On behalf of Rocket OpenApp Team,
I am pleased to announce the release of Rocket Open AppDev for Z v2.0.20. This release includes version currency updates for Curl and OpenSSL, as well as an extensive list of security fixes and other fixes for many other ports. For customers on a support contract, these latest builds are already available via conda or SMP/E. For users not on a support contract, these builds will be made available on our public conda channel server on February 28th, 2027.
Version currency updates:
- Curl 8.22.0
- OpenSSL 4.0.2
CVEs published against earlier versions and resolved by V2.0.20:
- Curl CVE-2026-13608, CVE-2026-18924, CVE-2026-19931, CVE-2026-80229, CVE-2026-80230, CVE-2026-80231, CVE-2026-80255, CVE-2026-82208, CVE-2026-82209 fixes
- OpenSSL CVE-2026-14456, CVE-2026-14457, CVE-2026-18798, CVE-2026-54874, CVE-2026-63072, CVE-2026-63073, CVE-2026-63074, CVE-2026-63075, CVE-2026-63076, CVE-2026-75803 fixes
Fixes/CVEs in dependencies:
- Libtag 2.0 Improvements of working with tags.
Changes in install options:
- appdev_local-2.0.20-2026-09-24.run The local file channel installer for core AppDev 2.0.20 tools.
- The packages are also available on the secure Conda channel – zoss-appdev.
- RD14002 PTF The new PTF. It can be installed on top of the HROA140+RD14001.
Dev Lead - Kishor via kchaudhary@rocketsoftware.com or Forum.
