GeoServer 2.26.1 Release
GeoServer 2.26.1 release is now available with downloads (bin, war, windows), along with docs and extensions.
This is a stable release of GeoServer recommended for production use. GeoServer 2.26.1 is made in conjunction with GeoTools 32.1, and GeoWebCache 1.26.1.
Thanks to Peter Smythe (AfriGIS) for making this release.
Security Considerations
This release addresses security vulnerabilities and is considered an important upgrade for production systems.
- GEOS-11557 CVE-2024-45748 High. The details will be released later.
See project security policy for more information on how security vulnerabilities are managed.
Release notes
Improvement:
- GEOS-11557 CVE-2024-45748 High
- GEOS-11561 Client-Delegating MapML Proxy
- GEOS-11588 GWC disk quota, check JDBC connection pool validation query
Bug:
- GEOS-11524 csw: default queryables mapping not generated
- GEOS-11543 Unable to use propertyName to filter properties in a GetFeature request when service is not set
- GEOS-11553 SLD Style: Empty SE Rotationelement throws RuntimeException (QGIS generated SLD)
- GEOS-11556 NullPointerException when GWC disk quota monitoring is disabled
- GEOS-11559 The customized attributes editor is prone to setting the wrong attribute source
- GEOS-11573 TileLayer preview doesn’t work anymore
Task:
- GEOS-11574 Bump org.eclipse.jetty:jetty-server from 9.4.52.v20230823 to 9.4.55.v20240627 in /src
- GEOS-11587 Update map fish-print-v2 2.3.2 - see new MAPFISH_PDF_FOLDER configuration option
- GEOS-11609 Bump XStream from 1.4.20 to 1.4.21
- GEOS-11610 Update Jetty from 9.4.55.v20240627 to 9.4.56.v20240826
For the complete list see 2.26.1 release notes.
Community Updates
Community module development:
- GEOS-11107 Open search for EO community module: packaging missing gt-cql-json-xx.x.jar
- GEOS-11517 Using various OGC APIs results in service enabled check related WARN logs
- GEOS-11560 OGC API modules lack cql2-json in assembly
- GEOS-11563 Allow configuring a DGGS resolution offset on a layer basis
- GEOS-11565 Allow configuring the minimum and maximum DGGS resolution for a layer
- GEOS-11579 DGGS modules prevent GeoServer startup if JEP is not installed
Community modules are shared as source code to encourage collaboration. If a topic being explored is of interest to you, please contact the module developer to make contact and offer assistance, even if it is just to say that it works for you.
About GeoServer 2.26 Series
Additional information on GeoServer 2.26 series:
Vulnerability
- GeoServer 2.26.1 Release
- GeoServer 2.25.4 Release
- GeoServer 2.26.0 Release
- CVE-2024-36401 Remote Code Execution (RCE) vulnerability in evaluating property name expressions
- GeoServer 2.25.2 Release
- GeoServer 2.24.4 Release
- GeoServer 2.23.6 Release
- GeoServer 2.25.1 Release
- GeoServer 2.25.0 Release
- GeoServer 2.23.5 Release