Releases: geoserver/geoserver
GeoServer 2.21.5
Release notes
Sub-task
GEOS-10908 Update spring version from 5.2.22 to 5.2.23
Bug
GEOS-3978 Layer configuration allows admin to enter a zero area bounding box
GEOS-6313 Lifecycle handlers not properly called during shutdown
GEOS-10006 Seeding GWC doesn't work for layers with a dot in the name
GEOS-10500 WFS-T unable to delete more than 30 features in a single transaction when the data source is PostGIS
GEOS-10517 jms-cluster classes missing from XStream security configuration
GEOS-10593 Regression: Creating SQL View via REST API and explicit attribute list is no-longer possible
GEOS-10611 Uploading application/zip to styles endpoint does not clean up temporary files
GEOS-10828 OGC API - Features - Plugin breaks core `/rest` API with JSON payloads
GEOS-10837 geopackage output fails when java.io.tmpdir on network share
GEOS-10869 Jayway JSON Path libraries not included anymore on GeoServer packages
GEOS-10878 wps-multidimensional and wps-jdbc are not being deployed on maven repo
GEOS-10896 Missing NULL check in the template backwards mapping
GEOS-10899 Features template escapes twice HTML produced outputs
GEOS-10912 jms-cluster fails to clone grid coverage layer on other nodes
GEOS-10920 Excel output format packaging misses dependencies, cannot produce .xls
GEOS-10921 Double escaping of HTML with enabled features-templating
GEOS-10932 csw-iso: should only add 'xsi:nil = false' attribute
GEOS-10946 WMS GetLegendGraphic throws FootprintsTransformation cannot be cast to ProcessFunction Exception
GEOS-10950 Performance regression in DescribeFeatureType across all feature types
GEOS-10957 Support ResourceAccessManager implementations returning custom subclasess of AccessLimits
Improvement
GEOS-10867 Bump commons-fileupload from 1.4 to 1.5
GEOS-10870 Allow importer AttributesToPointGeometryTransform to preserve original geometries, and to configure the name of the target geometry
GEOS-10873 Upgrade XStream to 1.4.20
GEOS-10940 Update MapML viewer to release 0.11.0
Task
GEOS-10863 Update Oracle JDBC driver to 19.18.0.0
GEOS-10904 Bump jettison from 1.5.3 to 1.5.4
GeoServer 2.22.3
Release notes
Sub-task
- GEOS-10908 Update spring version from 5.2.22 to 5.2.23
Bug
-
GEOS-3978 Layer configuration allows admin to enter a zero area bounding box
-
GEOS-6313 Lifecycle handlers not properly called during shutdown
-
GEOS-10006 Seeding GWC doesn't work for layers with a dot in the name
-
GEOS-10500 WFS-T unable to delete more than 30 features in a single transaction when the data source is PostGIS
-
GEOS-10517 jms-cluster classes missing from XStream security configuration
-
GEOS-10593 Regression: Creating SQL View via REST API and explicit attribute list is no-longer possible
-
GEOS-10611 Uploading application/zip to styles endpoint does not clean up temporary files
-
GEOS-10837 geopackage output fails when java.io.tmpdir on network share
-
GEOS-10865 Backwards incompatible change in the XML representation of user roles
-
GEOS-10869 Jayway JSON Path libraries not included anymore on GeoServer packages
-
GEOS-10871 about geoserver page reporting @project.version@ for WAR deploy
-
GEOS-10878 wps-multidimensional and wps-jdbc are not being deployed on maven repo
-
GEOS-10890 Wrong path for the license file in the Windows installer script
-
GEOS-10896 Missing NULL check in the template backwards mapping
-
GEOS-10899 Features template escapes twice HTML produced outputs
-
GEOS-10912 jms-cluster fails to clone grid coverage layer on other nodes
-
GEOS-10920 Excel output format packaging misses dependencies, cannot produce .xls
-
GEOS-10921 Double escaping of HTML with enabled features-templating
-
GEOS-10922 Features templating exception on text/plain format
-
GEOS-10934 CSW does not show title/abstract on welcome page
-
GEOS-10946 WMS GetLegendGraphic throws FootprintsTransformation cannot be cast to ProcessFunction Exception
-
GEOS-10950 Performance regression in DescribeFeatureType across all feature types
-
GEOS-10957 Support ResourceAccessManager implementations returning custom subclasess of AccessLimits
Improvement
-
