The GeoTools team is pleased to announce the release of the latest stable version of GeoTools 32.3:
This release is also available from the OSGeo Maven Repository and is made in conjunction with GeoWebCache 1.26.3, and GeoServer 2.26.3.
Thanks to Jody Garnett (GeoCat) and Andrea Aime (GeoSolutions) for carrying out the release.
Release notes
Security Considerations
CVE-2025-30220 XML External Entity (XXE) Processing Vulnerability in XSD schema handling
GEOT-7760 CVE-2025-30220: XXE Processing Vulnerability in XSD schema handling (9.9 Critical)
Bug
GEOT-7320 ServiceException from a WFS server GET_FEATURE ends in a FactoryNotFoundException
GEOT-7632 WMS capabilities parsing should not fail if 'units' for a dimension is empty
GEOT-7699 In GeoPackage 1.2 the version should be reported also in the user_version pragma
GEOT-7700 GeoPackage geometry type name is case sensitive
GEOT-7707 A GeoPackage tile pyramid table must have a unique constraint on zoom/row/col
GEOT-7713 FeatureTypeRegistry of gt-complex is not thread-safe
GEOT-7715 GeoPackage data column constraint enums with string keys are not supported
GEOT-7719 The Jiffle process ignores input images nodata
GEOT-7720 Coordinates are truncated when encoding geometry
GEOT-7721 Oracle datastore does not handle NCLOB
GEOT-7724 Improve validation when deserializing objects
GEOT-7726 NPE in Transformer.getTransformedSortBy for SortBy.NATURAL_ORDER
GEOT-7743 HanaGeographyOnlineTest is failing after database upgrade
GEOT-7745 PagingFeatureCollection doesn't work as expected when used at a STAC collection
Improvement
GEOT-7718 WMS Parser can no longer hande IGN due to ordering issue in LogoURL
GEOT-7735 Upgrade ImageIO-EXT to 1.4.15
GEOT-7742 Allow spreading the folders in NETCDF_DATA_DIR into a hierarchy
Task
GEOT-7717 Updating automated testing to GDAL 3.10.1
GEOT-7723 Upgrade Oracle JDBC driver (ojdbc) from 8 to 11
GEOT-7725 Upgrade DB2 JDBC driver from 11.5.9.0 to 12.1.0.0
GEOT-7729 Update jai-ext to latest version (1.1.30)
GEOT-7734 Update to jai-ext 1.1.31
GEOT-7756 Update outdated http, irc, project and company references