GeoTools

OSGeo

Wednesday, February 5, 2025

GeoTools 28.6 Released

The GeoTools shares the release of GeoTools 28.6 available for Java 8 applications: 

This release is also available from the OSGeo Maven Repository and is made to support the upcoming GeoNetwork 4.2.12 release.

This release provides Java 8 artifacts for CVE-2024-36404. The vulnerability report has been updated to allow Java 8 applications avoid being flagged by security scans.

We are grateful to Jody Garnett (GeoCat) for making this release on behalf of the GeoNetwork project.

Release notes

Security Considerations

GEOT-7587 Improve handling of XPath expressions (CVE-2024-36404)

Bug

GEOT-7444 HanaGeographyOnlineTest.testBounds is failing in CI

GEOT-7458 JDBCDataStore: Unique visitor not always compatible with sortBy

GEOT-7490 WPS Intersection NPE when the Return Value Should be a Point

GEOT-7496 gt-xsd-fes fails to encode PropertyIsBetween

GEOT-7497 gt-wfs-ng ignores maxFeatures on WFS 2.0

Improvement

GEOT-7491 ShapeFileDataStore should use GeometryFactory of DataStore

Task

GEOT-7290 Visual difference for ReprojectGoogleMercatorLargerThanWorld test on aarch64

GEOT-7451 Upgrade org.json:json to 20230618

GEOT-7594 Bump org.postgresql:postgresql from 42.6.0 to 42.7.2

GEOT-7714 Bump ch.qos.logback:logback-classic from 1.2.11 to 1.3.12