Rocket® Open-Source Languages and Tools for z/OS®

Hello users of our z/OS open-source ports, I am pleased to announce the release of Rocket Open AppDev for Z v2.0.17. This release includes version currency updates for PyJWT and Python, as well as an extensive list of security fixes and other fixes for many other ports. For customers on a support contract, these latest builds are already available via conda or SMP/E. For users not on a support contract, these builds will be made available on our public conda channel server on December 31st, 2026. Version currency updates: PyJWT 2.13.0 Python 3.13.13 New version of IBM python released  CVEs published against earlier versions and resolved by V2.0.15: PyJWT CVE-2026-32597, CVE-2026-48522, CVE-2026-48523, CVE-2026-48524, CVE-2026-48525, CVE-2026-48526 fixes Python CVE-2025-12084, CVE-2025-13462, CVE-2025-13836, CVE-2025-13837, CVE-2025-6075, CVE-2026-3644, CVE-2026-4224, CVE-2026-4519 fixes  Fixes/CVEs in dependencies: Cert-bundle 2026.03.31 Certificate bundle update Urllib3 2.7.0 CVE-2026

Hi,The version of cURL in my z/OS system is: curl 7.52.1 (i370-ibm-openedition)curl-config --ca returns: /u/mvsbuild/py361z/python36/etc/ssl/cacert.pem But I can't find that directory. Instead I found cacert.pem is under /u/python/python36/etc/ssl. So I created that directory and copy cacert.pem there.I tried 3 different ways:1) When I issue the command without specifying --cacert and --capath, I got errorcurl: (60) SSL certificate problem: self signed certificate in certificate chain2) When I issue the command specifying --cacert and --capath, I got errorcurl: (77) error setting certificate verify locations:CAfile: cacert.pem CApath: /u/mvsbuild/py361z/python36/etc/ssl 3) When I copy the cacert.pem file to the current directory, it works.Questions:1. Is there something wrong with the build process that made the cacert.pem stored in a wrong location?2. After manually copied the cacert.pem to the desired location, why can't it be used, even specifying the location explicitly?3. Is it a

Eager to know about the Enterprise content

  Hello users of our z/OS open-source ports, I am pleased to announce the release of Rocket Open AppDev for Z v2.0.15. This release includes ports of two new tools, Py4J, and Python-confluent-kafka, and version currency updates for cURL, Git, Less, and Nano, as well as an extensive list of security fixes and other fixes for many other ports. For customers on a support contract, these latest builds are already available via conda or SMP/E. For users not on a support contract, these builds will be made available on our public conda channel server on June 19th, 2026. Version currency updates: Curl 8.17.0 Git 2.47.3 Less 685 Nano 8.7  New supported tool: Py4J 0.10.9.9 Python-confluent-kafka 2.5.0  CVEs published against earlier versions and resolved by V2.0.14: Curl CVE-2025-10966 fix Git CVE-2024-52006, CVE-2024-50349, CVE-2025-27613, CVE-2025-27614, CVE-2025-46835, CVE-2025-48385, CVE-2025-48386 fixes  Fixes/CVEs in dependencies: Cert-bundle 2025.12.11 Certificate bundle update Sed 4.9 B

Dear CustomersWe will be releasing the next version of Rocket Open AppDev next week. Expect version currency updates for Less, Nano and more. Vulnerabilities fixes for Git, Curl, Vim and more. Also, new port for confluent-Kafka. More release details to come soon.Did you know: The mainframe market is projected to grow from $5.33B in 2025 to $7.14B by 2030 (6% CAGR), with hybrid cloud and open-source integration as key drivers.

Hello users of our z/OS open-source ports, I am pleased to announce the release of Rocket Open AppDev for Z v2.0.14. This release includes ports of three new tools, Netcat, Patch, and Postfix, and version currency updates for cURL, Grep, Less, Mktemp, Nano, OpenSSL, PHP, Sudo, and Pytest, as well as an extensive list of security fixes and other fixes for many other ports. For customers on a support contract, these latest builds are already available via conda or SMP/E. For users not on a support contract, these builds will be made available on our public conda channel server on April 20th, 2026. Version currency updates: Curl 8.16.0  Grep 3.12  Less 679  Mktemp 1.8  Nano 8.5  OpenSSL 3.5.4  PHP 8.3.23  Sudo 1.9.17p2  Pytest 8.4.1 New supported tool: Netcat 1.229  Patch 2.8  Postfix 3.10.4  CVEs published against earlier versions and resolved by V2.0.13: Curl CVE-2025-5399, CVE-2025-9086, CVE-2025-10148 fixes  Git CVE-2025-48384 fix  OpenSSL CVE-2025-9230, CVE-2025-9231, CVE-2025-9232 f

