The open-source geospatial community has announced the official release of GeoServer 3.0.2, a stable version recommended for immediate production deployments. This latest update delivers a robust collection of core dependency upgrades, important security fixes, and significant functional expansions, including full alignment with the OGC API Maps 1.0 standard and the long-awaited integration of GeoFence for GeoServer 3.
Packaged and ready for deployment across diverse server environments, GeoServer 3.0.2 is available for download in standard binary, WAR archive, and Windows installer formats. Alongside the main application server packages, comprehensive documentation archives and a full suite of extensions have been released simultaneously.
This release milestone reflects the coordinated efforts of leading geospatial software contributors. Jody Garnett of GeoCat managed the release process, Andrea Aime of GeoSolutions conducted extensive testing, and Gabriel Roldan of Camptocamp spearheaded the concurrent release of GeoServer Cloud 3.0.2. Notably, this release marks the first time an updated GeoServer Cloud edition has been made available precisely on release day, ensuring cloud-native users can adopt the latest improvements without delay.
Under the hood, GeoServer 3.0.2 incorporates the latest versions of foundational libraries and companion software. The platform now bundles GeoTools 35.2 and GeoWebCache 2.0.2, alongside mapfish-print-v2 2.5.2 and ImageN 0.9.3.
Security Considerations
As a production-grade release, GeoServer 3.0.2 addresses multiple security vulnerabilities, making it an essential upgrade for enterprise systems and public-facing map services. While the development team has prioritized these fixes to protect operational infrastructures, detailed technical breakdowns of the vulnerabilities and their corresponding patches will be published at the start of November. Administrators managing mission-critical deployments are advised to review the project’s official security policy documentation for comprehensive guidance on how vulnerability reports and disclosures are managed within the ecosystem.
OGC API Maps 1.0
Interoperability takes a major step forward in this version with updates to the OGC API Maps community module. The module has been fully aligned with the final OGC API – Maps 1.0.0 standard, allowing organizations to serve map resources in strict compliance with modern geospatial web standards.
Development of the updated module was led by Andrea Aime of GeoSolutions, with Jody Garnett handling the 3.0.x backport and implementing crucial enhancements to the conformance table editor. Users seeking to implement these standardized map services can consult the dedicated OGC API Maps documentation within the official GeoServer user manual.
GeoFence for GeoServer 3
The release of GeoServer 3.0.2 also marks the completion of Milestone 4: Integration under the ambitious GeoServer 3 crowdfunding campaign, bringing the powerful GeoFence extension suite natively to the GeoServer 3 platform.
To achieve this integration, GeoFence has undergone extensive modernization, being fully updated to run on Jakarta EE, Spring Framework 7, and Hibernate 7. This architectural modernization ensures long-term compatibility with modern enterprise Java environments. However, because of these foundational updates, existing GeoFence administrators must carefully review the official migration guide prior to upgrading. Key breaking changes include the renaming of the datasource configuration file and the complete removal of the legacy GeoFence authentication provider.
The successful delivery of GeoFence for GeoServer 3 was led by Emanuele Tajariol of GeoSolutions and was made possible through the financial backing and shared vision of the GeoServer 3 crowdfunding campaign sponsors.
Broad Community and Institutional Support
The ongoing development, testing, and maintenance of GeoServer are sustained by a vast network of corporate sponsors, institutional partners, and individual donors. The GeoServer 3 series specifically receives organizational backing from a diverse array of public agencies, research institutions, and private enterprises across the globe.
Institutional supporters include AfriGIS, Camptocamp, the German Aerospace Center (DLR), Dorset Council, Deutsche Telekom, Frachtwerk GmbH, GeoCat BV, Geocrafter Geospatial Studio, Comune di Genova, g.on, GeoSolutions SRL, geosos, Geospatial Enabling Technologies (GET), Incloud Limited, HL Consulting, Institut national de l’information géographique et forestière (IGN), ITS Digital, JDev, Kreditanstalt für Wiederaufbau, Mammoth Geospatial, National Ocean Service (NOA), Plangis, Office of Public Works, Open Geo Groep, OSGeo:Korea, OSGeo:UK, Quarticle Research Srl, Sea Island Software, Tailormap, Terrestris, Ubigu, Value AG, Region Västra Götaland, and WaldExpert.
Additionally, the project benefits from contributions made by individual donors, including Abhijit Gujar, Hennessy Becerra, Ivana Ivanova, John Bryant, Jason Horning, Jose Macchi, Peter Smythe, Sajjadul Islam, Sebastiano Meier, and Stefan Overkamp.
FIPS Compliance Module
Addressing the strict regulatory requirements of government agencies and defense contractors, GeoServer 3.0.2 introduces a new FIPS community module. Federal agencies and their authorized suppliers within the United States are frequently mandated to operate software built upon validated cryptography modules meeting the FIPS 140-3 standard.
The introduction of this module enables compliant cryptographic operations within the server environment. System administrators deploying the FIPS module should note that it is designed specifically for Linux operating systems and requires a dedicated data directory, as an automated migration tool for existing directories is not currently available.
Release Notes and Community Development
The 3.0.2 release incorporates numerous bug fixes, performance improvements, and task completions across the core codebase. Developers and system administrators interested in a granular breakdown of changes can consult the comprehensive release notes hosted on the official GitHub repository.
Alongside the stable core release, ongoing work continues within various community modules. These modules are distributed primarily as source code to foster collaborative exploration and experimentation. Developers and users interested in specific experimental topics are encouraged to reach out directly to respective module authors to offer assistance or contribute enhancements.
The GeoServer 3.0 series continues to evolve as the premier open-source map server platform, providing reliable geospatial data distribution backed by active community governance and professional commercial support.