GEOS-10858 jdbc-config turns off isolated workspace support
-
GEOS-10867 Bump commons-fileupload from 1.4 to 1.5
-
GEOS-10870 Allow importer AttributesToPointGeometryTransform to preserve original geometries, and to configure the name of the target geometry
-
GEOS-10873 Upgrade XStream to 1.4.20
-
GEOS-10898 Preserve key order in STAC responses coming from JSONB columns
-
GEOS-10923 Use default writing params on GeoTIFFPPIO
New Feature
- GEOS-10868 Add support for editable description in GeoServer customize feature type table
Task
-
GEOS-10863 Update Oracle JDBC driver to 19.18.0.0
-
GEOS-10894 Random control-flow errors on Mac builds
-
GEOS-10904 Bump jettison from 1.5.3 to 1.5.4
GeoServer 2.23.0
Release notes
Bug
-
GEOS-10006 Seeding GWC doesn't work for layers with a dot in the name
-
GEOS-10802 OGC API: queryables page crashed on complex features
-
GEOS-10865 Backwards incompatible change in the XML representation of user roles
-
GEOS-10894 Random control-flow errors on Mac builds
-
GEOS-10896 Missing NULL check in the template backwards mapping
-
GEOS-10899 Features template escapes twice HTML produced outputs
-
GEOS-10905 Default CSW properties do not allow sorting by identifiers
Improvement
- GEOS-10889 OGC API info section should report the spec version, not the server version
Task
-
GEOS-10904 Bump jettison from 1.5.3 to 1.5.4
-
GEOS-10907 Update spring.version from 5.3.25 to 5.3.26
GeoServer 2.23-RC1
Release notes
New Feature
GEOS-10696 Allow configuration of Output Format types allowed in GetFeature
GEOS-10758 OGCAPI - Features - Add storageCrs property for Collections
GEOS-10868 Add support for editable description in GeoServer customize feature type table
Improvement
GEOS-10556 Cleanup Inconsistent DOM structure and use of hardcoded styles (GSIP 213)
GEOS-10735 Obfuscate secret key in S3 Blob Store, avoiding requiring reentry when editing and HTML source visibility
GEOS-10739 Contact information user interface feedback for welcome message
GEOS-10740 Service enabled does not respect minimal/custom service names
GEOS-10750 German Translation Overhaul Part 1
GEOS-10755 WCS 2.0 module should not use string concatenation to build XML
GEOS-10762 Allow enabling auto-escaping for WMS GetFeatureInfo HTML templates
GEOS-10779 Upgrade GeoServer Core Spring to 5.3.23 and Spring Security to 5.7.3
GEOS-10795 csw-iso: support custom queryable mappings + bounding box
GEOS-10814 Update jdbc config to use consistent SQL formatting
GEOS-10854 Move the OGC API OpenAPI definitions to the "openapi" resource
GEOS-10855 Update the new OGC APIs so that the major version number is part of the path
GEOS-10879 Dispatcher should not respond to non standard HTTP methods
GEOS-10881 Add Content-Crs header to OGC API
GEOS-10885 Remove Axis Order from OGC API Header
GEOS-10888 OGC API styles OpenAPI document points to dangling remote resources
Bug
GEOS-3978 Layer configuration allows admin to enter a zero area bounding box
GEOS-9969 geotiff files can no longer have spaces in the names
GEOS-10659 OGC API-Plugin breaks REST-API
GEOS-10698 OGCAPI and REST API coexistence issue
GEOS-10700 Impossible to customize built-in logging profiles: GeoServer will rewrite them on startup
GEOS-10715 Workspace Filter for PublishedInfo doesn't work for LayerGroups
GEOS-10729 Concurrent access on data access rules (authorization) can lead to loss of configured catalog mode, and lost rules
GEOS-10741 Remove deprecated YUI usage
GEOS-10753 GeoServer can create GML output that is not valid XML
GEOS-10757 CITE: WMS <Style> has elements in wrong order (DTD validation)
GEOS-10759 Welcome page unreachable with large / slow catalogue configuration
GEOS-10760 GeoFence XML REST API broken: wrong element names
GEOS-10809 Keycloak : add support for usernames with spaces
GEOS-10813 jdbc config cache bug
GEOS-10819 CSS Plugin not compatible with JDK 17
GEOS-10829 JDBC Config missing some nested layer properties
GEOS-10834 Catalog.list might require a lot of time due to security filtering
GEOS-10844 Exclude xml-apis from build
GEOS-10861 Welcome blurb i18n not respecting language switch
