Skip to content

release 2.20.2 and update security considerations for 2.19.4 #117

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jan 24, 2022
Merged

release 2.20.2 and update security considerations for 2.19.4 #117

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions _config.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,16 +5,16 @@ plugins:
jira_url: https://osgeo-org.atlassian.net/projects/GEOS
wiki_url: https://github.com/geoserver/geoserver/wiki
git_url: https://github.com/geoserver/geoserver
sf_url: http://sourceforge.net/projects/geoserver
sf_url: https://sourceforge.net/projects/geoserver
nightly_url: https://build.geoserver.org/geoserver
docs_url: http://docs.geoserver.org
docs_url: https://docs.geoserver.org

# stable latest release
stable_version: 2.20.1
stable_version: 2.20.2

# stable nightly build
stable_branch: 2.20.x
stable_jira: 16835
stable_jira: 16838

# maintenance latest release
maintain_version: 2.19.4
Expand Down
27 changes: 10 additions & 17 deletions _posts/2021-10-27-geoserver-2-19-3-released.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -73,22 +73,15 @@ For details check the [2.19.3](https://osgeo-org.atlassian.net/jira/secure/Relea

## About GeoServer 2.19

Additional information on GeoServer 2.19 series:
Additional information on GeoServer 2.19 series:

• [WMS GetFeatureInfo includes labels from ColorMap ](https://docs.geoserver.org/stable/en/user/tutorials/ GetFeatureInfo/raster.html)
* [WMS GetFeatureInfo includes labels from ColorMap ](https://docs.geoserver.org/stable/en/user/tutorials/ GetFeatureInfo/raster.html)
* [Promote WMTS multidim to extension](https://github.com/geoserver/geoserver/wiki/GSIP-196)
* [Promote WPS-Download to extension](https://github.com/geoserver/geoserver/wiki/GSIP-195)
* [Promote params-extractor to extension](https://github.com/geoserver/geoserver/wiki/GSIP-194)
* [Promote GWC-S3 to extension](https://github.com/geoserver/geoserver/wiki/GSIP-193)
* [Promote WPS-JDBC to extension status](https://github.com/geoserver/geoserver/wiki/GSIP-197)
* [Promote MapML to extension status](https://github.com/geoserver/geoserver/wiki/GSIP-200)
* [GeoServer repository transition to main branch](main-branch.html)

• [Promote WMTS multidim to extension](https://github.com/geoserver/geoserver/wiki/GSIP-196)

• [Promote WPS-Download to extension](https://github.com/geoserver/geoserver/wiki/GSIP-195)

• [Promote params-extractor to extension](https://github.com/geoserver/geoserver/wiki/GSIP-194)

• [Promote GWC-S3 to extension](https://github.com/geoserver/geoserver/wiki/GSIP-193)

• [Promote WPS-JDBC to extension status](https://github.com/geoserver/geoserver/wiki/GSIP-197)

• [Promote MapML to extension status](https://github.com/geoserver/geoserver/wiki/GSIP-200)

• [GeoServer repository transition to main branch](main-branch.html)

Release notes ( [2.19.3](https://osgeo-org.atlassian.net/secure/ReleaseNote.jspa?projectId=10000&version=16824)\| [2.19.2](https://osgeo-org.atlassian.net/jira/secure/ReleaseNote.jspa? projectId=10000&version=16821)\| [2.19.1](https://osgeo-org.atlassian.net/jira/secure/ReleaseNote.jspa? projectId=10000&version=16816) \| [2.19.0](https://osgeo-org.atlassian.net/jira/secure/ReleaseNote.jspa? projectId=10000&version=16814) \| [2.19-RC](https://osgeo-org.atlassian.net/secure/ReleaseNote.jspa? projectId=10000&version=16766) )
Release notes ( [2.19.3](https://osgeo-org.atlassian.net/secure/ReleaseNote.jspa?projectId=10000&version=16824) \| [2.19.2](https://osgeo-org.atlassian.net/jira/secure/ReleaseNote.jspa? projectId=10000&version=16821)\| [2.19.1](https://osgeo-org.atlassian.net/jira/secure/ReleaseNote.jspa? projectId=10000&version=16816) \| [2.19.0](https://osgeo-org.atlassian.net/jira/secure/ReleaseNote.jspa? projectId=10000&version=16814) \| [2.19-RC](https://osgeo-org.atlassian.net/secure/ReleaseNote.jspa? projectId=10000&version=16766) )
40 changes: 22 additions & 18 deletions _posts/2021-12-22-geoserver-2-19-4-released.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,17 @@ and
This GeoServer 2.19.4 release was produced in conjunction with GeoTools 25.4 and GeoWebCache 1.19.2, this is a maintenance release recommended for production systems.

