We are happy to announce the release of GeoServer 2.13.2. Downloads are available (zip, war, and exe) along with docs and extensions.

This is a stable release recommended for production use. This release is made in conjunction with GeoTools 19.2 and GeoWebCache 1.13.2.

Improvements and Fixes

• style editor map legend always includes legend

• performance improvement for multi-band coverage time series

• WMS 1.3.0 performance improvement for north/east axis order

• Fix support of external graphics over http

Security updates

Please update your production instances of GeoServer to receive the latest security updates and fixes.

This release addresses several security vulnerabilities:

• Prevent arbitrary code execution via Freemarker Template injection

• XXE vulnerability in GeoTools XML Parser

• XXE vulnerability in WPS Request builder

• Various library upgrades (see above) from versions with known CVEs

Thanks to Steve Ikeoka, Kevin Smith, Brad Hards and Nuno Oliveira for providing fixes to these issues.

If you encounter a security vulnerability in GeoServer, or any other open source software, please take care to report the issue in a responsible fashion.

About GeoServer 2.13 Series

Additional information on the 2.13 series:

• Isolated workspaces (User Guide)

• Coverage views from heterogeneous bands (User Guide)

• State of GeoServer 2.13 (slideshare)

• See the GeoServer 2.13.0 released announcement for visual guide to new features

We are happy to announce the release of GeoServer 2.12.4. Downloads are available (zip, war, and exe) along with docs and extensions.

This is a maintenance release and a recommend update production systems. This release is made in conjunction with GeoTools 18.4.

Improvements

• Add forceLabels=on in the style editor map legend to help users,

• Remove language warnings during Windows setup compilation and remove ‘work’ folder when uninstalling on Windows

• Move MongoDB community module to supported status

Bug Fixes

• Response time of WMS 1.3.0 significantly higher than vs WMS 1.x.x on systems whose axis in north/east order

• Exception with NULL values with AggregateProcess

• Style with Interpolate function causes NullPointerException on GetLegendGraphic

• WFS with startIndex doesn’t return some results

• Vector identifying feature info uses an undocumented system variable to set the default search area

• Removing extensions with own configuration bits may cause GeoServer not to start up anymore

• Windows Installation issue - upgrading GeoServer results in corrupt data_dir

• Class java.util.Map$Entry is not whitelisted for XML parsing.

• Add WMS GetMap and GetFeatureInfo tests for App-Schema MongoDB integration

• CatalogRepository cannot find a store by name, if the store has just been added

• WCS 1.0.0 generates wrong links in GetCapabilities

• CatalogRepository should return a null on store not found, instead it throws a RuntimeException

• Layer page will only show up to 25 bands, regardless of the actual set of bands available

• Undocumented GDAL 2.3.0 CSV output geometry column name change breaks WPSOgrTest

Security Updates

Please update your production instances of GeoServer to receive the latest security updates and fixes.

If you encounter a security vulnerability in GeoServer, or any other open source software, please take care to report the issue in a responsible fashion.

About GeoServer 2.12 Series

Additional information on the 2.12 series:

• State of GeoServer 2.12 (SlideShare)

• GeoServer Feature Frenzy (SlideShare)

• New REST API documentation

• REST API Code Sprint Results

We are happy to announce the release of GeoServer 2.13.1. Downloads are available (zip, war, and exe) along with docs and extensions.

This is a stable release recommended for production use. This release is made in conjunction with GeoTools 19.1 and GeoWebCache 1.13.1.

New Features and Improvements

• MongoDB community module moved to extension

• Support PNG/JPEG WPS Downloads

• Allow self joining GetFeature without aliases

• Add support for priority in control-flow bounded queues

• Hibernate Monitoring extension moved to a community module

Bug Fixes

• WCS 1.0.0 generates wrong links in GetCapabilities

• WFS 2.0 capabilities report transaction support even if the service level is not configured as such

• WPSResourceManager cleanup is not deleting temporary subfolders (only files)

• GeoServer in CITE compliance mode fails to validate an empty LockFeature request

• WMS 1.3 GetMap request significantly slower than WMS 1.1.0 since GeoServer 2.11.4

• Import objects cannot be deleted when in COMPLETE state

• Style with Interpolate function causes NullPointerException on GetLegendGraphic

• Windows Installation issue - upgrading GeoServer results in corrupt data_dir

• Windows Installer: Remove ‘work’ folder when uninstalling

We are happy to announce the release of GeoServer 2.12.3. Downloads are available (zip, war, and exe) along with docs and extensions.

