The open-source geospatial community has officially announced the launch of GeoServer 3.0.2, a stable release heavily recommended for production environments. Available immediately for download across standard binary, Web ARchive (WAR), and Windows installer formats, the new version comes bundled with a comprehensive suite of updated core dependencies, crucial security improvements, and major architectural milestones that significantly advance the platform’s enterprise capabilities.
Alongside the primary server downloads, the development team has rolled out updated documentation packages and a wide array of extensions. This release incorporates the latest GeoTools 35.2 and GeoWebCache 2.0.2 releases, while also integrating mapfish-print-v2 version 2.5.2 and ImageN 0.9.3. Notably, this version introduces a synchronized release of GeoServer Cloud 3.0.2, marking a historic milestone as the first time an updated cloud-native iteration has been made available precisely on the primary release day.
The successful coordination and execution of this launch were driven by key contributions from prominent open-source geospatial organizations and developers. Jody Garnett of GeoCat spearheaded the release management process, Andrea Aime of GeoSolutions handled rigorous testing and quality assurance, and Gabriel Roldan of Camptocamp managed the concurrent GeoServer Cloud rollout.
Security Considerations
Security remains a primary focus for the GeoServer maintainers, and version 3.0.2 includes important updates addressing known vulnerabilities. Because of these fixes, the upgrade is strongly recommended for all production systems currently running older iterations of the software. While the core patches are baked into the new builds, comprehensive details regarding the specific vulnerabilities addressed will be publicly disclosed at the beginning of November.
Administrators managing enterprise deployments are encouraged to review the official project security policy on GitHub for detailed guidelines on how the development community monitors, evaluates, and manages security advisories and vulnerability reports.
OGC API Maps 1.0 Integration
Interoperability continues to be a cornerstone of the GeoServer ecosystem, and version 3.0.2 brings significant advancements to web mapping standards. The OGC API Maps community module has been fully updated and aligned with the final OGC API – Maps 1.0.0 standard, ensuring strict compliance with modern geospatial web service specifications.
Detailed documentation and configuration instructions for the updated module are available in the official GeoServer user manual. The successful alignment of this module was achieved through the development efforts of Andrea Aime at GeoSolutions, combined with the 3.0.x backporting and conformance table editor improvements contributed by Jody Garnett of GeoCat.
GeoFence for GeoServer 3
The release of GeoServer 3.0.2 also marks a major achievement for enterprise security management with the arrival of the GeoFence extensions for GeoServer 3. This integration successfully completes Milestone 4 of the ambitious GeoServer 3 crowdfunding campaign, bringing robust spatial authorization and rule-based access control to the latest major software generation.
To ensure compatibility with modern enterprise technology stacks, GeoFence has undergone extensive modernization, being fully updated to run on Jakarta EE, Spring Framework 7, and Hibernate 7.
Existing users transitioning from older versions of GeoFence are strongly advised to consult the official migration guide prior to performing an upgrade. The transition involves critical structural changes, notably the renaming of the datasource configuration file and the complete removal of the legacy GeoFence authentication provider.
This major milestone was engineered by Emanuele Tajariol of GeoSolutions and was made possible entirely through the financial backing and support of the global GeoServer 3 crowdfunding campaign sponsors.
The ongoing development and sustainability of the GeoServer 3 series are backed by a robust coalition of corporate sponsors, public sector organizations, and institutional partners. The contributor network includes AfriGIS, Camptocamp, the German Aerospace Center (DLR), Dorset Council, Deutsche Telekom, Frachtwerk GmbH, GeoCat BV, Geocrafter Geospatial Studio, Comune di Genova, g.on, GeoSolutions SRL, geosos, Geospatial Enabling Technologies (GET), Incloud Limited, HL Consulting, the Institut national de l’information géographique et forestière (IGN), ITS Digital, JDev, Kreditanstalt für Wiederaufbau, Mammoth Geospatial, the National Ocean Service (NOA), Plangis, the Office of Public Works, Open Geo Groep, OSGeo:Korea, OSGeo:UK, Quarticle Research Srl, Sea Island Software, Tailormap, terrestris, Ubigu, Value AG, Region Västra Götaland, and WaldExpert.
Additionally, the project receives invaluable backing through individual financial contributions from community members Abhijit Gujar, Hennessy Becerra, Ivana Ivanova, John Bryant, Jason Horning, Jose Macchi, Peter Smythe, Sajjadul Islam, Sebastiano Meier, and Stefan Overkamp.
FIPS Compliance
Addressing the strict regulatory requirements of government agencies and enterprise defense contractors, GeoServer 3.0.2 introduces a brand-new FIPS community module. FIPS 140-3 is a recognized United States government standard governing the implementation and validation of cryptographic modules. Many federal agencies, defense organizations, and their supply chain partners are legally restricted to running software that exclusively relies on validated cryptographic components.
Deploying the new FIPS module requires running the software in a Linux environment and initializing a fresh data directory, as an automated migration tool for pre-existing directories is not yet available.
Release Notes and Community Development
The 3.0.2 release incorporates a variety of bug fixes, performance improvements, and minor task updates across the core repository. Developers and system administrators interested in a granular breakdown of code changes, resolved issues, and added features can review the complete changelog through the official GitHub release notes for version 3.0.2.
Parallel to the core platform updates, active development continues on various community modules. These modules are distributed as raw source code to foster community-driven collaboration and experimentation. Users interested in specific emerging topics or experimental features are encouraged to reach out directly to individual module developers to contribute assistance, testing, or feedback.
The GeoServer 3.0 series continues to evolve as a modern, high-performance geospatial server platform. Further information regarding the architecture, upgrade paths, and release histories for the series can be found by consulting the release notes for versions 3.0.0, 3.0.1, and the newly launched 3.0.2.
