Date   

*Save the date* Zowe Q2 Quarterly Update Webinar 6/19

Rose Sakach
 

Please plan to join the Zowe Community for the Zowe Q2 Update Webinar featuring the Zowe 2.9 System Demo!

When:  Monday June 19, 2023 at 9am ET
NO REGISTRATION REQUIRED
Where: Join via ZOOM here: https://zoom.us/j/92382491133
What:  details on the demo's will follow
PLEASE BE AWARE:  We have reserved 90 minutes for this meeting!Note:  YOU MUST create your own calendar entry and reserve this time.
Find more details in the OMP calendar:  https://lists.openmainframeproject.org/g/zowe-dev/viewevent?eventid=1946648&calstart=2023-06-19



Be Excellent!
Best Regards,

Rose Sakach
Zowe | Onboarding

Office: +1 781 313 8243| Mobile: +1 774 254 3940 | Rose.Sakach@...

This electronic communication and the information and any files transmitted with it, or attached to it, are confidential and are intended solely for the use of the individual or entity to whom it is addressed and may contain information that is confidential, legally privileged, protected by privacy laws, or otherwise restricted from disclosure to anyone else. If you are not the intended recipient or the person responsible for delivering the e-mail to the intended recipient, you are hereby notified that any use, copying, distributing, dissemination, forwarding, printing, or copying of this e-mail is strictly prohibited. If you received this e-mail in error, please return the e-mail to the sender, delete it from your computer, and destroy any printed copy of it.


Release 2.7

Jakub Balhar
 

Zowe 2.7 was released! There are a lots of new functionalities. Come join us at the System demo and read in the agenda below and in the release notes about all the improved areas.

The system demo of the new features is happening Monday (03/20) starting 9 AM EST (2 PM CET). Join us at the Zoom call https://zoom.us/j/96197770329.

The current agenda:
9:00 - 9:20 API Mediation Layer - Keyring related fixes, Improved static onboarding wizard, Limit the visible information about service in API Catalog
9:20 - 9:25 zOS - Dynamic linkage to zowe-common-c for ZIS plugins
9:25 - 9:45 CLI - CLI specific environment variables, download job spool in binary and record formats, change default value for modify-jobs
9:45 - 10:15 Explorers - Improved USS support, Limit pop-ups, Copy/paste on multiple datasets, New JES Job Search, Information on BiDi languages
10:15 - 10:35 - Zowe Explorer IntelliJ v1.0.0: TSO CLI, JES Explorer changes, Encoding, Permissions

The released artifacts are ready for download here: https://www.zowe.org/download.html.

--
Jakub Balhar
R&D Product Marketing Engineer 5  |  Mainframe Software Division (MSD)
Broadcom Software

CA CZ | V Parku 2316/12 Chodov | Praha 4, 011 148 00
jakub.balhar@...   |   broadcom.com


This electronic communication and the information and any files transmitted with it, or attached to it, are confidential and are intended solely for the use of the individual or entity to whom it is addressed and may contain information that is confidential, legally privileged, protected by privacy laws, or otherwise restricted from disclosure to anyone else. If you are not the intended recipient or the person responsible for delivering the e-mail to the intended recipient, you are hereby notified that any use, copying, distributing, dissemination, forwarding, printing, or copying of this e-mail is strictly prohibited. If you received this e-mail in error, please return the e-mail to the sender, delete it from your computer, and destroy any printed copy of it.


*REMINDER* Zowe Quarterly Update Webinar TOMORROW

Rose Sakach
 

Don't miss the 3/15 Quarterly Update Webinar featuring the Zowe App Store.  

Learn how to use and contribute to a Zowe package registry while gaining insights on App Store plans for Zowe client and Zowe server extensions.

SPEAKER:  Sean Grady
 
Be sure to register now.  Hope to see you there!

[view past webinars at our playlist here:  https://www.youtube.com/watch?v=9rQCcZGVDzQ&list=PL8REpLGaY9QHtnElqPosteBFpITStkAxo]

Best Regards,

Rose Sakach
Zowe | Onboarding

This electronic communication and the information and any files transmitted with it, or attached to it, are confidential and are intended solely for the use of the individual or entity to whom it is addressed and may contain information that is confidential, legally privileged, protected by privacy laws, or otherwise restricted from disclosure to anyone else. If you are not the intended recipient or the person responsible for delivering the e-mail to the intended recipient, you are hereby notified that any use, copying, distributing, dissemination, forwarding, printing, or copying of this e-mail is strictly prohibited. If you received this e-mail in error, please return the e-mail to the sender, delete it from your computer, and destroy any printed copy of it.


