The GeoServer team is pleased to announce the release of GeoServer 2.9.2. Download bundles are provided (bin, war, dmg and exe) along with documentation and extensions.

This is a stable release of GeoServer suitable for production systems. This release is made in conjunction with GeoTools 15.2 and GeoWebCache 1.9.2. We extend our thanks to all contributors for making this release possible.

Highlights of this release include:

  • The macOS DMG is now signed by the Open Source Geospatial Foundation. This work done by Larry Shaffer and the system admin committee improves the Mac install experience. For macOS 10.12 Apple has asked that all applications to be from the App Store (sigh) or signed by identified developers. Using the OSGeo certificate to sign our application geoserver-macos-10-12

  • Style icons can now be referenced by URL in both the global styles folder and workspace styles folders.

  • WMTS improved with both a web admin page and “virtual service” support providing a WMTS for each workspace.

  • The INSPIRE extension now supports WMTS capabilities document. Upon installation of the INSPIRE extension the INSPIRE WMTS grid is now available.

  • Embedded GeoWebCache now supports mbtiles based tile storage.

  • Improvements to image mosaic documentation with more examples.

  • Support for “JPEG or PNG “output format, dynamically choosing the best format based on image transparency

  • Lots of bug fixes (check the release notes for details)

For more information about GeoServer 2.9.2 refer to release notes (2.9.2 2.9.1 2.9.0  RC1  beta2  beta  M0 ).

Security Considerations

This release addresses two security vulnerabilities:

  • The default data directory now includes security restrictions on WFS-T functionality (restricting editing of data to the administrator account). This has the effect of making the service read-only by default, while still advertising we are a compliant WFS-T implementation. If you have an existing GeoServer deployment which you wish to be read-only your can configure security settings as described, or set the WFS service level to “basic”. geoserver-read-only

  • Aaron Waddell reported an XXE vulnerability in the GeoTools library which has been resolved (and is used by GeoServer). We encourage all users to upgrade to GeoServer 2.9.2 at this time. Please note that there are no additional releases of GeoServer 2.8 scheduled - now is the time to upgrade.

If you wish to report a security vulnerability, please visit our website for instructions on responsible reporting.

About GeoServer 2.9

Articles, docs, blog posts and presentations: