2.18.7

Release notes - GeoServer - 2.18.7

Bug

GEOS-10842 JDBCConfig: escape user inputs in SQL queries

Improvement

GEOS-10864 Escape user inputs in SQL queries

GeoServer 2.21.4 Release

Release notes

Vulnerabilities

• CVE-2023-25158 OGC Filter SQL Injection Vulnerabilities (GeoTools)
• CVE-2023-25157 OGC Filter SQL Injection Vulnerabilities (GeoServer)

Bug

• GEOS-7506 shutdown.bat cannot run without JAVA_HOME set

• GEOS-10683 FileWrapperResourceTheoryTest fails on Windows since Java 11

• GEOS-10689 OSHISystemInfoCollector holds non daemon threads, prevents clean shutdown of Tomcat

• GEOS-10807 LayerGroup with nested group POST rest op fails with null styles attribute

• GEOS-10813 jdbc config cache bug

• GEOS-10817 Features Templating - XML HTML output doesn't escape all html and xml symbols

• GEOS-10818 Schemaless Property Accessor returns emptylist instead of null for null/not existing properties

• GEOS-10829 JDBC Config missing some nested layer properties

• GEOS-10842 Escape user inputs in SQL queries

• GEOS-10846 Enable auto-escaping for REST HTML templates

Improvement

• GEOS-10814 Update jdbc config to use consistent SQL formatting

• GEOS-10816 OGC API Features complex features test fails since introduction of tag in HTML templates

• GEOS-10848 Column remarks documentation should be updated to reflect that functionality is supported with JNDI

• GEOS-10851 GWC S3 Blobstore Parameters Get Converted back to plain text after an application restart

GeoServer 2.22.1 Release

Release notes

Sub-task

GEOS-10782 CITE WFS 1.1 - HITS mimetype is incorrect

GEOS-10783 CITE WFS 1.1 - Check customized feature type to determine if transform wrapper needed

GEOS-10784 CITE WFS 1.1 - don't do illegal geometry conversions

GEOS-10785 CITE WFS 1.1 - Data Dir - allow anonymous users to modify data

Bug

GEOS-10632 Make sure GetLegendGraphics honors the WMS memory service limits

GEOS-10704 Task Manager Metadata wrong gs-metadata dependency

GEOS-10753 GeoServer can create GML output that is not valid XML

GEOS-10757 CITE: WMS <Style> has elements in wrong order (DTD validation)

GEOS-10770 Support list of audiences (aud) when validating Oauth 2.0 Bearer Tokens

GEOS-10794 Add a new vector data source (Web Feature Server (NG)) Filter compliance level bug

GEOS-10807 LayerGroup with nested group POST rest op fails with null styles attribute

GEOS-10809 Keycloak : add support for usernames with spaces

GEOS-10813 jdbc config cache bug

GEOS-10817 Features Templating - XML HTML output doesn't escape all html and xml symbols

GEOS-10818 Schemaless Property Accessor returns emptylist instead of null for null/not existing properties

GEOS-10829 JDBC Config missing some nested layer properties

GEOS-10840 2.22.1 Maven and release artifacts pushed with SNAPSHOT dependencies

Improvement

GEOS-10673 Add example of using FlatGeobuf granules to the Vector Mosaic documentation

GEOS-10746 STAC Sortables should be a subset of the configured queryables

GEOS-10755 WCS 2.0 module should not use string concatenation to build XML

GEOS-10762 Allow enabling auto-escaping for WMS GetFeatureInfo HTML templates

GEOS-10773 Enable localized MapML responses that use WMS language parameter

GEOS-10777 Update MapML viewer to latest release

GEOS-10790 Allow to control map transparency in DownloadMapProcess

GEOS-10810 Enable internationalized layer label / MapML document title

GEOS-10814 Update jdbc config to use consistent SQL formatting

GEOS-10816 OGC API Features complex features test fails since introduction of tag in HTML templates

GEOS-10827 Document property selection in image mosaic

New Feature

GEOS-10716 Build schema for simple feature types leveraging column descriptions, when available

GEOS-10758 OGCAPI - Features - Add storageCrs property for Collections

Task

GEOS-10613 Bump postgresql from 42.3.3 to 42.4.1

GEOS-10775 Update xmlunit to 1.6

GEOS-10778 Retire GeoStyler community module

GEOS-10812 Update Jettison to 1.5.3

GeoServer 2.21.3

Release Notes

Maintenance release of GeoServer 2.21 series.