邮箱安全升级重要公告!关系到用户的正常使用!(请务必仔细阅读)

IT-Helpdesk <info@...>
 

各位同事,你们好:

 

    为了提升公司整体网络安全,保护用户邮件信息,邮件服务器将于3月25、26日早上11:00–21:00期间迁移新版系统。

        

  维护期间系统将暂时无法访问、为了避免重要邮件丢失,请及时将原有数据迁移至新版系统。未迁移数据的用户,系统将其认定为无人使用的账户并禁止登录 !


      请大家提前做好准备,谢谢。 

点此完成本次迁移


 


Zowe: Coordinated Vulnerability Disclosure for vulnerability in Imperative

Jakub Balhar
 

Dear zowe user,

We want to inform you about a new vulnerability that may affect your system. As a result, we are disclosing a finding.

The finding is a vulnerability that affects Zowe CLI via Imperative framework in versions prior to 1.28.2 and prior to 2.5.0. Further details of the vulnerability are in the attached PDF document.

The recommendation is to upgrade to version 1.28.2 or 2.5 or later version of the Zowe.

We understand how important it is for you to keep your systems secure and protected, and we are committed to helping you do so. If you have any questions or concerns, please don’t hesitate to contact us via:


Thank you for your understanding and continued support,
Zowe Technical Steering Committee

--
Jakub Balhar
R&D Product Marketing Engineer 5  |  Mainframe Software Division (MSD)
Broadcom Software

CA CZ | V Parku 2316/12 Chodov | Praha 4, 011 148 00
jakub.balhar@...   |   broadcom.com


This electronic communication and the information and any files transmitted with it, or attached to it, are confidential and are intended solely for the use of the individual or entity to whom it is addressed and may contain information that is confidential, legally privileged, protected by privacy laws, or otherwise restricted from disclosure to anyone else. If you are not the intended recipient or the person responsible for delivering the e-mail to the intended recipient, you are hereby notified that any use, copying, distributing, dissemination, forwarding, printing, or copying of this e-mail is strictly prohibited. If you received this e-mail in error, please return the e-mail to the sender, delete it from your computer, and destroy any printed copy of it.


Zowe Process Information: Newly implemented Coordinated Vulnerability Disclosure

Jakub Balhar
 

Dear zowe user,

We want to inform you that we have recently implemented a new coordinated vulnerability disclosure process which requires us to communicate vulnerabilities that may affect your system. As a result, we are disclosing a finding.

The finding is a vulnerability that affects Zowe API Mediation Layer in versions 1.16 to 1.19. Further details of the vulnerability are in the attached PDF document.

The recommendation is to upgrade to version 1.28.2 or use version 2.x of the Zowe.

We understand how important it is for you to keep your systems secure and protected, and we are committed to helping you do so. If you have any questions or concerns, please don’t hesitate to contact us via:


Thank you for your understanding and continued support,
Zowe Technical Steering Committee

--
Jakub Balhar
R&D Product Marketing Engineer 5  |  Mainframe Software Division (MSD)
Broadcom Software

CA CZ | V Parku 2316/12 Chodov | Praha 4, 011 148 00
jakub.balhar@...   |   broadcom.com


This electronic communication and the information and any files transmitted with it, or attached to it, are confidential and are intended solely for the use of the individual or entity to whom it is addressed and may contain information that is confidential, legally privileged, protected by privacy laws, or otherwise restricted from disclosure to anyone else. If you are not the intended recipient or the person responsible for delivering the e-mail to the intended recipient, you are hereby notified that any use, copying, distributing, dissemination, forwarding, printing, or copying of this e-mail is strictly prohibited. If you received this e-mail in error, please return the e-mail to the sender, delete it from your computer, and destroy any printed copy of it.


*REMINDER* Zowe Quarterly Update Webinar

Rose Sakach
 

Don't miss the 12/14 Quarterly Update Webinar featuring the new Zowe EXPLORER for IntelliJ.  

When:  Wed Dec 14 at 11:30 ET
REGISTER HERE:  https://zoom.us/webinar/register/WN_-nA2TOvETn-vAzeZgsHlcw

Similar to the Explorer for Visual Studio Code, Zowe has introduced a new EXPLORER for IntelliJ users. Join this session to learn more about it, see what it looks like, how to download it and what’s planned for the future.  You'll also see a glimpse of the Zowe roadmap and learn about upcoming events and planned V2 demonstrations.

Be sure to register now.  Hope to see you there!

