Announcements

Hello users of our z/OS open-source ports, 

We are pleased to announce the release of Rocket Open AppDev for Z v2.0.10.  This release includes the ports of the new tools, Bison, Flex and Libidn2, and version currency updates for cURL, Git, Perl, IBM Python and Vim, as well as an extensive list of security fixes and other fixes for many other ports.  For customers on a support contract, these latest builds are already available via conda or SMP/E.  For users not on a support contract, these builds will be made available on our public conda channel server on March 1st, 2025. 

Version currency updates: 

Curl 8.10.1 

Git 2.46.1  

OpenSSL 3.3.2 

Perl 5.40.0 

Python 3.12.3 New version of IBM python released 

Vim 9.1.0718 

Zlib 1.3.1 

 
CVEs published against earlier versions and resolved by V2.0.9: 

Curl CVE-2024-6197, CVE-2024-6874, CVE-2024-7264, CVE-2024-8096 fixes 

OpenSSL CVE-2024-6119 fix 

Vim CVE-2024-41957, CVE-2024-41965, CVE-2024-43374, CVE-2024-43790, CVE-2024-43802, CVE-2024-45306 fixes 

Fixes/CVEs in dependencies: 

Cert-bundle 2024.09.24 Certificate bundle update 

Kerberos library (for Curl and Sudo) CVE-2024-37370, CVE-2024-37371 fixes 

Perl packages has been rebuilt with the new version of Perl. 

Thank you!