Thanks to everyone who contributed, and to Andrea Aime (GeoSolutions) for making this release.


### Security Considerations

This release includes several security enhancements and is a recommended upgrade for production systems:

* GeoServer uses the earlier log4j1 library and is not subject to the Log4j2 remote code execution vulnerabilities reported worldwide. For a detailed discussion please read [GeoServer Log4J2 zero day vulnerability assessment]({% post_url 2021-11-22-logj4-rce-statement %}).

The release of GeoServer includes a patched version of log4j1 which does not include any remote loggers or socket communication.

If you wish to report a security vulnerability, please visit our website for [instructions on responsible reporting](http://geoserver.org/issues/).

## Improvements and Fixes

### Bug
Expand Down Expand Up @@ -70,20 +80,14 @@ and

Additional information on GeoServer 2.19 series:

• [WMS GetFeatureInfo includes labels from ColorMap ](https://docs.geoserver.org/stable/en/user/tutorials/ GetFeatureInfo/raster.html)

• [Promote WMTS multidim to extension](https://github.com/geoserver/geoserver/wiki/GSIP-196)

• [Promote WPS-Download to extension](https://github.com/geoserver/geoserver/wiki/GSIP-195)

• [Promote params-extractor to extension](https://github.com/geoserver/geoserver/wiki/GSIP-194)

• [Promote GWC-S3 to extension](https://github.com/geoserver/geoserver/wiki/GSIP-193)

• [Promote WPS-JDBC to extension status](https://github.com/geoserver/geoserver/wiki/GSIP-197)

• [Promote MapML to extension status](https://github.com/geoserver/geoserver/wiki/GSIP-200)

• [GeoServer repository transition to main branch](main-branch.html)


* [Log4J2 zero day vulnerability assessment]({% post_url 2021-11-22-logj4-rce-statement %})
* [WMS GetFeatureInfo includes labels from ColorMap ](https://docs.geoserver.org/stable/en/user/tutorials/ GetFeatureInfo/raster.html)
* [Promote WMTS multidim to extension](https://github.com/geoserver/geoserver/wiki/GSIP-196)
* [Promote WPS-Download to extension](https://github.com/geoserver/geoserver/wiki/GSIP-195)
* Promote params-extractor to extension](https://github.com/geoserver/geoserver/wiki/GSIP-194)
* [Promote GWC-S3 to extension](https://github.com/geoserver/geoserver/wiki/GSIP-193)
* [Promote WPS-JDBC to extension status](https://github.com/geoserver/geoserver/wiki/GSIP-197)
* [Promote MapML to extension status](https://github.com/geoserver/geoserver/wiki/GSIP-200)
* [GeoServer repository transition to main branch](main-branch.html)

Release notes ( [2.19.3](https://osgeo-org.atlassian.net/secure/ReleaseNote.jspa?projectId=10000&version=16824) \| [2.19.2](https://osgeo-org.atlassian.net/jira/secure/ReleaseNote.jspa? projectId=10000&version=16821)\| [2.19.1](https://osgeo-org.atlassian.net/jira/secure/ReleaseNote.jspa? projectId=10000&version=16816) \| [2.19.0](https://osgeo-org.atlassian.net/jira/secure/ReleaseNote.jspa? projectId=10000&version=16814) \| [2.19-RC](https://osgeo-org.atlassian.net/secure/ReleaseNote.jspa? projectId=10000&version=16766) )
68 changes: 68 additions & 0 deletions _posts/2022-01-24-geoserver-2-20-2-released.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,68 @@
---
author: Jody Garnett
date: 2022-01-24
layout: post
title: GeoServer 2.20.2 Released
categories:
- Announcements
tags:
- Release
release: release_220
version: 2.20.2
jira_version: 16835
---