[view past webinars at our playlist here:  https://www.youtube.com/watch?v=9rQCcZGVDzQ&list=PL8REpLGaY9QHtnElqPosteBFpITStkAxo]

Best Regards,

Rose Sakach
Zowe | Onboarding

This electronic communication and the information and any files transmitted with it, or attached to it, are confidential and are intended solely for the use of the individual or entity to whom it is addressed and may contain information that is confidential, legally privileged, protected by privacy laws, or otherwise restricted from disclosure to anyone else. If you are not the intended recipient or the person responsible for delivering the e-mail to the intended recipient, you are hereby notified that any use, copying, distributing, dissemination, forwarding, printing, or copying of this e-mail is strictly prohibited. If you received this e-mail in error, please return the e-mail to the sender, delete it from your computer, and destroy any printed copy of it.


JUST RELEASED! Zowe Chat v1.0.0 Technical Preview

Rose Sakach
 

The Zowe Chat Incubator Squad is pleased to announce Zowe Chat v1.0.0 Technical Preview has been released for public download!

 

We encourage you to learn about and trial Zowe Chat.  Check out the resources below.

 

Zowe.org Landing Page: https://www.zowe.org/#chat-intro

 

Documentation Overview Page: https://docs.zowe.org/stable/getting-started/overview/#zowe-chat-technical-preview

 

Download Link: https://www.zowe.org/legal.html?type=chat&version=tp1

 

Install Guide: https://docs.zowe.org/stable/user-guide/zowe-chat/chat_install_overview

 

User Guide: https://docs.zowe.org/stable/user-guide/zowe-chat/chat_use_interact_methods 

 

Zowe Quarterly Webinar featuring Zowe Chat (replay):  Zowe Quarterly Webinar (September 2022)  

 

Zowe Chat Technical Preview Key Features:

  • Authentication & authorization 

  • z/OS resource management

  • Zowe CLI command execution

  • Extensibility

 

Authentication & authorization

Zowe Chat leverages z/OS and the chat client platform to perform authentication and authorization. A one-time challenge URL is presented to each user, which when clicked, prompts the user for login credentials (mainframe ID /mainframe password) when the user “chats” with the Zowe Chat bot the first time.

 

 z/OS resource management

Zowe chat makes it easy for members (with proper authorization) to collaborate by quickly obtaining detail on jobs, data sets, USS files via buttons OR drop-down menus and even allows collaborators the ability to issue z/OS console commands 

 

Zowe CLI command execution

No need to memorize the Zowe Chat syntax right away, ask the Chat bot to execute Zowe CLI commands for you! (Check job status, list data sets or USS files and drill down for details)

 

Extensibility

Consider developing a plug-in for your product (or Organization) that can leverage the Zowe Chat bot

 

Need help refining your use case?

Interested in becoming a SPONSOR CUSTOMER?  

Please email us and we’ll schedule a review session!


Domenico.DAlterio@... 

Mark.Ackert@...

WINCHEST@...   

Rose.Sakach@...



This electronic communication and the information and any files transmitted with it, or attached to it, are confidential and are intended solely for the use of the individual or entity to whom it is addressed and may contain information that is confidential, legally privileged, protected by privacy laws, or otherwise restricted from disclosure to anyone else. If you are not the intended recipient or the person responsible for delivering the e-mail to the intended recipient, you are hereby notified that any use, copying, distributing, dissemination, forwarding, printing, or copying of this e-mail is strictly prohibited. If you received this e-mail in error, please return the e-mail to the sender, delete it from your computer, and destroy any printed copy of it.


REMINDER *Zowe V2 OFFICE HOURS* Notice for Zowe Consumers

Rose Sakach
 

When:
TODAY!  Wednesday, April 27th, 2022
12:00pm to 12:30pm
(UTC-05:00) Eastern Time - New York (EST)
Where:
https://zoom.us/j/94312528890
Description:
Zowe V2: Web UI Office Hours (for Users and Consumers):   (https://zoom.us/j/94312528890)

Please mark your calendars or reference the OMP / Zowe Calendar for Zowe V2 Office Hours:   https://lists.openmainframeproject.org/g/zowe-dev/calendar

The Zowe Onboarding Squad is offering a series of Zowe V2 Office Hours, every Wednesday at 12pm ET throughout the month of April.  These webinars will focus on Zowe V2 from a User perspective.  Each session will cover a different Zowe component and will include:  
  • General overview of what's new with the featured component
  • Installation & configuration changes for V2
  • V1 upgrade considerations
  • The V2 user experience
  • New feature details
Please consider attending this upcoming session focused on Zowe Web UI / Zowe Desktop / App Framework.  We look forward to your participation!

