On behalf of Rocket OpenApp Team,
I am pleased to announce the release of Rocket Open AppDev for Z v2.0.18. This release includes version currency updates for Curl, OpenSSL, Pytest, Python and Requests, as well as an extensive list of security fixes and other fixes for many other ports. For customers on a support contract, these latest builds are already available via conda or SMP/E. For users not on a support contract, these builds will be made available on our public conda channel server on January 31st, 2027.
Version currency updates:
- Curl 8.21.0
- OpenSSL 4.0.1
- Pytest 9.1.1
- Python 3.14.4 New version of IBM python released
- Requests 2.34.2
CVEs published against earlier versions and resolved by V2.0.17:
- Curl CVE-2026-4873, CVE-2026-5545, CVE-2026-5773, CVE-2026-6253, CVE-2026-6276, CVE-2026-6429, CVE-2026-7168 fixes
- Libssh2 CVE-2025-15661, CVE-2026-55199, CVE-2026-55200, CVE-2026-58050, CVE-2026-58051, CVE-2026-7598 fixes
- OpenSSL CVE-2026-28387, CVE-2026-28388, CVE-2026-28389, CVE-2026-28390, CVE-2026-31789, CVE-2026-31790, CVE-2026-34180, CVE-2026-34181, CVE-2026-34182, CVE-2026-34183, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447, CVE-2026-7383, CVE-2026-9076 fixes
Fixes/CVEs in dependencies:
- All python packages Rebuilt with Python 3.14
- Cert-bundle 2026.07.20 Certificate bundle update
- Certifi 2026.06.17 New version release
- Charset-normalizer 3.4.9 New version release
- Iniconfig 2.3.0 New version release
- Idna 3.18 New version release
- Libtag 2.0 Improvements of working with tags.
- Pygments 3.4.9 New version release
Changes in install options:
- The local file channel installer for core AppDev 2.0.18 tools: appdev_local-2.0.18-2026-07-23.run.
- The separate local file channel installer: aitools_local-2.0.18-2026-07-23.run. It includes the python packages: Blinker, Flask-WTF, PyJWT, WTForms, that can be installed along with Pandas, Pluggy, Flask, and Gunicorn and their dependencies. The packages are also available on the secure channel – zoss-aitoolkit.
- Update version of SMP/E installer The new version of the installer is HROA140. It can be installed on top of the HROA130 or separately.