Hi, Upgraded to bash 5.2 and now some of our users encounter a S0C4 abend in their TSO session when invoking OMVS command to enter their (bash) shell environment in z/OS USS. See the following in the SVC dump of the S0C4; ASID(X'01BD') 21051A86. AREA(Subpool251Key08)+1BFA86 IN EXTENDED PRIVATE ASID(X'01BD') 21051A86. SPECIALNAME+1BFA86 IN EXTENDED PRIVATE +0000 61A58199 61999683 9285A361 82899561 | /var/rocket/bin/ | +0010 8281A288 | bash | Any ideas of possible root cause would be appreciated. thanks------------------------------Alfred SauSystems ProgrammerBNY MellonJersey City NJ US------------------------------

I'm pleased to share that we have released Rocket Utility Pack for Zowe 1.5 earlier this month, delivering several key enhancements across our tools and services: zFM (z/OS File Manager) is now fully compatible with v3. Key updates include: Angular upgrade from v12 to v18, bringing template changes and other improvements. Changes to Webpack, file tree functionality, and Prime components. USS Process Manager has also been upgraded to support v3, featuring: Angular upgrade to v18, with enhanced templates and other improvements. Updates to Webpack, Prime components, and improved API checks across various UI elements. Additionally, we've rolled out support for 64-bit dataservice. Rocket® Support for Zowe provides the extra protection you need to modernize mainframe development with secure, supported, open-source software. ------------------------------Paul Wade B.Sc. Director, Product ManagementRocket Software ------------------------------

Hello Community, Our customer is using GIT for his Softwarerepository on z/OS. We have changed from z/OS 2.5 to z/OS 3.1 last week and changed also the  GIT Version from 2.26.2-78 to 2.41.0-4. Now we get a lot of RACF messages like follows and the result is not as expected: ICH408I USER(USSGIT  ) GROUP(UITUVERF) NAME(USSGIT -TECHN. USER ).git/objects/pack/pack-a4854ba0aa6a6333d597deea4f53b5f24d64e030.pack                                                              CL(FSOBJ   ) FID(C8E4D6D4F0F106C60000000140D9B4F3)                    INSUFFICIENT AUTHORITY TO UTIME                                      ACCESS INTENT(-W-)  ACCESS ALLOWED(OWNER      R--)                  EFFECTIVE UID(0013900119)  EFFECTIVE GID(0013900004)                The file is created with permission 444 and owner is USSGIT. We tried to solve the problem by setting default file ACL for the directory, but GIT seems to ignore this! Any suggestions! Many Thanks in advance!------------------------------Jurgen Hildebra

I followed the sudo configuration instructions at Rocket Software Documentation Rocketsoftware remove preview Rocket Software Documentation © Rocket Software, Inc. Rocket® is a registered trademark of Rocket Software, Inc. All other trademarks cited herein are the property of their respective owners. View this on Rocketsoftware > . Then, I attempted to invoke it: . sudo ls BMUSER:/local/rocket/miniconda>sudo ls sudo: unknown user ROOT sudo: error initializing audit plugin sudoers_audit IBMUSER:/local/rocket/miniconda> What am I missing?? ------------------------------Roger WilliamsCTOSelf RegisteredGainesville GA US------------------------------