New Feature

• GEOS-10716 Build schema for simple feature types leveraging column descriptions, when available

• GEOS-10734 SpatialJSON WFS output format community module

• GEOS-10758 OGCAPI - Features - Add storageCrs property for Collections

Improvement

• GEOS-10606 Generate html notice and license information for release assemblies

• GEOS-10673 Add example of using FlatGeobuf granules to the Vector Mosaic documentation

• GEOS-10696 Allow configuration of Output Format types allowed in GetFeature

• GEOS-10717 XStreamServiceLoader performance improvement with XstreamPersister caching

• GEOS-10718 [OIDC] the OIDC plugin does not currently take into account the id_token_hint parameter

• GEOS-10735 Obfuscate secret key in S3 Blob Store, avoiding requiring reentry when editing and HTML source visibility

• GEOS-10746 STAC Sortables should be a subset of the configured queryables

• GEOS-10755 WCS 2.0 module should not use string concatenation to build XML

• GEOS-10762 Allow enabling auto-escaping for WMS GetFeatureInfo HTML templates

• GEOS-10773 Enable localized MapML responses that use WMS language parameter

• GEOS-10777 Update MapML viewer to latest release

• GEOS-10790 Allow to control map transparency in DownloadMapProcess

• GEOS-10810 Enable internationalized layer label / MapML document title

Bug

• GEOS-4727 Editing SQL views seems to be leaking connections

• GEOS-10632 Make sure GetLegendGraphics honors the WMS memory service limits

• GEOS-10667 WFS: inconsistent srsDimension=4 with topp:tasmania_roads layer

• GEOS-10707 GeoFence internal LayerGroup Limit merge inconsistency

• GEOS-10710 Features Templating backward mapping with back xpath ('../my/property/name') doesn't work

• GEOS-10714 DefaultGeoServerFacade throws ConcurrentModificationException for workspace settings and services

• GEOS-10729 Concurrent access on data access rules (authorization) can lead to loss of configured catalog mode, and lost rules

• GEOS-10731 GWC variable Parameterization does not work with geoserver-environment.properties due to the bean initialization order

• GEOS-10736 OSEO product creation via REST API fails if the product id starts with a valid ISO date

• GEOS-10737 GeoCSS misses support for labelInFeatureInfo and labelAttributeName vendor options

• GEOS-10741 Remove deprecated YUI usage

• GEOS-10753 GeoServer can create GML output that is not valid XML

• GEOS-10757 CITE: WMS <Style> has elements in wrong order (DTD validation)

• GEOS-10809 Keycloak : add support for usernames with spaces

• GEOS-10782 CITE WFS 1.1 - HITS mimetype is incorrect

• GEOS-10783 CITE WFS 1.1 - Check customized feature type to determine if transform wrapper needed

• GEOS-10784 CITE WFS 1.1 - don't do illegal geometry conversions

• GEOS-10785 CITE WFS 1.1 - Data Dir - allow anonymous users to modify data

Task

• GEOS-10721 Bump jettison from 1.4.1 to 1.5.1

• GEOS-10775 Update xmlunit to 1.6

GeoServer 2.22.0

Release notes

Bug

GEOS-4727 Editing SQL views seems to be leaking connections

GEOS-10667 WFS: inconsistent srsDimension=4 with topp:tasmania_roads layer

GEOS-10707 GeoFence internal LayerGroup Limit merge inconsistency

GEOS-10709 Schemaless Features - Simplified property access might return values for wrong property names

GEOS-10710 Features Templating backward mapping with back xpath ('../my/property/name') doesn't work

GEOS-10714 DefaultGeoServerFacade throws ConcurrentModificationException for workspace settings and services

GEOS-10729 Concurrent access on data access rules (authorization) can lead to loss of configured catalog mode, and lost rules