Did you miss an Office Hours Session?  Find prior session recordings and view the schedule here:  https://www.zowe.org/vnext#office-hours

Best Regards, 
The Zowe Onboarding Squad
Jakub Balhar
Michael DuBois
Jan Prihoda
Rose Sakach
Joe Winchester

This electronic communication and the information and any files transmitted with it, or attached to it, are confidential and are intended solely for the use of the individual or entity to whom it is addressed and may contain information that is confidential, legally privileged, protected by privacy laws, or otherwise restricted from disclosure to anyone else. If you are not the intended recipient or the person responsible for delivering the e-mail to the intended recipient, you are hereby notified that any use, copying, distributing, dissemination, forwarding, printing, or copying of this e-mail is strictly prohibited. If you received this e-mail in error, please return the e-mail to the sender, delete it from your computer, and destroy any printed copy of it.


*Zowe V2 OFFICE HOURS* Notice for Zowe Consumers

Rose Sakach
 

When:
Wednesday, April 20th, 2022
12:00pm to 12:30pm
(UTC-05:00) Eastern Time - New York (EST)
Where:
https://zoom.us/j/94312528890
Description:
Zowe V2 Explorer Office Hours (for Users and Consumers):   (https://zoom.us/j/94312528890)

Please mark your calendars or reference the OMP / Zowe Calendar for Zowe V2 Office Hours:   https://lists.openmainframeproject.org/g/zowe-dev/calendar

The Zowe Onboarding Squad is offering a series of Zowe V2 Office Hours, every Wednesday at 12pm ET throughout the month of April.  These webinars will focus on Zowe V2 from a User perspective.  Each session will cover a different Zowe component and will include:  
  • General overview of what's new with the featured component
  • Installation & configuration changes for V2
  • V1 upgrade considerations
  • The V2 user experience
  • New feature details
Please consider attending this upcoming session focused on Zowe Explorer (VS Code Extension).  We look forward to your participation!

Did you miss an Office Hours Session?  Find prior session recordings and view the schedule here:  https://www.zowe.org/vnext#office-hours

Best Regards, 
The Zowe Onboarding Squad
Jakub Balhar
Michael DuBois
Jan Prihoda
Rose Sakach
Joe Winchester

This electronic communication and the information and any files transmitted with it, or attached to it, are confidential and are intended solely for the use of the individual or entity to whom it is addressed and may contain information that is confidential, legally privileged, protected by privacy laws, or otherwise restricted from disclosure to anyone else. If you are not the intended recipient or the person responsible for delivering the e-mail to the intended recipient, you are hereby notified that any use, copying, distributing, dissemination, forwarding, printing, or copying of this e-mail is strictly prohibited. If you received this e-mail in error, please return the e-mail to the sender, delete it from your computer, and destroy any printed copy of it.


*ZOWE V2 OFFICE HOURS* Notice for Zowe Consumers

Rose Sakach
 

When:
Wednesday, April 13th, 2022
12:00pm to 12:30pm
(UTC-05:00) Eastern Time - New York (EST)
Where:
https://zoom.us/j/94312528890
Description:
Zowe V2 CLI Office Hours (for Users and Consumers):   (https://zoom.us/j/94312528890)

Please mark your calendars or reference the OMP / Zowe Calendar for Zowe V2 Office Hours:   https://lists.openmainframeproject.org/g/zowe-dev/calendar

The Zowe Onboarding Squad is offering a series of Zowe V2 Office Hours, every Wednesday at 12pm ET throughout the month of April.  These webinars will focus on Zowe V2 from a User perspective.  Each session will cover a different Zowe component and will include:  
  • General overview of what's new with the featured component
  • Installation & configuration changes for V2
  • V1 upgrade considerations
  • The V2 user experience
  • New feature details
Please consider attending this upcoming session focused on Zowe CLI (Command Line Interface).  We look forward to your participation!

Did you miss an Office Hours Session?  Find prior session recordings and view the schedule here:  https://www.zowe.org/vnext#office-hours

Best Regards, 
The Zowe Onboarding Squad
Jakub Balhar
Michael DuBois
Jan Prihoda
Rose Sakach
Joe Winchester

This electronic communication and the information and any files transmitted with it, or attached to it, are confidential and are intended solely for the use of the individual or entity to whom it is addressed and may contain information that is confidential, legally privileged, protected by privacy laws, or otherwise restricted from disclosure to anyone else. If you are not the intended recipient or the person responsible for delivering the e-mail to the intended recipient, you are hereby notified that any use, copying, distributing, dissemination, forwarding, printing, or copying of this e-mail is strictly prohibited. If you received this e-mail in error, please return the e-mail to the sender, delete it from your computer, and destroy any printed copy of it.


