett handling the 3.0.x backporting efforts and introducing valuable improvements to the conformance table editor within the user interface. Detailed documentation and implementation guidance for administrators looking to leverage these new API endpoints are available within the official GeoServer user manual.
GeoFence for GeoServer 3
The release of GeoServer 3.0.2 also marks a major operational milestone with the introduction of GeoFence extensions for the GeoServer 3 series. This development officially completes Milestone 4, designated as Integration, under the broader GeoServer 3 crowdfunding campaign. GeoFence has undergone extensive modernization to align with contemporary Java enterprise standards, successfully updating its underlying framework to leverage Jakarta EE, Spring Framework 7, and Hibernate 7.
Because of these deep architectural modernization steps, existing users of GeoFence migrating from older versions must exercise caution. Administrators are strongly advised to review the comprehensive migration guide in the user manual prior to performing an upgrade. Key changes include the renaming of the datasource configuration file and the complete removal of the legacy GeoFence authentication provider.
This significant architectural achievement was realized through the development work of Emanuele Tajariol of GeoSolutions. The project’s ongoing evolution is sustained by the generous contributions of the GeoServer 3 crowdfunding sponsors, a diverse coalition of organizational supporters and individual donors who continue to invest in the long-term viability and robustness of the platform.
The GeoServer 3 series receives core financial and developmental backing from a broad array of institutional and corporate sponsors. Organizational supporters include AfriGIS, Camptocamp, DLR, Dorset Council, Deutsche Telekom, Frachtwerk GmbH, GeoCat BV, Geocrafter – Geospatial Studio, Comune di Genova, g.on, GeoSolutions SRL, geosos, Geospatial Enabling Technologies (GET), Incloud Limited, HL Consulting, Institut national de l’information géographique et forestière (IGN), ITS Digital, JDev, Kreditanstalt für Wiederaufbau, Mammoth Geospatial, National Ocean Service, Plangis, Office of Public Works, Open Geo Groep, OSGeo:Korea, OSGeo:UK, Quarticle Research Srl, Sea Island Software, Tailormap, Terrestris, Ubigu, Value AG, Region Västra Götaland, and WaldExpert. Additionally, the project benefits from the dedicated support of numerous individual donors who contribute directly to the sustainability of the open-source community.
FIPS Compliance
To better serve government agencies and heavily regulated industries, GeoServer 3.0.2 introduces a new FIPS community module. FIPS 140-3 represents a stringent United States government standard governing cryptographic modules. Many federal agencies, defense contractors, and associated supply chain entities are legally or contractually mandated to operate exclusively on software that utilizes validated cryptographic implementations.
The new FIPS module is engineered to address these compliance requirements directly. However, administrators evaluating this feature must note important operational constraints: the module currently operates exclusively on Linux-based operating systems. Furthermore, deploying the FIPS module requires a freshly initialized data directory, as an automated migration tool for pre-existing data directories is not yet available in this initial release.
Release Notes and Community Development
The 3.0.2 release encompasses a wide array of new features, performance improvements, bug fixes, and maintenance tasks across the core codebase. While individual enhancements target stability, memory management, and rendering speed, the complete and itemized changelog is publicly accessible via the official GeoServer release notes on GitHub.
In addition to the core application updates, active development continues within the project’s community modules. These experimental and specialized components are shared openly as source code to foster community collaboration and innovation. Users interested in exploring specific emerging topics or contributing to ongoing module development are encouraged to connect directly with respective module developers to offer assistance and feedback.
The GeoServer 3.0 series continues to evolve as a premier open-source spatial data server, balancing enterprise-grade security and modern API standards with deep community-driven support. System administrators and GIS professionals are encouraged to review the full documentation, evaluate their upgrade paths, and apply the 3.0.2 release to ensure their spatial infrastructures remain secure, compliant, and performant.
