Skip to main content
Version: v2.18.x LTS

Version 2.18.3 (October 2025)

Last updated
:  |
... min read
|
Edit this page
Print
Open doc issue

Version 2.18.3 (October 2025)

Welcome to the Zowe Version 2.18.3 release!

See New features and enhancements for a full list of changes to the functionality. See Bug fixes for a list of issues addressed in this release.

Download v2.18.3 build: Want to try new features as soon as possible? You can download the v2.18.3 build from Zowe.org.

New features and enhancements​

Zowe Version 2.18.3 contains the enhancements that are described in the following topics.

Zowe Application Framework​

Zlux Server Framework​

  • Old dependencies upgrade. (#613)

Zowe API Mediation Layer​

  • This Zowe version supports the PATCH HTTP method in CORS. (#4255)

Zowe Explorer​

Zowe Explorer (Core)​

  • See the Zowe Explorer changelog for updates included in this release.

Zowe Explorer API​

Zowe Explorer for IBM z/OS FTP​

Zowe Explorer ESLint Plug-in​

Bug fixes​

Zowe Version 2.18.3 contains the bug fixes that are described in the following topics.

Zowe installation and packaging​

  • Internal routine copy_to_data_set did not correctly check if data set exists. (#4489)
  • --update-config might fail if the specified config file is a symbolic link. (#4493)

Zowe Application Framework​

Zowe Common C​

  • Fix a leak in the safeFree64Internal routine. (#556)

Zowe API Mediation Layer​

  • Fixed default Eureka intervals of the Caching Service. (#4225)
  • Fixed the API ML services logs so that "URL/Path not transformed" entries omit API ML services. (#4292)
  • Fixed z/OSMF static definition for AT-TLS. (#4330)
  • Fixed an incorrect Gateway URL in API Catalog when AT-TLS is enabled, and a startup issue when ICSF keyring is used. (#4337)
  • Fixed the protocol scheme in hybrid AT-TLS (server-attls and client-https) setup. (#4338)

Zowe CLI​

Zowe CLI (Core)​

  • Updated minimum supported version of Node from 18 to 20. Added Node 24 support. (#2617)

Zowe CLI Imperative Framework​

  • Updated minimum supported version of Node from 18 to 20. Added Node 24 support. (#2617)

DB2 Plug-in for Zowe CLI​

  • Updated minimum supported version of Node from 18 to 20. Added Node 24 support. (#190)

    caution

    Introduces unavoidable breaking changes to the DB2 plug-in APIs as a result of breaking type changes in the underlying ibm_db component.

    • Changed the DB2Constants class's FETCH_MODE_OBJECT and FETCH_MODE_ARRAY types to match those used by ibm_db.
    • Defaulted the optional IDB2Parameter.ParamType property to INPUT if the property is not defined.
    • Changed the IDB2Column interface into a type.

  • Updated the tar-fs dependency for technical currency. (#192)

Zowe Explorer​

Zowe Explorer (Core)​

  • See the Zowe Explorer changelog for updates included in this release.

Zowe Explorer API​

Zowe Explorer for IBM z/OS FTP​

Zowe Explorer ESLint Plug-in​

Vulnerabilities fixed​

Zowe discloses fixed vulnerabilities in a timely manner giving you sufficient time to plan your upgrades. Zowe does not disclose the vulnerabilities fixed in the latest release as we respect the need for at least 45 days to decide when and how you upgrade Zowe. When a new release is published, Zowe publishes the vulnerabilities fixed in the previous release. For more information about the Zowe security policy, see the Security page on the Zowe website.

The following security issues were fixed by the Zowe security group in version 2.18.3.

CVE-2025-48989 (BDSA-2025-8608) CVE-2025-8916 (BDSA-2025-8573) CVE-2025-5115 (BDSA-2025-9581) CVE-2024-6763 (BDSA-2024-7229) CVE-2025-58057 (BDSA-2025-10732) CVE-2025-58056 (BDSA-2025-10730) CVE-2025-55163 (BDSA-2025-8614)

On this page