This is a maintenance release and a recommend update production systems. This release is made in conjunction with GeoTools 18.3.

Improvements

• Improved bounding box reporting in WMS GetCapabilities allowing more entries to be supported when Output bounding box for every support CRS is selected. Bounding boxes are now returned for layer groups as well.

• NetCDF/GRIB has been improved with a new setting to copy over global attributes when generating NetCDF output

Bug Fixes

• WFS 2.0 fix for interaction with startIndex and the total features count

• CQL filters can now be used with the WMS vector tile output format

• GeoPackage WPS output corrected to generate y coordinates from bottom left

• User interface for editing workspace details checks for conflicts with name or namespace URI.

• GML 3.2 output can now limit the number of decimals used for coordinate output

• REST management of styles now supports defining a style using POST for CSS, YSLD and MapBox styles (previously this only worked for SLD)

• WPS output error handling does a better job reporting when Async output format parameters are incorrect.

• WPS improvements have also been made for the cleanup of temporary folders and output “raw data encoder” (which is often used for image generation).

• Demo request page does a better job of of reporting authorization failures, and correctly sending credentials for testing service security.

• GetLegendGraphic fixes to correct line thickness and ensure polygons and points are not cut off.

Community Updates

For developers building from source our community modules remain a great place to collaborate on new functionality and improvements. This month Nuno Oliveira has added a new community module for the GeoTools MongoDB datastore.

Security Updates

Please update your production instances of GeoServer to receive the latest security updates and fixes.

If you encounter a security vulnerability in GeoServer, or any other open source software, please take care to report the issue in a responsible fashion.

About GeoServer 2.12 Series

Additional information on the 2.12 series:

• State of GeoServer 2.12 (SlideShare)

• GeoServer Feature Frenzy (SlideShare)

• New REST API documentation

• REST API Code Sprint Results

We are happy to announce the release of GeoServer 2.13.0. Downloads are available (zip, war, and exe) along with docs and extensions.

This is a release candidate of GeoServer made in conjunction with GeoTools 19.0.

Isolated Workspaces

The concept of an “Isolated Workspaces” has been added to GeoServer, to allow for reusing a namespace among multiple workspaces. In particular, an isolated workspace allows reuse of a namespace already used by another workspace, but its resources (layers, styles, etc …) can only be retrieved when using that workspace’s virtual services and will only show up in those virtual service capabilities documents.

When reusing a namespace among workspaces, exactly one of those must be non-isolated, and the rest must be isolated; i.e. isolated workspaces have no restrictions in namespaces usage but the existing restrictions still apply for non isolated workspaces.

This is particularly useful for those publishing complex schemas for INSPIRE compliance. For more details, refer to the original proposal.

GeoWebCache REST API

Two new endpoints have been added to the GeoWebCache REST API:

• /gwc/rest/blobstores:

  • GET /gwc/rest/blobstores for a list of the blobstores

  • GET /gwc/rest/blobstores/{blobStoreName} for details about a single blobstore

  • PUT /gwc/rest/blobstores/{blobStoreName} to create or update a blobstore

  • DELETE /gwc/rest/blobstores/{blobStoreName} to remove a blobstore

• /gwc/rest/gridsets:

  • GET /gwc/rest/gridsets for a list of the gridsets

  • GET /gwc/rest/gridsets/{gridSetName} for details about a single gridset

  • PUT /gwc/rest/gridsets/{gridSetName} to create or update a gridset

  • DELETE /gwc/rest/gridsets/{gridSetName} to remove a gridset

API docs for these endpoints will be added to the GeoServer documentation shortly. Until then, the request body syntax for PUT requests closely matched the equivalent structures in geowebcache.xml: BlobStores and GridSets.

The ArcGISCache backed layers are now also configurable via the REST API.