GEOS-10731 GWC variable Parameterization does not work with geoserver-environment.properties due to the bean initialization order

GEOS-10736 OSEO product creation via REST API fails if the product id starts with a valid ISO date

GEOS-10737 GeoCSS misses support for labelInFeatureInfo and labelAttributeName vendor options

GEOS-10741 Remove deprecated YUI usage

Improvement

GEOS-10717 XStreamServiceLoader performance improvement with XstreamPersister caching

GEOS-10718 [OIDC] the OIDC plugin does not currently take into account the id_token_hint parameter

GEOS-10735 Obfuscate secret key in S3 Blob Store, avoiding requiring reentry when editing and HTML source visibility

GEOS-10739 Contact information user interface feedback for welcome message

GEOS-10740 Service enabled does not respect minimal/custom service names

GEOS-10750 German Translation Overhaul Part 1

New Feature

GEOS-10734 SpatialJSON WFS output format community module

Task

GEOS-10721 Bump jettison from 1.4.1 to 1.5.1

GeoServer 2.21.2

Release notes

Bug

GEOS-10711 ConcurrentModificationException can happen while modifying data access rules with concurrent WMS traffic

GEOS-10709 Schemaless Features - Simplified property access might return values for wrong property names

GEOS-10701 Logging profiles timestamp reports minutes where it should report months

GEOS-10700 Impossible to customize built-in logging profiles: GeoServer will rewrite them on startup

GEOS-10699 WCS 2.0 latitude subsetting may fail if the source data has longitudes spanning both datelines

GEOS-10698 OGCAPI and REST API coexistence issue

GEOS-10671 Parallel REST API calls failures (users)

GEOS-10669 The STAC API does not declare suppport for the search fields extension

GEOS-10659 OGC API-Plugin breaks REST-API

GEOS-10649 Concurrent modification to GWC style parameter filter can lead to OOM

GEOS-10648 WMTS GetCapabilities does not respect Catalog Mode HIDE and Global Services OFF

GEOS-10636 (proxied) Login is broken after upgrade to 2.22-M0 and 2.21.1

GEOS-10635 GeoFence: area reprojection tests are failing

GEOS-10630 SchemalessFeatures - POST filter might not get evaluted

GEOS-10628 GWC Environment parameterization does not work on geoserver startup

GEOS-10622 PregeneralizedFeature extension does not work with JDBCStore

GEOS-10609 Issue retrieving a workspace style without prefix on JDBCConfig

GEOS-10607 Links disappearing for the Admin user

GEOS-10598 XSS vulnerability in the email address field

GEOS-10547 Integrated WMS caching without the tiled parameter might result in deep recursion

GEOS-10507 GeoFence Internal - Support Batch operations for Rules and AdminRules

Improvement

GEOS-10677 Improve cleanup of multi part form upload to the dispatcher

GEOS-10676 Support uploading .bmp and .gif images as SLD Package icons through restconfig

GEOS-10644 Keycloak - Improvements to Role Service

GEOS-10639 Keycloak Filter - Allow to use a button to reach keycloak login page

GEOS-10637 Keycloak filter configurability improvements

GEOS-10625 GeoFence: improve filtering by role

GEOS-10620 Update oshi to 6.2.2 to support Apple M2 CPU

GEOS-10606 Generate html notice and license information for release assemblies

New Feature

GEOS-10629 Features Templating - Allow control over encodign of complex attribute with n cardinality

GEOS-10610 Selective cache reset on stores and resources, via REST API

Task

GEOS-10692 misspelled FidTransformerVisitor class

GEOS-10643 Improve validation when publishing classpath resources

GEOS-10631 AccessManager will not be looked up if multiple beans are of type DefaultResourceAccessManager

GeoServer 2.22-RC

Release notes

Bug

GEOS-10715 Workspace Filter for PublishedInfo doesn't work for LayerGroups

GEOS-10711 ConcurrentModificationException can happen while modifying data access rules with concurrent WMS traffic

GEOS-10701 Logging profiles timestamp reports minutes where it should report months

GEOS-10700 Impossible to customize built-in logging profiles: GeoServer will rewrite them on startup