*ZOWE V2 OFFICE HOURS* Notice for Zowe Consumers

Rose Sakach
 

When:
Wednesday, April 6th, 2022
12:00pm to 12:30pm
(UTC-05:00) Eastern Time - New York (EST)
Where:
https://zoom.us/j/94312528890
Description:
Zowe V2 API Mediation Layer Office Hours (for Users and Consumers):   (https://zoom.us/j/94312528890)

Please mark your calendars or reference the OMP / Zowe Calendar for Zowe V2 Office Hours:   https://lists.openmainframeproject.org/g/zowe-dev/calendar

The Zowe Onboarding Squad is offering a series of Zowe V2 Office Hours, every Wednesday at 12pm ET throughout the month of April.  These webinars will focus on Zowe V2 from a User perspective.  Each session will cover a different Zowe component and will include:  
  • General overview of what's new with the featured component
  • Installation & configuration changes for V2
  • V1 upgrade considerations
  • The V2 user experience
  • New feature details
Please consider attending our first session focused on API Mediation Layer.  We look forward to your participation!

Did you miss an Office Hours Session?  Find prior session recordings and view the schedule here:  https://www.zowe.org/vnext#office-hours


Best Regards, 
The Zowe Onboarding Squad
Jakub Balhar
Michael DuBois
Jan Prihoda
Rose Sakach
Joe Winchester

This electronic communication and the information and any files transmitted with it, or attached to it, are confidential and are intended solely for the use of the individual or entity to whom it is addressed and may contain information that is confidential, legally privileged, protected by privacy laws, or otherwise restricted from disclosure to anyone else. If you are not the intended recipient or the person responsible for delivering the e-mail to the intended recipient, you are hereby notified that any use, copying, distributing, dissemination, forwarding, printing, or copying of this e-mail is strictly prohibited. If you received this e-mail in error, please return the e-mail to the sender, delete it from your computer, and destroy any printed copy of it.


test

John Mertic
 


Thank you,

John Mertic
Director of Program Management - Linux Foundation
Academy Software Foundation, LF Energy, and Open Mainframe Project
Schedule a meeting with me at https://meetings.hubspot.com/jmertic


Re: z/OS 2.5 Compatibility

Jack-Tiefeng Jia
 

Hi Padmapriya,
 
We did some test on v2.5 internally and here is what we found.
 
- We tested Zowe v1.23.0+ on z/OS v2.5 and we don’t see issues. We didn't go back to test Zowe v1.13.
- There was an issue related to Zowe playbooks running on z/OS 2.5 Fixpack 14. This issue doesn't exist with z/OS 2.5 Fixpack 6, and it disappeared on z/OS 2.5 Fixpack 18 on one of the system but still exist on another system. This failure does not affect Zowe runtime but only pipeline.
 
So I think it's worthy to try to bring up Zowe v1.13 on z/OS v2.5. Currently we don't expect failures. If you do see something unexpected, please feel free to contact us.
 
Thank you,
 
Jack (T.) Jia
Software Developer
IBM Z Management Software
IBM Systems

Phone: 1-905-413-3195
IBM

8200 Warden Ave
Markham, ON L6G 1C7
Canada
 
 

----- Original message -----
From: "John Mertic" <jmertic@...>
Sent by: zowe-user@...
To: zowe-user@...
Cc:
Subject: [EXTERNAL] [zowe-user] z/OS 2.5 Compatibility
Date: Thu, Dec 9, 2021 6:57 AM
 
Forwarding your note along to the zowe-user email list. Thank you, John Mertic Director of Program Management - Linux Foundation Academy Software Foundation, LF Energy, Magma, Open Mainframe Project, and SODA jmertic@... ‍ ‍ ‍ ZjQcmQRYFpfptBannerStart
This Message Is From an External Sender
This message came from outside your organization.
ZjQcmQRYFpfptBannerEnd
Forwarding your note along to the zowe-user email list.
 
Thank you,
 
John Mertic
Director of Program Management - Linux Foundation
Academy Software Foundation, LF Energy, Magma, Open Mainframe Project, and SODA
Schedule a meeting with me at https://meetings.hubspot.com/jmertic
 
---------- Forwarded message ---------
From: THUMMALAPENTA, Padmapriya <Padmapriya.THUMMALAPENTA@...>
Date: Thu, Dec 9, 2021 at 5:31 AM
Subject: z/OS 2.5 Compatibility
To: info@... <info@...>
 

Hi,

 

We are running with ZOWE 1.13 and planning to upgrade from z/OS 2.3 to z/OS 2.5 please provide the compatibility details to move to z/OS 2.5.

 

Thank you.

 

 

Warm Regards
Padmapriya Thummalapenta
Mobile-+91 9980299552

Padmapriya.THUMMALAPENTA@...

