On behalf of Rocket OpenApp Team,
I am pleased to announce the release of Rocket Open AppDev for Z v2.0.19. This release includes version currency updates for Vim and Python, as well as an extensive list of security fixes and other fixes for many other ports. For customers on a support contract, these latest builds are already available via conda or SMP/E. For users not on a support contract, these builds will be made available on our public conda channel server on February 28th, 2027.
Version currency updates:
- Python 3.14.4 New version of IBM python (3.14.4.2) released
- Vim 9.2.1001
New supported tool:
- JavaUnzip 1.0.0
- JavaZip 1.0.0
CVEs published against earlier versions and resolved by V2.0.18:
- Libssh2 CVE-2026-66032, CVE-2026-66033, CVE-2026-66034, CVE-2026-66035 fixes
- Vim CVE-2026-25749, CVE-2026-26269, CVE-2026-28417, CVE-2026-28418, CVE-2026-28419, CVE-2026-28420, CVE-2026-28421, CVE-2026-28422, CVE-2026-32249, CVE-2026-33412, CVE-2026-34714, CVE-2026-34982, CVE-2026-35177, CVE-2026-39881, CVE-2026-41411, CVE-2026-42307, CVE-2026-43961, CVE-2026-44656, CVE-2026-45130, CVE-2026-46483, CVE-2026-47162, CVE-2026-47167, CVE-2026-51400, CVE-2026-51401, CVE-2026-52858, CVE-2026-52859, CVE-2026-52860, CVE-2026-55693, CVE-2026-55892, CVE-2026-55895, CVE-2026-57451, CVE-2026-57452, CVE-2026-57453, CVE-2026-57455, CVE-2026-57456, CVE-2026-59856, CVE-2026-59857, CVE-2026-59858, CVE-2026-73070, CVE-2026-73071, CVE-2026-73072, CVE-2026-73074, CVE-2026-73076, CVE-2026-73077, CVE-2026-73078 fixes
Fixes/CVEs in dependencies:
- Cert-bundle 2026.08.24 Certificate bundle update
- Libtag 2.0 Improvements of working with tags.
- Ncurses 6.6.20260822 New version release (includes vulnerability fix: CVE-2025-69720).
Changes in install options:
- appdev_local-2.0.19-2026-08-27.run The local file channel installer for core AppDev 2.0.19 tools.
The packages are also available on the secure conda channel – zoss-appdev. - aitools_local-2.0.19-2026-08-27.run The separate local file channel installer. It includes the python packages: Blinker, Flask-WTF, PyJWT, WTForms, that can be installed along with Pandas, Pluggy, Flask, and Gunicorn and their dependencies. The packages are also available on the secure channel – zoss-aitoolkit.
- RD14001 PTF The new PTF. It can be installed on top of the HROA140.