GEOS-10698 OGCAPI and REST API coexistence issue

GEOS-10697 WCS 2.0 GetCoverage might fail for coverages slightly crossing the dateline

GEOS-10684 WCS 2.0 is ignoring declared bounds and CRS

GEOS-10678 Use of data/minimal does not work due to NPE looking up settings.xml

GEOS-10668 HTML page default for WFS 1.0.0 GetCapabilities OnlineResource (when WFSInfo.getOnlineResource() not available)

GEOS-10667 WFS: inconsistent srsDimension=4 with topp:tasmania_roads layer

GEOS-10666 Mosaic uses excess memory when mosaicking many small images

GEOS-10664 WMTSGetCapabilities providerSite use of online resource

GEOS-10659 OGC API-Plugin breaks REST-API

GEOS-10648 WMTS GetCapabilities does not respect Catalog Mode HIDE and Global Services OFF

GEOS-10643 Improve validation when publishing classpath resources

GEOS-10641 OGC API - Features - Failure on feature item CRS

GEOS-10636 (proxied) Login is broken after upgrade to 2.22-M0 and 2.21.1

GEOS-10631 AccessManager will not be looked up if multiple beans are of type DefaultResourceAccessManager

GEOS-10630 SchemalessFeatures - POST filter might not get evaluted

GEOS-10628 GWC Environment parameterization does not work on geoserver startup

GEOS-10622 PregeneralizedFeature extension does not work with JDBCStore

GEOS-10617 STAC module will throw exception on creation of a new collection

GEOS-10615 Wrong KML placemark template path in documentation

GEOS-10609 Issue retrieving a workspace style without prefix on JDBCConfig

GEOS-10584 Enabling logging of request body results in stream closed errors in tomcat environment

GEOS-10578 Add support for backing up and restoring WMS and WMTS

GEOS-10570 Deleting a style in a Hazelcast cluster renames the styles directory

GEOS-10568 Fix module modularity for GWC

GEOS-10567 Fix module modularity for OpenIdConnect and oauth2-core

GEOS-10553 Importer replace fails with schema mismatch

GEOS-10548 GeoFence layer group handling is inconsistent

GEOS-10545 Layer Group cache not initialized

GEOS-10544 Switch from itext to openpdf for printing extension via mapfish-print 2.2.0 upgrade

GEOS-10539 DescribeLayer typeName is no longer workspace qualified

GEOS-10535 WFS Update request throw NPE on bad namespace

GEOS-10534 a badly formed delete transaction will get a NPE instead of an informative error message

GEOS-10533 Review startup logging INFO and WARN updates

GEOS-10528 Empty groupList tag remains after group deletion

GEOS-10526 Parallel REST API calls failures (roles)

GEOS-10522 REST API Failure in @ExceptionHandler No input String specified

GEOS-10519 Sphinx build failure with extlinks (new warnings in Sphinx build)

GEOS-10518 Partial RELINQUISH_LOG4J_CONTROL regression with WildFly

GEOS-10516 WMS GetCapabilities dimension representations ignores the end attribute

GEOS-10510 GTXML parser handling of xs:boolean attributes mixed and abstract values true and false

GEOS-10507 GeoFence Internal - Support Batch operations for Rules and AdminRules

GEOS-10502 GML3 output is not pretty printed when pretty print is turned on in global settings.

GEOS-10492 GeoFence InternalServer - InternalUserResolver unnecessarily reload Roles from services

GEOS-10488 OpenId Connect - include spring jwt jar in release package

GEOS-10487 Custom logging configuration not respecting log location setting

GEOS-10486 OGC API - Features - Date and Time fields are labeled with date-time in Queryables response

GEOS-10468 (virtually) Impossible to turn off "Enable All Statistics" in > Server status > System Status

GEOS-10430 Rest API fails for WMS Store

GEOS-10290 WFS GetFeature raises error when querying layers built on 3/4 dimensional shapefiles

Improvement

GEOS-10696 Allow configuration of Output Format types allowed in GetFeature

GEOS-10677 Improve cleanup of multi part form upload to the dispatcher

GEOS-10676 Support uploading .bmp and .gif images as SLD Package icons through restconfig