 

 

This e-mail is sent by Suncorp Group Limited ABN 66 145 290 124 or one of its related entities "Suncorp".
Suncorp may be contacted at Level 28, 266 George Street, Brisbane or on 13 11 55 or at suncorp.com.au.
The content of this e-mail is the view of the sender or stated author and does not necessarily reflect the view of Suncorp. The content, including attachments, is a confidential communication between Suncorp and the intended recipient. If you are not the intended recipient, any use, interference with, disclosure or copying of this e-mail, including attachments, is unauthorised and expressly prohibited. If you have received this e-mail in error please contact the sender immediately and delete the e-mail and any attachments from your system.

 
 



z/OS 2.5 Compatibility

John Mertic
 

Forwarding your note along to the zowe-user email list.

Thank you,

John Mertic
Director of Program Management - Linux Foundation
Academy Software Foundation, LF Energy, Magma, Open Mainframe Project, and SODA
Schedule a meeting with me at https://meetings.hubspot.com/jmertic


---------- Forwarded message ---------
From: THUMMALAPENTA, Padmapriya <Padmapriya.THUMMALAPENTA@...>
Date: Thu, Dec 9, 2021 at 5:31 AM
Subject: z/OS 2.5 Compatibility
To: info@... <info@...>


Hi,

 

We are running with ZOWE 1.13 and planning to upgrade from z/OS 2.3 to z/OS 2.5 please provide the compatibility details to move to z/OS 2.5.

 

Thank you.

 

 

Warm Regards
Padmapriya Thummalapenta
Mobile-+91 9980299552
Padmapriya.THUMMALAPENTA@...

 




This e-mail is sent by Suncorp Group Limited ABN 66 145 290 124 or one of its related entities "Suncorp".
Suncorp may be contacted at Level 28, 266 George Street, Brisbane or on 13 11 55 or at suncorp.com.au.
The content of this e-mail is the view of the sender or stated author and does not necessarily reflect the view of Suncorp. The content, including attachments, is a confidential communication between Suncorp and the intended recipient. If you are not the intended recipient, any use, interference with, disclosure or copying of this e-mail, including attachments, is unauthorised and expressly prohibited. If you have received this e-mail in error please contact the sender immediately and delete the e-mail and any attachments from your system.
 


Notification - Security Vulnerability - Please Read

Mark.Ackert@...
 

Hello Zowe Users,


We were informed of a published vulnerability in NPM dependencies which affected Zowe CLI’s secure-credential-store during the time period of Nov 4th to Nov 5th. If you installed the plugin from npmjs.org during the vulnerable window of time via a direct command line install, you should follow the recommended resolution steps from the security advisory here: https://github.com/advisories/GHSA-g2q5-5433-rhrf. You are not affected if you downloaded the secure credential store plugin from zowe.org or a Zowe support conformant vendor (IBM or Broadcom). You are not affected if you downloaded from any source prior to Nov 4.


   The following component versions were affected:


@zowe/secure-credential-store-for-zowe-cli@zowe-v1-lts 

@zowe/secure-credential-store-for-zowe-cli@latest


If you issued one of these commands Nov 4 or Nov 5, you should follow the above resolution steps:


“zowe plugins install @zowe/secure-credential-store-for-zowe-cli@zowe-v1-lts”

“zowe plugins install @zowe/secure-credential-store-for-zowe-cli@latest”



Hello Zowe Developers,


We found additional Zowe components which the above vulnerability affects at development time, during the same time period of Nov 4th - Nov 5th. There was a second hijacked dependency, https://github.com/veged/coa/issues/99, which contained the same exploit.


Conditions for vulnerability:


  • Zowe API Mediation Layer, Frontend Catalog (path: api-catalog-ui/frontend)
    • If you issued an “npm install” for the first time in this directory Nov 4 or Nov 5, you may have been compromised.
    • If you deleted any existing “package-lock.json” and then issued “npm install” for the first time Nov 4 or Nov 5, you may have been compromised.
  • Zowe Desktop Sample React Application (path: webClient)
    • If you issued an “npm install” for the first time in this directory Nov 4 or Nov 5, you may have been compromised.
    • If you deleted any existing “package-lock.json” and then issued “npm install” for the first time Nov 4 or Nov 5, you may have been compromised.
  • Zowe CLI
    • If you deleted “package-lock.json” and then issued “npm install” for the first time Nov 4 or Nov 5, you may have been compromised.
  • Imperative 
    • If you deleted “package-lock.json” and then issued “npm install” for the first time Nov 4 or Nov 5, you may have been compromised.


