This GeoServer 3.0.2 download guide gets you the newest stable release of the world’s most popular free, open-source map server. GeoServer 3.0.2 is the latest maintenance release of the GeoServer 3.0 series, released October 2026. It adds a DuckDB datastore, promotes OIDC login to a full extension, brings new REST features, and fixes about three dozen bugs — including a security fix. Below you will find what’s new in 3.0.2, step-by-step install instructions for Windows and Linux, system requirements, and answers to the most common questions.
GeoServer 3.0.2 Download: What’s New in This Release
GeoServer 3.0.2 is a stability release. If you run 3.0.0 or 3.0.1, this is the upgrade to install — it keeps everything from the 3.0 line and fixes the rough edges. GeoServer 3 moved the whole platform to Jakarta EE, Java 17, and the ImageN raster engine, so the 3.0.x series is the future of the project.
New features in GeoServer 3.0.2
DuckDB datastore (gs-duckdb). A new community extension connects GeoServer to DuckDB databases. DuckDB is the fast, embeddable analytics database, and this module lets you publish its tables as web layers.
PNG-WIND output format. A new community module renders wind datasets as PNG images. It is built for meteorological layers that show wind speed and direction.
OIDC promoted to extension. The OpenID Connect login module graduates from community module to official extension. If your organization uses Keycloak, Auth0, or another OIDC provider, single sign-on setup is now simpler and supported.
New REST capabilities. The REST API now supports CRS management, uploading a single GeoParquet file through REST, and ingesting vector datasets into VectorMosaic stores via REST. Automation scripts get shorter.
OGC API Processes improvements. The Processes API gains envelope input/output, multiple raw responses, a pageable processes page, an echo process, and better binary input/output. Developers building processing services will feel the difference.
AWS credential chain for GeoParquet. The admin UI now supports AWS credential-chain authentication for GeoParquet stores, making cloud-hosted data easier to connect.
Security fix in this release
GeoServer 3.0.2 fixes CVE-2025-23043, an XML External Entity (XXE) injection vulnerability in the features-templating extension. If you use that extension, upgrade promptly. Servers that don’t install it are not affected.
Bug fixes worth knowing
This release fixes roughly three dozen reported issues. The highlights: WFS requests no longer fail when the XML POST body is larger than 8kB, KMZ exports embed icon images instead of pointing at remote URLs, and the WMS layer REST PUT no longer returns a 500 error.
Workspace-scoped OGC API Styles endpoints no longer leak styles from other workspaces. The REST template controller now validates workspace, store, and resource names instead of accepting non-existent ones. On Windows, GeoServer now parses working-directory settings correctly under Jetty 12.1.9, and FIPS-enabled systems can start without the SHA1PRNG error.
Small but welcome: the layer preview gets a full-screen OpenLayers 10.8.0 view, and the file browser gains keyboard navigation.
System requirements
| Requirement | Detail |
|---|---|
| Java | Java 17 or newer; Java 17 LTS (64-bit) recommended (Java 21 also tested) |
| Memory (RAM) | 2 GB minimum, 4 GB or more recommended (rasters and tile caches grow fast) |
| Disk space | 500 MB free for the install, 2 GB+ free for your data directory |
| Operating system | 64-bit Windows 10/11, Ubuntu or other Linux, macOS |
| Servlet container | Bundled Jetty 12 (Windows installer and binary zip include it); Tomcat 11 for the .war |
| Browser | Any modern browser for the web admin (Chrome or Firefox recommended) |
Install Java first and verify it with java -version — GeoServer 3 will not start without it. Java 17 LTS is the safe, supported choice.
How to download GeoServer 3.0.2
The official release page for 3.0.2 is the GeoServer GitHub releases page. The project’s download page and SourceForge mirrors carry the packaged installers.
For beginners on Windows, take the Windows installer — it bundles the Jetty server, so you click through a setup wizard and you’re done. For Linux or macOS, take the platform-independent binary (.zip) and unzip it anywhere. The web archive (.war) is for deploying into your own servlet container such as Tomcat 11.
Always download from the official GeoServer pages or the official GitHub releases. Never fetch server software from random mirror sites.
How to install GeoServer 3.0.2 on Windows
Run the Windows installer, accept the defaults, and finish. Launch Start GeoServer from the Start menu and wait about 30 seconds for the server to boot. Then open http://localhost:8080/geoserver in your browser.
Log in with username admin and password geoserver, then change that password immediately under Security > Users, Groups, Roles. Everyone on the internet knows the default login.