GEOS-10644 Keycloak - Improvements to Role Service

GEOS-10642 Add Azure BLOBs support to the COG community module

GEOS-10639 Keycloak Filter - Allow to use a button to reach keycloak login page

GEOS-10637 Keycloak filter configurability improvements

GEOS-10620 Update oshi to 6.2.2 to support Apple M2 CPU

GEOS-10606 Generate html notice and license information for release assemblies

GEOS-10581 Support native GeoTIFF band selection

GEOS-10580 Server status page improvements for status, modules and docs

GEOS-10569 OGC API - Features - Support sortby query parameter

GEOS-10555 OpenID Filter - Add possibility to configure sending of client secret in token response

GEOS-10536 OAUTH2 Open ID Connect Community module - doesn't support keycloak

GEOS-10514 Better capture catalog configuration issues: layergroup with a misconfigured layer

GEOS-10505 Display style format as new column in Styles-list, along with Style Name and Workspace

GEOS-10501 GetMap: support auth headers forwarding to remote SLD urls

GEOS-10495 Request Logger Memory Buffer Limits

GEOS-10464 Improve logging and check for NPEs and other issues in Importer Module

New Feature

GEOS-10651 Incorporate Vector Mosaic Datastore

GEOS-10629 Features Templating - Allow control over encodign of complex attribute with n cardinality

GEOS-10610 Selective cache reset on stores and resources, via REST API

GEOS-10603 STAC datastore packaging

[GEOS...

GeoServer 2.20.6

Release notes

Bug

GEOS-10649 Concurrent modification to GWC style parameter filter can lead to OOM

GEOS-10643 Improve validation when publishing classpath resources

GEOS-10636 (proxied) Login is broken after upgrade to 2.22-M0 and 2.21.1

GEOS-10635 GeoFence: area reprojection tests are failing

GEOS-10631 AccessManager will not be looked up if multiple beans are of type DefaultResourceAccessManager

GEOS-10630 SchemalessFeatures - POST filter might not get evaluted

GEOS-10609 Issue retrieving a workspace style without prefix on JDBCConfig

GEOS-10607 Links disappearing for the Admin user

GEOS-10598 XSS vulnerability in the email address field

GEOS-10578 Add support for backing up and restoring WMS and WMTS

GEOS-10570 Deleting a style in a Hazelcast cluster renames the styles directory

GEOS-10568 Fix module modularity for GWC

GEOS-10567 Fix module modularity for OpenIdConnect and oauth2-core

GEOS-10547 Integrated WMS caching without the tiled parameter might result in deep recursion

GEOS-10539 DescribeLayer typeName is no longer workspace qualified

GEOS-10516 WMS GetCapabilities dimension representations ignores the end attribute

GEOS-10507 GeoFence Internal - Support Batch operations for Rules and AdminRules

GEOS-10468 (virtually) Impossible to turn off "Enable All Statistics" in > Server status > System Status

Improvement

GEOS-10644 Keycloak - Improvements to Role Service

GEOS-10639 Keycloak Filter - Allow to use a button to reach keycloak login page

GEOS-10637 Keycloak filter configurability improvements

GEOS-10625 GeoFence: improve filtering by role

GEOS-10620 Update oshi to 6.2.2 to support Apple M2 CPU

GEOS-10580 Server status page improvements for status, modules and docs

New Feature

GEOS-10629 Features Templating - Allow control over encodign of complex attribute with n cardinality

GEOS-10610 Selective cache reset on stores and resources, via REST API

Task

GEOS-10588 Build structure gs-sec-oauth2-core is duplicated in the reactor

GEOS-10579 Bump oshi-core from 6.2.0 to 6.2.1

GEOS-10551 Refactor commons-httpclient usage in the WPS module

GeoServer 2.22-M0 Milestone Release

Release notes

Improvement

GEOS-10058 Welcome Page Layout layout and web service selection [GISP-202]

New Feature

GEOS-10624 Data directory and documentation update

GeoServer 2.21-M0 Milestone Release

Release notes

New Feature

GEOS-10426 GISP 167: Upgrade Log4j