D-11005

z/OS

UAGSRV

Fix truncation of a message responsible for reporting secondary Universal Agent status to the Controller. The truncation could cause the Agent to show Active even if it were actually offline.

D-14191

Unix
Windows
z/OS

UAGSRV

Fix a possible memory corruption when an application monitored by an Application Control Task is stopped immediately after the application is started.

D-14197

Unix
Windows
z/OS

UFTP

Update the libSSH2 3pp vendor library used by UFTP to remediate Critical- and High-severity CVEs.

D-14409

z/OS

UAGSRV (UAGRERUN)

Fixes a problem where the JCL for a z/OS task containing a backward reference to a DD statement in the same step prevented that step from being marked "Restartable" in the z/OS task instance. Steps that contain local backward references should be restartable. Steps that contain backward references to other steps in the job will continue to be non-restartable.

D-13552

IBM i
Unix
Windows
z/OS

UAGSRV

Ensures that an Agent's configured BUSINESS_SERVICES are part of any HELLO message the Agent sends to the Controller.

This change was specifically intended to fix an issue where a transient Linux Agent would lose business service information after temporarily going offline.

A persistent Agent on any platform would also benefit from this change if, for example, it were inadvertently deleted from the Controller.

D-13913

z/OS

UAGSRV

Restores the list of secondary Agent name(s) to the following Universal Controller locations:

1. The Secondary Agent(s) list in the Controller's Agent Details page for the primary Agent

2. The Secondary Agent(s) column for the primary Agent in the Controller's Agent List

B-22140

Unix
Windows

OMSSRV

Add support for OMS Message Database replication via the Raft protocol provided by the NuRaft library.

This feature removes the requirement to have the OMS Message Database reside on a NFS-mounted, shared filesystem. That architecture will continue to be supported, however, and is still the default.

For information on this new feature and how to configure it, see the following:

• OMS Server High Availability

• OMS Server HA Shared Filesystem Architecture

• OMS Server HA Data Replication Architecture

• CLUSTER_NODE_ID

• CLUSTER_NODE_ENDPOINT

• CLUSTER_MEMBERSHIP

• LOGFILE_MAX_GENERATIONS

• LOGFILE_MAX_SIZE

• REPLICATION_LOGFILE_DIRECTORY

• SNAPSHOT_DISTANCE

• VERIFY_REPLICATION_NODE_IP

• Provided Metrics

D-12850

All

OMSSRV
UAGSRV
UBROKER
UCERT
UCMD
UCMSRV
UCTL 
UCTSRV
UDM
UDMSRV
UEM
UFTP

Upgrade the OpenSSL library that Universal Agent uses to OpenSSL 3.0.18 to resolve outstanding CVEs.

B-18370

IBM i

UAGSRV

Add support for executing scripted IBM i Virtual Terminal sessions from a Universal Agent batch environment. This is required to support the scenario of automating work that must be run from an interactive session, which may involve interaction with menu panels for a command or application.

Support for this feature will include the following enhancements:

• The introduction of a new command (UNVVTSND) to facilitate interaction with a virtual terminal session.

• The introduction of a new command (UNVVT) to provide enhanced CL script processing capabilities, along with dedicated functionality to facilitate scripting Virtual Terminal sessions with UNVVTSND.

D-13864

IBM i

UAGSRV

Ensures that an IBM i task will always execute with the credentials specified in the task's definition. If no credentials are specified, the behavior is unchanged and the task will continue to run as the Universal Broker user.

D-14036

All (depending on component availability)

UAGSRV
UCMSRV
UCTLSRV
UDMSRV
UEMSRV

Ensure that an attempt to establish an improper SSL/TLS session over the affected Server application's component interface is handled gracefully.

D-14051

All

UAGSRV

Fixes an issue where the UAG Server's configured SERVICE_TIMEOUT value is ignored when receiving messages from OMS. This fix will decrease the time it takes for UAG Server to detect a dropped connection with OMS, which will in turn decrease connection recovery times.