GEOS-10871 about geoserver page reporting @project.version@ for WAR deploy
GEOS-10876 STAC and Features exception handlers can hide the actual cause of an exception
GEOS-10884 OGC API features should return a 400 when bbox-crs contains invalid content
GEOS-10890 Wrong path for the license file in the Windows installer script
Task
GEOS-10638 Drop Java 8 support
GEOS-10683 FileWrapperResourceTheoryTest fails on Windows since Java 11
GEOS-10721 Bump jettison from 1.4.1 to 1.5.1
GEOS-10775 Update xmlunit to 1.6
GEOS-10778 Retire GeoStyler community module
GEOS-10798 Sphinx site url http://sphinx.pocoo.org/ is outdate
GEOS-10812 Update Jettison to 1.5.3
GEOS-10863 Update Oracle JDBC driver to 19.18.0.0
Sub-task
GEOS-10723 clean up params-extractor plugin to use Resource
GEOS-10724 SpringResourceAdaptor should throw a FileNotFoundException instead of creating any missing file
GEOS-10743 ResourcePool.readStyle created empty files
GEOS-10782 CITE WFS 1.1 - HITS mimetype is incorrect
GEOS-10783 CITE WFS 1.1 - Check customized feature type to determine if transform wrapper needed
GEOS-10784 CITE WFS 1.1 - don't do illegal geometry conversions
GEOS-10785 CITE WFS 1.1 - Data Dir - allow anonymous users to modify data
GEOS-10788 CITE WCS 1.1.1 - Empty InterpolationMethod should throw exception
GeoServer 2.22.2
Release notes
Build Update
-
GEOS-10871 about geoserver page reporting @project.version@ for WAR deploy
This tag has been redeployed due to slight difference between gs-web-core jar available for download and the one deployed to maven repository.
Vulnerabilities
- CVE-2023-25158 OGC Filter SQL Injection Vulnerabilities (GeoTools)
- CVE-2023-25157 OGC Filter SQL Injection Vulnerabilities (GeoServer)
New Feature
- GEOS-10624 Data directory and documentation update
Improvement
-
GEOS-10838 Speed up DefaultResourceAccessManager securityFilter implementation
-
GEOS-10851 GWC S3 Blobstore Parameters Get Converted back to plain text after an application restart
-
GEOS-10860 OGC API should return version including minor and patch in HTTP Response Header
Bug
-
GEOS-7506 shutdown.bat cannot run without JAVA_HOME set
-
GEOS-10689 OSHISystemInfoCollector holds non daemon threads, prevents clean shutdown of Tomcat
-
GEOS-10759 Welcome page unreachable with large / slow catalogue configuration
-
GEOS-10828 OGC API - Features - Plugin breaks core `/rest` API with JSON payloads
-
GEOS-10833 GeoServerHomePage unresponsive against large catalogs
-
GEOS-10834 Catalog.list might require a lot of time due to security filtering
-
GEOS-10836 The demo styles in "ne" workspace do not validate
-
GEOS-10842 Escape user inputs in SQL queries
-
GEOS-10846 Enable auto-escaping for REST HTML templates
-
GEOS-10847 Selecting a raster layer in home page shows incorrect services
-
GEOS-10861 Welcome blurb i18n not respecting language switch
Task
-
GEOS-10683 FileWrapperResourceTheoryTest fails on Windows since Java 11
-
GEOS-10848 Column remarks documentation should be updated to reflect that functionality is supported with JNDI
2.20.7
Release notes - GeoServer - 2.20.7
Bug
GEOS-4727 Editing SQL views seems to be leaking connections
GEOS-10622 PregeneralizedFeature extension does not work with JDBCStore
GEOS-10671 Parallel REST API calls failures (users)
GEOS-10699 WCS 2.0 latitude subsetting may fail if the source data has longitudes spanning both datelines
GEOS-10711 ConcurrentModificationException can happen while modifying data access rules with concurrent WMS traffic
GEOS-10817 Features Templating - XML HTML output doesn't escape all html and xml symbols
GEOS-10818 Schemaless Property Accessor returns emptylist instead of null for null/not existing properties
GEOS-10842 JDBCConfig: escape user inputs in SQL queries
Improvement
GEOS-10718 [OIDC] the OIDC plugin does not currently take into account the id_token_hint parameter
GEOS-10864 Escape user inputs in SQL queries
Task
GEOS-10692 misspelled FidTransformerVisitor class
2.19.7
Release notes - GeoServer - 2.19.7
Bug
GEOS-10477 SLD - Validation error on Normalize-node
GEOS-10502 GML3 output is not pretty printed when pretty print is turned on in global settings.