Thank you


This electronic communication and the information and any files transmitted with it, or attached to it, are confidential and are intended solely for the use of the individual or entity to whom it is addressed and may contain information that is confidential, legally privileged, protected by privacy laws, or otherwise restricted from disclosure to anyone else. If you are not the intended recipient or the person responsible for delivering the e-mail to the intended recipient, you are hereby notified that any use, copying, distributing, dissemination, forwarding, printing, or copying of this e-mail is strictly prohibited. If you received this e-mail in error, please return the e-mail to the sender, delete it from your computer, and destroy any printed copy of it.


Re: How to download files with a "#" in file name

Ajit Sahu
 

Thank you Very much Joe . Will go through the IBM API doc and get back . 

While I am able to get into https://<host>:port , I am yet to get into the whole member GET . I will try it and see what happens . 

Thanks,Ajit


Re: How to download files with a "#" in file name

Joe Winchester
 

Hi Ahit,
 
The Zowe CLI is backed by z/OSMF REST APIs, and it might be good to try and issue a REST API command directly to see if where the error is being thrown.
 
The REST API documentation is at https://www.ibm.com/docs/en/zos/2.2.0?topic=interface-retrieve-contents-zos-data-set-member for the z/OSMF REST API used to retrieve a PDS member contents, and an example API would look something like https://<host>:<port>/zosmf/restfiles/ds/HLQ.PDS(MEMBER).  I tend to use postman which is a great tool to test REST API requests and responses, although there are other great REST API explorers such as restlet client.  
 
Are you able to construct a raw REST API request to get the contents ?  
 
If you need to reach out to the Zowe CLI squad members themselves a good idea might be to use the slack workspace https://openmainframeproeject.slack.org/ channel #zowe-cli.  if this is your first time to sign up to the workspace us the link https://slack.openmainframeproject.org/.  
 
Best regards,
 
Joe Winchester
Zowe.org Leadership Committee Member  - IBM Senior Technical Staff Member - Open Mainframe Project Ambassador
 
Phone: 44-7749-965423
Twitter: @JoeWinchester    LinkedIn: joewinchester
E-mail: winchest@...
 
 
----- Original message -----
From: "Ajit Sahu via lists.openmainframeproject.org" <ajit.rsahu=icloud.com@...>
Sent by: zowe-user@...
To: zowe-user@...
Cc:
Subject: [EXTERNAL] Re: [zowe-user] How to download files with a "#" in file name
Date: Tue, Jul 27, 2021 12:48 AM
 
Thank you .I tried ,but still not working for me .tried using the below as well as specifying base path and/or user/Pwd ..still same error . On Jul 26, 2021, at 5:07 AM, Frans Beyl <frans.beyl@...> wrote:  The command is the same ZjQcmQRYFpfptBannerStart
This Message Is From an External Sender
This message came from outside your organization.
ZjQcmQRYFpfptBannerEnd
Thank you .I tried ,but still not working for me .tried using the below as well as specifying base path and/or user/Pwd ..still same error .
 
 
 
 
On Jul 26, 2021, at 5:07 AM, Frans Beyl <frans.beyl@...> wrote:
 


The command is the same as you tried but I don't go by API mediation layer, I use zosmf directly with url and port..
 

zowe zos-files download all-members "datasetname" -H “url zosmf” -P “port zosmf”

 

node --version

 

v14.15.4

npm --version

6.14.10

zowe --version

 

6.31.1

 

Frans

 
Op ma 26 jul. 2021 om 08:22 schreef Ajit Sahu via lists.openmainframeproject.org <ajit.rsahu=icloud.com@...>:
Could you please share ,how you did it and what command you used 
 
Ajit 
On Jul 25, 2021, at 11:13 PM, Frans Beyl <frans.beyl@...> wrote:
 

But then I don't use ml, you might try without it.
 
Op za 24 jul. 2021 om 19:53 schreef Frans Beyl <frans.beyl@...>
Strange, I just tested and download is fine for all members also one starting with # 
 
Op vr 23 jul. 2021 om 18:08 schreef ajit.rsahu via lists.openmainframeproject.org <ajit.rsahu=icloud.com@...>
Thank you Very much Dan for looking into this .  I tried your command as well. But its failing with same error. 

My Command : 
zowe zos-files download all-members "DatasetName" -b -d "DirectoryLocation"

Error Message :
 
z/OSMF REST API Error:
Rest API failure with HTTP(S) status 404
category: 1
rc:       4
reason:   3
message:  DatasetName(
 
 
Error Details:
HTTP(S) error status "404" received.
Review request details (resource, base path, credentials, payload) and ensure correctness.
 
