GeoServer 2.27.7 release is now available with downloads (bin, war, windows), along with docs and extensions.

This series has previously reached end-of-life, with this release issued to address an urgent bug or security vulnerability. Please apply this update as a mitigation measure only, and plan to upgrade to a stable or maintenance release of GeoServer.

GeoServer 2.27.7 is made in conjunction with GeoTools 33.7.

Thanks to Peter Smythe (AfriGIS) for making this release, and Andrea Aime (GeoSolutions) for testing.

Security Considerations

This release addresses security vulnerabilities and is an important upgrade for production systems. Details about the fixes will be provided at the start of November.

It is worth repeating that the 2.27 series has reached end-of-life. While we understand that this is the last series supporting Java 8 please update to the supported 2.28 or 3.0 releases.

See project security policy for more information on how security vulnerabilities are managed.

Release notes

Improvement:

  • GEOS-12099 GWC backup deadlock caused by DefaultTileLayerCatalog FileSystem
  • GEOS-12127 Fix flaky tests causing non-deterministic CI failures
  • GEOS-12154 Improve URL validation in SLD processing
  • GEOS-12195 Refactoring of service resolution in Dispatcher
  • GEOS-12199 Apply the catalog’s entity resolver consistently to stored query parsing
  • GEOS-12211 WPS: clean up GDAL configuration parsing
  • GEOS-12234 Report invalid connection settings when saving JDBC user/group, role and authentication services
  • GEOS-12235 Centralize remote IP resolution into a servlet filter
  • GEOS-12237 The style editor layer preview breaks with invalid chars in style names
  • GEOS-12238 CSW: Clearer exception in DirectDownload invalid requests
  • GEOS-12239 Read JDBC user and role property values as text.
  • GEOS-12240 Clearer stored query error messages when query id is too long

Bug:

  • GEOS-12100 Use SyncTaskExecutor to prevent deadlock in backup/restore tasklets

Task:

  • GEOS-12136 IOTestUtils.createRandomDirectory() replacing mkdir call to more recent java.nio.files API
  • GEOS-12160 Add URL checks to wps-download-plugin

For the complete list see 2.27.7 release notes.

Community Updates

Community module development:

  • GEOS-12219 Remove the gwc-sqlite community module
  • GEOS-12222 JWT-Header: Improvements and documentation clarifications

Community modules are shared as source code to encourage collaboration. If a topic being explored is of interest to you, please contact the module developer to offer assistance.

About GeoServer 2.27 Series

Additional information on GeoServer 2.27 series:

Release notes: ( 2.27.7 | 2.27.6 | 2.27.5 | 2.27.4 | 2.27.3 | 2.27.2 | 2.27.1 | 2.27.0 )