This release sees a major reworking of the configuration system in GeoWebCache that will allow for plugging in alternate configuration persistence mechanisms in future. While these changes should be largely invisible to users, it is a huge update that impacts all of GeoWebCache. However, due to these changes, we ask that you please test the embedded GeoWebCache.

UI Improvements

Entering in URLs for data files has been improved with autocomplete - now GeoServer will scan the path that has already been typed, and suggest existing files within that path.

In addition, autocomplete support has been added to a number of dropdowns which contain a long list of values, such as stores or layers. You can now start typing the name of an option, and the visible options will be filtered to match.

Editing raster layer parameters made easier, from a wall a text input fields, to appropriate controls being used depending on the parameter type. Here is a “before and after” comparison:

Finally, error messages are now displayed both at top (as usual) and bottom (new!) in all configuration pages. This should make it easier to locate error messages, especially while editing styles:

GeoPackage performance improvements

GeoPackage reading and rendering performance improved significantly, up to two times faster on large datasets full extractions and 50% faster on small bounding box searches, bringing GeoPackage on par with PostGIS. We also have a Google spreadsheet with more details.

Shapefile remains king of full dataset extractions and the fastest data source for pure spatial driven queries.

WFS 2.0 and WMTS 1.0 OGC compliance work

During the past few months we have been involved in OGC Testbed 14 and significantly improved GeoServer compliance with WFS 2.0 and WMTS 1.0. The work involved numerous fixes in GeoServer/GeoWebCache, along with variuos fixes in the CITE tests themselves. The changes were too numerous to backport to the 2.12.x series, so if compliance with these protocols is important it’s time to consider an upgrade to the 2.13.x series. For details see these lists:

• Full list of WFS 2.0 OGC compliances related changes

• List of changes for WMTS 1.0 are split among GeoWebCache and GeoServer ones

Work is still ongoing and a small number of issues are yet to be fixed, we’ll keep you updated.

Support for more PostGIS data types

The PostGIS data store now has simple support for HStore and JSON columns. HStore is returned as a Map and will render as a JSON formatted string field in common WFS output formats, while JSON is read as a string and rendered as-is. In both cases no special query support has been added for those types (but we’d be very happy if someone would work, or sponsor, that functionality too).

Better label position control in map rendering

When setting maxDisplacement on point/polygons the renderer used to search in a circular area around the designated label point. The new displacementMode vendor option allows to control the positioning by specifying the preferred cardinal positions, as a comma separated list.

Coverage views from heterogeneous bands

Satellite data often comes as a set of heterogeenous resolution bands, due to multiple sensors having different native resolutions. It is yet useful to have all bands packaged on the same coverage, for ease of display (false color setups) and information (GetFeatureInfo). Coverage views now allow to mix those bands, coming from separate files and organized in a image mosaic, in a single multiband coverage view, resampling on the fly with configurable target resolution policies.

Removed OS X installers

Due to lack of resources and interest, the OS X dmg installers are no longer being built. OS X users can still use the system-independent binary.

New community modules and improvements

The 2.13 series comes with a few new community modules, in particular:

• Do you want to generate GHRSST compliant outputs from GHRSST inputs? Try out the new GHRSST NetCDF output community module.

• The mongodb community module provides an easy-to-use wrapper around the Ge0Tools mongodb data store, allowing you to publish geospatial data stored in mongodb.

• There is also a new community module introducing NSG profiles for the WFS and WMTS services.

Existing community modules also got some love, in particular:

• The WPS download module now allows to download large maps, and also build animations, generating MP4 courtesy of jcodec library. Both processes can (and should!) be invoked asynchronously to better handle long generation times. Here is an example of animation output:

[video width=”768” height=”768” mp4=”/img/uploads/response.mp4”][/video]

• The WPS download process now also allows control of GeoTiff output structure (tiling, compression) in raw raster downloads, as well as downloading granules part of a heterogeneous mosaic in their native CRS and native resolution

• Various JDBCConfig and JDBCStore performance improvements, reducing the number of configuration database queries performed for each OGC request. Configuration queries are also consistently logged for further analysis

Note that community modules are not part of the release; instead you can find them in the nightly builds.

Other assorted improvements

• CQL filter not working when asking for vector tiles in wms request, GEOS-8065