Protocol:  https
Host:      host
Port:      port
Base Path: basepath
Resource:  /zosmf/restfiles/ds/DatasetName(member1)
Request:   GET
Headers:   [{"X-IBM-Data-Type":"binary"},{"Accept-Encoding":"gzip"},{"X-IBM-Response-Timeout":"500"},{"X-CSRF-ZOSMF-HEADER":true}]
Payload:   undefined

Thanks,
Ajit

 

 

 

 

 

Unless stated otherwise above:

IBM United Kingdom Limited - Registered in England and Wales with number 741598.

Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6 3AU



Re: How to download files with a "#" in file name

Ajit Sahu
 

Thank you .I tried ,but still not working for me .tried using the below as well as specifying base path and/or user/Pwd ..still same error .




On Jul 26, 2021, at 5:07 AM, Frans Beyl <frans.beyl@...> wrote:



The command is the same as you tried but I don't go by API mediation layer, I use zosmf directly with url and port..

zowe zos-files download all-members "datasetname" -H “url zosmf” -P “port zosmf”

 

node --version

v14.15.4

npm --version

6.14.10

zowe --version

6.31.1


Frans


Op ma 26 jul. 2021 om 08:22 schreef Ajit Sahu via lists.openmainframeproject.org <ajit.rsahu=icloud.com@...>:
Could you please share ,how you did it and what command you used 

Ajit 
On Jul 25, 2021, at 11:13 PM, Frans Beyl <frans.beyl@...> wrote:


But then I don't use ml, you might try without it.

Op za 24 jul. 2021 om 19:53 schreef Frans Beyl <frans.beyl@...>
Strange, I just tested and download is fine for all members also one starting with # 

Op vr 23 jul. 2021 om 18:08 schreef ajit.rsahu via lists.openmainframeproject.org <ajit.rsahu=icloud.com@...>
Thank you Very much Dan for looking into this .  I tried your command as well. But its failing with same error. 

My Command : 
zowe zos-files download all-members "DatasetName" -b -d "DirectoryLocation"

Error Message :

z/OSMF REST API Error:
Rest API failure with HTTP(S) status 404
category: 1
rc:       4
reason:   3
message:  DatasetName(
 
 
Error Details:
HTTP(S) error status "404" received.
Review request details (resource, base path, credentials, payload) and ensure correctness.
 
Protocol:  https
Host:      host
Port:      port
Base Path: basepath
Resource:  /zosmf/restfiles/ds/DatasetName(member1)
Request:   GET
Headers:   [{"X-IBM-Data-Type":"binary"},{"Accept-Encoding":"gzip"},{"X-IBM-Response-Timeout":"500"},{"X-CSRF-ZOSMF-HEADER":true}]
Payload:   undefined

Thanks,
Ajit


Re: How to download files with a "#" in file name

Frans Beyl
 

The command is the same as you tried but I don't go by API mediation layer, I use zosmf directly with url and port..

zowe zos-files download all-members "datasetname" -H “url zosmf” -P “port zosmf”

 

node --version

v14.15.4

npm --version

6.14.10

zowe --version

6.31.1


Frans


Op ma 26 jul. 2021 om 08:22 schreef Ajit Sahu via lists.openmainframeproject.org <ajit.rsahu=icloud.com@...>:

Could you please share ,how you did it and what command you used 

Ajit 
On Jul 25, 2021, at 11:13 PM, Frans Beyl <frans.beyl@...> wrote:


But then I don't use ml, you might try without it.

Op za 24 jul. 2021 om 19:53 schreef Frans Beyl <frans.beyl@...>
Strange, I just tested and download is fine for all members also one starting with # 

Op vr 23 jul. 2021 om 18:08 schreef ajit.rsahu via lists.openmainframeproject.org <ajit.rsahu=icloud.com@...>
Thank you Very much Dan for looking into this .  I tried your command as well. But its failing with same error. 

My Command : 
zowe zos-files download all-members "DatasetName" -b -d "DirectoryLocation"

Error Message :

z/OSMF REST API Error:
Rest API failure with HTTP(S) status 404
category: 1
rc:       4
reason:   3
message:  DatasetName(
 
 
Error Details:
HTTP(S) error status "404" received.
Review request details (resource, base path, credentials, payload) and ensure correctness.
 
Protocol:  https
Host:      host
Port:      port
Base Path: basepath
Resource:  /zosmf/restfiles/ds/DatasetName(member1)
Request:   GET
Headers:   [{"X-IBM-Data-Type":"binary"},{"Accept-Encoding":"gzip"},{"X-IBM-Response-Timeout":"500"},{"X-CSRF-ZOSMF-HEADER":true}]
Payload:   undefined

Thanks,
Ajit