We are happy to announce GeoServer [2.20.2](/release/2.20.2/) release is available with downloads ([bin](https://sourceforge.net/projects/geoserver/files/GeoServer/2.20.2/geoserver-2.20.2-bin.zip/download), [war](https://sourceforge.net/projects/geoserver/files/GeoServer/2.20.2/geoserver-2.20.2-war.zip/download), [windows](https://sourceforge.net/projects/geoserver/files/GeoServer/2.20.2/GeoServer-2.20.2-winsetup.exe/download)), along with [docs](https://sourceforge.net/projects/geoserver/files/GeoServer/2.20.2/geoserver-2.20.2-htmldoc.zip/download) and [extensions](https://sourceforge.net/projects/geoserver/files/GeoServer/2.20.2/extensions/).

This is a stable release of the 2.20.x series recommended for production systems. This release was made in conjunction with GeoTools 26.2 and GeoWebCache 1.20.1.

### Security Considerations

This release includes several security enhancements and is a recommended upgrade for production systems:

* GeoServer uses the earlier log4j1 library and is not subject to the Log4j2 remote code execution vulnerabilities reported worldwide. For a detailed discussion please read [GeoServer Log4J2 zero day vulnerability assessment]({% post_url 2021-11-22-logj4-rce-statement %}).

The release of GeoServer includes a patched version of log4j1 which does not include any remote loggers or socket communication.

If you wish to report a security vulnerability, please visit our website for [instructions on responsible reporting](http://geoserver.org/issues/).

### Mark Factory Precidence

When rendering maps with lots of individual graphics looking up the correct implementation (known as a MarkFactory) can be time consuming.

WMS Settings have new capability is to filter out any mark factories not being used, and provide an order to prioritize the ones being used.

For more information see [WMS Web Administration](https://docs.geoserver.org/stable/en/user/services/wms/webadmin.html#mark-factory-precedence) (user guide).

### Source Code

For developers building from source, we have committed a ``.gitattributes`` file to help preserve consistent line encoding across our repository.

With this change it is no longer necessary to set your global configuration to ``core.autocrlf=input``.

Use ``git reset`` as outlined below if encounter difficulty updating your checkout:
```
git pull --rebase
git reset --hard
```

### Improvements and Fixes

* WMS rendering preserves region of interest when clipping working with palette based images
* Importer improvements to better report failed imports and clean up stale importer contents
* WCS return coverages whose native BBOX are slightly outside of the dateline
* Reduce the CPU load of returning Server Status information using OSHI on windows

For more information see [2.20.2 release notes](https://github.com/geoserver/geoserver/releases/tag/2.20.2).


## About GeoServer 2.20

Additional information on GeoServer 2.20 series:

* [Log4J2 zero day vulnerability assessment]({% post_url 2021-11-22-logj4-rce-statement %})
* [Internationalization of title and abstract](https://docs.geoserver.org/latest/en/user/services/internationalization/index.html)
* [State of GeoServer 2.20 edition](https://docs.google.com/presentation/d/19Cmld0_VFePh1g4qUSfqNWWB0t-teClFpT3eUqpYGos/edit?usp=sharing)
* [Windows Insatller](https://docs.geoserver.org/stable/en/user/installation/win_installer.html)

Release notes: ( [2.20.2](https://github.com/geoserver/geoserver/releases/tag/2.20.2) \| [2.20.1](https://github.com/geoserver/geoserver/releases/tag/2.20.1) \| [2.20.0](https://github.com/geoserver/geoserver/releases/tag/2.20.0) \| [2.20-RC](https://github.com/geoserver/geoserver/releases/tag/2.20-RC) )