D-09802

Unix
Windows

UBROKER

When the path to a Universal Broker's .ipc file – which is used to support the Universal Broker's component interface on Unix systems – is greater than 80 characters, its value inside the ubroker.bif file (see UBROKER_BIF) is truncated. This will cause Universal Broker startup to fail. This fix provides support for a file path up to 2000 characters (subject to system to system limits imposed by some platforms).

D-13422

Unix
Windows

OMSSRV

Prevent unauthorized access to OMS Server by denying connection attempts from a remote OMS Admin (OMSADMIN) utility. This will restrict OMSADMIN to execution on the OMS Server's system.

D-13908

Unix
Windows

OMSSRV
UBROKER
UCMSRV
UCTSRV
UDMSRV
UEMSRV

Fixes an issue introduced by changes delivered in UA 7.8.0.0 with B-20246 that could cause session negotiation to fail when 1) one of the affected Server components receives an unusually large number of session negotiation requests, and/or 2) multiple clients of one of the affected Server components tries to connect and negotiate a session over a very slow network.

D-13947

z/OS

UAGSRV

Ensure that a z/OS task does not fail with a JCL error when the task's job issues an IEFC677I message. Prior to this change, it may be possible for the Agent to fail with a S0C4 ABEND or return accurate error information to the Universal Controller.

D-13958

z/OS

UAGSRV

Prior to the Universal Agent's attempt to calculate a system workload value, ensure that the sample size value in an SMF record type 70-1 (SMF70SAM) is non-zero. This check will prevent a divide-by-zero exception (S0C9).

B-18372

Linux (AARCH64 only)

All

Provide Universal Agent for the Linux AARCH64 platform.

B-18732

Unix (except Solaris)
Windows

OMSSRV
UAGSRV
UEXT
UFTP

Explicitly set and expose the OpenTelemetry schema URL used for traces and metrics exposed by the Universal Agent and Universal Extension tasks. 

Providing the schema URL with each trace message or metric provides information about the format of the data being exported and details the semantic conventions used by the OpenTelemetry library 3pp vendor library.

B-21234

z/OS

UAGU83

Improve the ability to respond to 878-10 ABENDs within the z/OS Agent's SMF exits by issuing conditional storage requests.

B-21393

Windows

All

Certify support for Windows Server 2025.

B-21687

z/OS

UDM
UDMSRV

Add the ability to transfer VSAM datasets. The UDM copy command will now accept a VSAM dataset – specified by its cluster or data component name – and transfer its contents to a sequential dataset on z/OS or flat file on a distributed Unix or Windows system. 

B-22083

IBM i
Unix

UAGSRV

Provides a change that removes restrictions on the number of environment variables that can be provided to a Unix or IBM i task. The previous implementation limited the number of environment variables to 2000 on the affected platforms, but Universal Agent will now recognize as many environment variables as the system supports.

B-22115

Unix
Windows
z/OS

UDM
UDMSRV

Implement TLS/SNI support for UDM to provide the ability for UDM and UDM Server to connect to an Agent running inside of a container.

B-22163

Unix (except Solaris)
Windows

OMSSRV
UAGSRV
UFTP

Add support to export traces and metrics in protobuf binary format. Provides the new OTEL_HTTP_TRACE_PROTOCOL and OTEL_HTTP_METRICS_PROTOCOL configuration options to switch between JSON and binary (the default) encoding.

B-22260

z/OS

UDM
UDMSRV

Provide a new dsreserve attribute that can be used to enable global sharing for any dataset opened for input or output.

NOTE: Use this attribute with caution. When "yes", all serialization is removed from any dataset that UDM dynamically allocates (for input or output) via the SVC99 routine. This means UDM will be able to access the dataset even if another process has requested exclusive access via DISP=MOD or DISP=OLD. Follow the link for additional details. The default value for this attribute is "no", and it should only be enabled in situations where other applications can serialize or synchronize access to the dataset.

B-22312

IBM i
Unix
z/OS

INSTALL

Compress distribution files with gzip instead of the compress utility to decrease file size.