I have a simple MAKE fie that executes OK on Linux and Windows, and compiles a file containing C++-style comments (i.e., // to newline) without issue. On zOS, the same file barfs if it encounters C++ comments, as follows: cc -DOECS -D_OE_SOCKETS -D__UU -DPREFIX=\\"/usr\\" -o vfiled.o -c vfiled.c ERROR CCN3046 ./vfiled.c:27    Syntax error. ERROR CCN3334 ./vfiled.c:27    Identifier s4 has already been defined on line 26 of "./vfiled.c". ERROR CCN3046 ./vfiled.c:57    Syntax error. ERROR CCN3022 ./vfiled.c:57    "sin_family" is not a member of "struct sockaddr". ERROR CCN3046 ./vfiled.c:59    Syntax error. ERROR CCN3022 ./vfiled.c:59    "sin_port" is not a member of "struct sockaddr". ERROR CCN3046 ./vfiled.c:62    Syntax error. ERROR CCN3022 ./vfiled.c:62    "sa_port" is not a member of "struct sockaddr". ERROR CCN3046 ./vfiled.c:73    Syntax error. All of the indicated lines above contain commented-out lines; e.g.: line 26:     struct sockaddr *sa, s4;line 27: //  struct sockaddr_in s4

Is anyone hosting a git server on z/OS, either natively or in a container?If so,  would you be willing to share your insights/hints/tips for doing so?- which git server?- started task or container?Thank you------------------------------LionelDyck

Hello Alex, Here's how I finally resolved my issue: 1. Upgraded to zOS 3.1. 2. Upgraded to IBM Java 21 (which has different file encoding semantics than Java <= 17 - I was formerly using Java 11). 3. Found this Java file encoding snippet on the IBM Web site: https://www.ibm.com/docs/en/semeru-runtime-ce-z/21.0.0?topic=guide-file-encoding-utf-8-as-default-charset 4. I think I had previously put -Dfile.encoding="IBM-1047" in the ant script as part of $ant.sys.options.  I removed it (and temporarily added -Dcom.ibm.autocvt.trace=true  just to do a verbose check). Viola - all tagged files (e.g., via .gitattributes) converted internally to UTF-8! This was a Java issue all along; -Dcom.ibm.autocvt was disabled because ant specified -Dfile.encoding="IBM-1047" (and Semeru, being higher than Java 17, acted differently than my former Java11). Again, thanks for your input - it helped to clarify the issue. ------------------------------Roger WilliamsCTOSelf RegisteredGainesville GA US--

Hello, i send json data with curl z/os using rexx bpxwunix. 1) the json is accepted if i put the data  1047 encoded into an untaggged file  using --data @/filexxxx . but i do not want to use files for this 2) A  trace shows me if i put the same bytes  into stdin stem in  rexx (using --data @-  its not converted, so the server does not accept the garbage sent. I am using an older version of curl, but i found no hint that a newer version will  help here?? Any ideas? I could build into the rexx my own translation table to convert the stdin data to 8859-1. but can i avoid it somehow? Thank you  ------------------------------Horst GfrererRAITEC GmbH------------------------------

Has anyone successfully installed the ibm_db extension on z/OS USS to go along with the Rocket Python3.6 distribution? Not finding any z/OS ibm_db installation driver version or any instructions anywhere to work with python and DB2 on z/OS.

Hello everyone, I wanted to share my experience with installing gzip user Miniconda under the /bin directory. After the installation, I noticed that both gunzip and gzip are available in the /bin directory. However, I've encountered an interesting behavior: to unzip a file using gunzip , I need to initiate a bash interactive shell with the command bash -i , after which I can successfully use gunzip filename.txt.gz to unzip the file. On the other hand, I can use gzip -d filename.txt.gz to unzip the file without needing to enter the interactive shell. Has anyone else experienced this? If so, do you have any insights or solutions to avoid using bash -i for gunzip? I would appreciate any advice or tips! Note: both file gzip and gunzip under /prd/mini/envs/zoss/bin Thank you!------------------------------Raju Shrestha------------------------------

Hello I would like to know the end of support date for the EOS for Z/OS 2.0 and 2.1 product? please Thanks in advance------------------------------Alain charletRocket Forum Shared Account------------------------------

Hi, we have recently installed openssl on our OMVS partitions: normally we use RACF as a KeyStore for certificates. Any integration is foreseen / possible to use RACF as a key store, as for SecureZip ? Or the only way is to manage a local KeyStore in the OMVS partition? Thanks

Hello,  Currently I have updated python 3.12 through Rocket Open AppDev for Z (free solution). One of my users want urllib3 2.3.0. How can I install urllib3 2.3.0 separately on z/OS 3.1. Thank you.  Raju ------------------------------Raju ShresthaIT SpecialistSocial Security AdministrationWoodlawn MD US------------------------------