How to install GeoServer 3.0.2 on Linux and macOS
Unzip the platform-independent binary anywhere. Open a terminal in the bin folder and run startup.sh (Linux/macOS) or startup.bat (Windows). Keep that terminal open — closing it stops the server.
Open http://localhost:8080/geoserver and log in as admin / geoserver. Change the password before you expose anything. To publish your first shapefile, create a workspace, add a store, publish the layer, and preview it — our GeoServer 3.0.1 install guide walks through every click.
Upgrading from GeoServer 3.0.0 or 3.0.1
Upgrading is straightforward: back up your data directory, stop the server, install 3.0.2, and point it at the same data directory. No data-directory migration is required for this maintenance release. If you still run GeoServer 2.28.x, read the 3.x migration guide first — the move to Jakarta EE changes the servlet container requirements.
GeoServer 3.0.2 Free Download FAQs
Is GeoServer 3.0.2 really free?
Yes. GeoServer is free, open-source software (GPL license) maintained by the OSGeo community. There is no paid edition — every feature is included.
What is new in GeoServer 3.0.2?
A DuckDB datastore community extension, a PNG-WIND output format for wind data, OIDC login promoted to a full extension, new REST features (CRS management, parquet upload, VectorMosaic ingestion), OGC API Processes improvements, a security fix for an XXE vulnerability in features-templating, and about three dozen bug fixes.
Should I upgrade from GeoServer 3.0.1?
Yes. 3.0.2 is a maintenance release with bug and security fixes and no breaking changes. Back up your data directory first, then install 3.0.2 over it.
Which Java version does GeoServer 3.0.2 need?
Java 17 or newer, with Java 17 LTS the recommended choice (Java 21 is also tested). Verify with java -version before installing — GeoServer will not start without Java.
What is the default GeoServer login?
Username admin, password geoserver. Change it on first login, especially on any server reachable from the internet.
Where do I download GeoServer 3.0.2?
From the official GeoServer GitHub releases page (the 3.0.2 tag) and the project’s download page. Windows users should take the Windows installer, which bundles the Jetty server.
System requirements (GeoServer 3.0.2): Java 17+ (Java 17 LTS recommended) | 2 GB RAM minimum (4 GB+ recommended) | 500 MB disk (2 GB+ for data) | Windows 10/11, Ubuntu/Linux, or macOS | modern browser. GeoServer is free from the official GeoServer release pages.
Related posts: GeoServer Free Download (3.0.1 Install Guide) · QGIS Download for Windows, MacOS and Linux · What is PostGIS? GIS extension for PostgreSQL
GeoServer 3.0.2 keeps the 3.0 series moving forward: DuckDB support, OIDC as a proper extension, stronger REST automation, and a solid round of fixes — all free and open source. Install it in minutes, publish your first layer, and you have the same web-GIS stack that real mapping portals run on.
Disclosure: Some links on this page are affiliate links. If you buy a book through them, CartoGeek may earn a small commission at no extra cost to you. This helps keep our GIS guides free for students. Thank you for your support!
Recommended GIS Books
Learn QGIS: Techniques for Efficient Spatial Analysis (5th Edition)
by Eugenia Sarafova, Ivan Ivanov, Andrew Cutts, Anita Graser
The most current beginner-to-intermediate QGIS book, covering spatial analysis, cartography, field data collection and earth observation workflows with real-world examples. Written with input from Anita Graser, a well-known QGIS community figure, it walks readers from first install to confident analysis.
Pros:
- Up to date with recent QGIS versions
- Hands-on, exercise-driven teaching style
- Covers modern topics like GenAI tools and mobile data collection
Cons:
- Moves fast for absolute beginners with zero GIS background
- Some advanced chapters assume basic statistics knowledge
Making Maps: A Visual Guide to Map Design for GIS (4th Edition)
by John Krygier
A beautifully illustrated, playful guide to cartographic design — from map layout and color to typography and visual storytelling. The newest edition adds coverage of data aggregation, AI in mapping and modern map-making workflows.
Pros:
- The most enjoyable cartography book to read — visual and witty
- Teaches design thinking, not just button-clicking
- Companion website with map examples
Cons:
- Design-focused — not a GIS software manual
- Philosophical tone isn’t for everyone
Geospatial Data Science Essentials: 101 Practical Python Tips and Tricks
by Milan Janosov
A hands-on collection of 101 practical Python techniques for geospatial data science, from spatial data structures to machine learning. Compact, code-first sections make it a strong desk companion for analysts leveling up.
Pros:
- Bite-sized, practical format — dip in anywhere
- Covers modern topics including spatial ML
- Good value as a reference
Cons:
- Tips format means less narrative depth
- Assumes comfort with Python and data frames
