Hello users of our z/OS open-source ports,
I am pleased to announce the release of Rocket Open AppDev for Z v2.0.7. This release includes a port of a new tool, pytest, and version currency updates for cURL, Diffutils, Git, Gzip, OpenSSL, Pytest, IBM Python, Sed, Vim, and Zlib, as well as an extensive list of security fixes and other fixes for many other ports. For customers on a support contract, these latest builds are already available via conda or SMP/E. For users not on a support contract, these builds will be made available on our public conda channel server on June 30th, 2024.
Version currency updates:
- Curl 8.5.0
- Diffutils 3.10
- Git 2.43.0
- Gzip 1.13
- OpenSSL 3.2.0
- Python 3.11.5 New version of IBM python released
- Sed 4.9
- Vim 9.0.2134
- Zlib 1.3
New supported tool:
CVEs published against earlier versions and resolved by V2.0.7:
- PHP 8.1.1 CVE-2022-4900 fix
- Sudo 1.9.13p3 z/OS-specific vulnerability fix
Fixes/CVEs in dependencies:
- Cert-bundle 2023.12.06 Certificate bundle update
- Libssh2 1.11.0 New version release
- Nghttp2 1.58.0 New version release
- Dependencies of Pytest (exceptiongroup 1.2, iniconfig 2.0.0, packaging 23.2, pluggy 1.3.0, tomli 2.0.1)
Note: The latest versions of IBM Python, namely 3.9.18 and 3.10.13, are now accessible on the Rocket secure channel and the local file channel. Additionally, Pytest 7.4.3 has been ported to ensure compatibility with both 3.9 and 3.10 versions of IBM Python.