CoreSpatial 2025-Q3 Release Announcement

NGS is pleased to announce the 2025.3 release of CoreSpatial Server, Basemaps and Map Manager.

We anticipate the release of Portal in the upcoming weeks based on MapStore2 v2025.01.01, as well as promoting FIPS compliance for GeoServer to a generally available release.

Other exciting features on our roadmap include:

• Expanded deployment options with Docker Compose
• AI Enablement via MCP API
• Expanded FIPS 140 compliance across all CoreSpatial modules

CoreSpatial Server and Basemaps Release Notes

2025.3.5 (9/24/2025)

• Docker setup scripts hardened and simplified, unified permission/ownership helpers, more robust curl SigV4 detection, consolidated S3/MinIO download logic, and non-root friendly scripts
• Default basemap data storage now points to Cloudflare R2 (via BUCKET_HOST)

2025.3.4 (8/29/2025)

• Update GeoServer to 2.27.2
• Docker build now uses Iron Bank ubi9 base image

2025.3.3 – 2025.3.1 (July–August 2025)

• Patch vulnerabilities in OpenJDK 17
• Update PostgreSQL JDBC jar to 42.7.7 – patches CVE-2025-49146
• Update commons-beanutils to 1.11.0 – patches CVE-2025-48734
• Add logic for catalog manifest to allow for updates to catalog

CoreSpatial Map Manager Release Notes

2025.3.3 (9/22/2025)

• Bump Spring Boot to 3.5.6 to clear 1 High severity CVE

2025.3.2 – 2025.3.1 (July–August 2025)

• Bump Spring Boot to 3.5.5 and Postgres JDBC jar to 42.7.7 to clear multiple CVEs