GEOS-10568 Fix module modularity for GWC
GEOS-10842 JDBCConfig: escape user inputs in SQL queries
Improvement
GEOS-10444 Support UpdateMode.REPLACE on raster stores too
GEOS-10864 Escape user inputs in SQL queries
2.18.7
Release notes - GeoServer - 2.18.7
Bug
GEOS-10842 JDBCConfig: escape user inputs in SQL queries
Improvement
GEOS-10864 Escape user inputs in SQL queries
GeoServer 2.21.4 Release
Release notes
Vulnerabilities
- CVE-2023-25158 OGC Filter SQL Injection Vulnerabilities (GeoTools)
- CVE-2023-25157 OGC Filter SQL Injection Vulnerabilities (GeoServer)
Bug
-
GEOS-7506 shutdown.bat cannot run without JAVA_HOME set
-
GEOS-10683 FileWrapperResourceTheoryTest fails on Windows since Java 11
-
GEOS-10689 OSHISystemInfoCollector holds non daemon threads, prevents clean shutdown of Tomcat
-
GEOS-10807 LayerGroup with nested group POST rest op fails with null styles attribute
-
GEOS-10813 jdbc config cache bug
-
GEOS-10817 Features Templating - XML HTML output doesn't escape all html and xml symbols
-
GEOS-10818 Schemaless Property Accessor returns emptylist instead of null for null/not existing properties
-
GEOS-10829 JDBC Config missing some nested layer properties
-
GEOS-10842 Escape user inputs in SQL queries
-
GEOS-10846 Enable auto-escaping for REST HTML templates
Improvement
-
GEOS-10814 Update jdbc config to use consistent SQL formatting
-
GEOS-10816 OGC API Features complex features test fails since introduction of tag in HTML templates
-
GEOS-10848 Column remarks documentation should be updated to reflect that functionality is supported with JNDI
-
GEOS-10851 GWC S3 Blobstore Parameters Get Converted back to plain text after an application restart
GeoServer 2.22.1 Release
Release notes
Sub-task
GEOS-10782 CITE WFS 1.1 - HITS mimetype is incorrect
GEOS-10783 CITE WFS 1.1 - Check customized feature type to determine if transform wrapper needed
GEOS-10784 CITE WFS 1.1 - don't do illegal geometry conversions
GEOS-10785 CITE WFS 1.1 - Data Dir - allow anonymous users to modify data
Bug
GEOS-10632 Make sure GetLegendGraphics honors the WMS memory service limits
GEOS-10704 Task Manager Metadata wrong gs-metadata dependency
GEOS-10753 GeoServer can create GML output that is not valid XML
GEOS-10757 CITE: WMS <Style> has elements in wrong order (DTD validation)
GEOS-10770 Support list of audiences (aud) when validating Oauth 2.0 Bearer Tokens
GEOS-10794 Add a new vector data source (Web Feature Server (NG)) Filter compliance level bug
GEOS-10807 LayerGroup with nested group POST rest op fails with null styles attribute
GEOS-10809 Keycloak : add support for usernames with spaces
GEOS-10813 jdbc config cache bug
GEOS-10817 Features Templating - XML HTML output doesn't escape all html and xml symbols
GEOS-10818 Schemaless Property Accessor returns emptylist instead of null for null/not existing properties
GEOS-10829 JDBC Config missing some nested layer properties
GEOS-10840 2.22.1 Maven and release artifacts pushed with SNAPSHOT dependencies
Improvement
GEOS-10673 Add example of using FlatGeobuf granules to the Vector Mosaic documentation
GEOS-10746 STAC Sortables should be a subset of the configured queryables
GEOS-10755 WCS 2.0 module should not use string concatenation to build XML
GEOS-10762 Allow enabling auto-escaping for WMS GetFeatureInfo HTML templates
GEOS-10773 Enable localized MapML responses that use WMS language parameter
GEOS-10777 Update MapML viewer to latest release
GEOS-10790 Allow to control map transparency in DownloadMapProcess
GEOS-10810 Enable internationalized layer label / MapML document title
GEOS-10814 Update jdbc config to use consistent SQL formatting
GEOS-10816 OGC API Features complex features test fails since introduction of tag in HTML templates
GEOS-10827 Document property selection in image mosaic
New Feature
GEOS-10716 Build schema for simple feature types leveraging column descriptions, when available
GEOS-10758 OGCAPI - Features - Add storageCrs property for Collections
Task
GEOS-10613 Bump postgresql from 42.3.3 to 42.4.1
GEOS-10775 Update xmlunit to 1.6
GEOS-10778 Retire GeoStyler community module
GEOS-10812 Update Jettison to 1.5.3