D-09780

Unix
Windows
z/OS

UBROKER

Prevents a Universal Broker crash following successful Manager Fault Tolerant (MFT) recovery of a UCMD Manager task. In this situation, recovery processing was successful. The crash occurred as the Broker cleaned up tracking records stored in its BerkeleyDB database files.

D-10535

Unix

UAGSRV

Prevents an Agent File Monitor task failure when the specified file contains trailing whitespace that is not a space (e.g., a newline control character, '\n').

D-11317

Unix

UAGSRV

Improves trace file messaging for an Agent File Monitor task that executes on a Linux/Unix Agent. Messages are now consistent with those written for Agent File Monitor tasks that execute on Windows Agents.

D-11976

Unix
Windows
z/OS

UDM
UDMSRV

Update the International Components for Unicode (ICU) 3pp vendor library to remediate Critical- and High-severity CVEs.

D-12016

Unix
Windows
z/OS

UCMD
UCMSRV
UDM
UDMSRV
UFTP

Library dependencies updated due to vulnerabilities.

D-12045

Windows

UAGSRV
UCMD
UDM
UFTP

Update the Boost 3pp vendor library used for regular expression support on Windows to remediate Critical- and High-severity CVEs.

D-12235

Unix
Windows

UFTP
UPPS

Update the libcURL 3pp vendor library (used for UFTP file transfers and UPPS Web API calls) to remediate Critical- and High-severity CVEs.

D-12560

Unix
Windows
z/OS

UFTP

Update the libSSH2 3pp vendor library used by UFTP to remediate Critical- and High-severity CVEs.

D-12785

All

All

Improve data security by making sure all references to sensitive data are cleared before the memory holding that data is freed.

Note that no memory was leaked nor was any sensitive data exposed prior to this change. This change applies to the way in which the Universal Agent applications are built. Some compilers may "skip" a call to clear memory in situations where that that memory is immediately freed in the next statement. This is an undesirable optimization, and this change prevents the call to clear the memory from being skipped.

D-12805

Unix

UEM
UEMSRV

Fixes a problem where UEM tries to monitor a symbolic link on a Linux system that resides in a world-writeable directory.

D-12923

Unix
Windows

PYTHON

Update the Universal Agent Python distribution to 3.11.13 and its dependencies to remediate Critical- and High-severity CVEs.

D-12968

Windows

UAGSRV

Fixes a memory leak observed when running several Agent File Monitor tasks over an extended period of time.

D-13077

Unix
Windows
z/OS

UFTP

Fixes an issue for transfers to or from an IBM i FTP Server, where UFTP attempts to issue LIB file system commands for a location outside the Library file system.

D-13397

Unix (Linux Intel only)

INSTALL

A Universal Agent install or upgrade on Linux Intel (the RPM or Debian package) would replace file permissions for the /etc/universal/uai_log4jConfiguration.xml file, which is used by the Universal Agent for SOA. This change preserves that file's permissions.

This issue only affects users of the Universal Agent for SOA product.

D-13418

Unix

UDM
UDMSRV

Add support for the rdw session attribute for UDM sessions that execute on Linux/Unix.

This change allows users to inform UDM that a file transferred from Linux/Unix to z/OS contains RDW that can either be discarded or retained on a transfer to z/OS. This attribute was previously available on Windows and z/OS only.

D-13442

z/OS

UAGSRV

Fixes a problem where UAG Server may insert SET statements into existing JCL ahead of an existing EXPORT SYMLIST statements. This change ensures the EXPORT SYMLIST statement will precede SET statements.

D-13463

IBM i
Unix
Windows

UAGSRV

Fixes a problem where a Universal Extension Task that defines a field with a percent sign (%) in its value may be misinterpreted by UAG Server, causing it to crash.

D-13491

Windows

UAGSRV

Scan Text, Scan Forward, To Size, By Size and By Percentage options for Change Agent File Monitors on Windows are not handled correctly.

D-13509

Windows

UAGSRV

Fix Scan Text behavior in Create Agent File Monitor on Windows.

D-13518