Hello,  I receive the following error when running the miniconda install. Building the "base" Anaconda environment   Error: post-link failed for: bash-5.2.15-0 Installation failed.  I'm using the following files: miniconda-zos-2.0.8-2024-04-12.run appdev_manifest_2.0.8.txt   I'm running the following install script: #!/bin/sh -x                                                         cd /common/opensource                                                chmod +x miniconda-zos-2.0.8-2024-04-12.run                          chtag -tc 819 appdev_manifest_2.0.8.txt                              export _BPXK_AUTOCVT=ON                                              export _CEE_RUNOPTS='FILETAG(AUTOCVT,AUTOTAG) POSIX(ON)'             export LC_ALL=En_US.IBM-1047                                         ls -la                                                               env                                                                  /common/opensource/miniconda-zos-2.0.8-2024-04-12.run --path

It appeared that my installation of Miniconda completed successfully but when I enter the conda command from the terminal, I am receiving the follwoing errors: bash-5.2# conda                                                                                                                     /usr/local/miniconda/bin/conda: line 3: import: command not found                                                                   /usr/local/miniconda/bin/conda: line 6: syntax error near unexpected token `sys.argv'                                               /usr/local/miniconda/bin/conda: line 6: `if len(sys.argv) > 1 and sys.argvÝ1¨.startswith('shell.') and sys.path and sys.pathÝ0¨ == '':'                                                                                                                                  Any help would be appreciated. ------------------------------George DranesDirector of Application DevelopmentWestern Illinois UniversityMACOMB IL US----------------------------

After applying PH52983: New Function: Added z Integrated Information Processor eligibility in IBM Open Enterprise SDK for Python 3.11, IBM Python supports deriving workload to ZIIP processors. However, we are using the Python supplied with Rocket z/OS Miniconda.  Does it support the use of ZIIP? If not... Is any enhanced planned for this?.------------------------------Josema Fernández PalaciosRocket Forum Shared Account------------------------------

I have git v.2.26.2-82 installed on uss, and it works fine until now for "usual" git commands like git clone, branch, commit, merge etc.I now try "git submodule" for the first time and it returns this error :(my userid is EPLMOH)bash EPLMOH@MVSS:~/work/DSC$ git submodule status fatal: 'submodule' appears to be a git command, but we were not able to execute it. Maybe git-submodule is broken? I have this $PATH:/bin: /usr/lpp/java/J8.0_64/bin: /usr/lpp/ported/python/bin: /bin: /usr/lpp/java2140/J1.4/bin: /usr/lpp/Printsrv/bin: /usr/lpp/Tivoli/tsm/client/ba/bin/: /usr/lpp/wmqi/bin/: /usr/lpp/lotus/bin: /usr/lpp/lotus/bin/tools: /local/eposd/notesdata: /usr/local/bin: .: /_PRDS/ZOAUTIL/SBGYZFS/bin: /u/eplmoh: /usr/lpp: /usr/lpp/IBM/MVSS/UssTools/git/usr/lpp/Rocket/rsusr/ported/bin/: <---- git /usr/lpp/IBM/MVSS/UssTools/git/usr/lpp/Rocket/rsusr/ported/libexec/git-core: <---- git /usr/lpp/ported/apache-ant/bin: /usr/lpp/ported/autoconf/bin: /usr/lpp/ported/automake/bin:Actual path to gi

Hello, a while ago we found out, that IBM Ported Tools, we’re talking of perl and php mainly, went out of service last month. So we decided to migrate to the versions offered here. The only disadvantage using these tools is, that they are not SMP/E installed, as the IBM versions are. So we decided to create a set of procedures to make these tools SMP/E installable, and finally we succeed. At this time we’re able to install the following Tools via SMP/E, some more will follow: bash curl gzip mc (Midnight Commander) perl php webalizer I write this in order to ask, if there is any interest to know more about the used method, how to make such products SMP/E installable. In this case I would like to share this informations. Regards. Juergen

Hello,Is there any plans on porting screen or tmux to USS? It's something I miss when working on USS.Otherwise I saw somewhere that rocket uses gcc to compile (cross-compile?) tools to Z. Is z supported by gcc out of the box, either cross compiling or running in USS?, or is there a fork somewhere, or is it something rocket made in house? I would like to try to compile it myself.Thanks------------------------------Adam Martin BrittIT-ArchitectBECRanders SV Denmark------------------------------