Kount RIS Java SDK Release Notes History

7.5.2

7.5.1

7.4.0

Updates HttpClient to recognize system settings for proxy connections.

7.3.12

Updates Log4J to 2.17.1.

7.3.11

• Upgrade to log4j 2.17.0
• Remove a few unused/unnecessary classes

7.3.10

Upgraded Log4j dependency to 2.16.0. Resolves parent dependency issue.

7.3.9

7.3.8

Upgraded Log4j dependency to mitigate vulnerability CVE-2021-44228.

Refer to:

• https://logging.apache.org/log4j/2.x/security.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44228

7.3.7

• Updated the default version of the RIS call to use version 0710
• Added new getters respective to new RIS version
• Removed data validations from SDK side

7.3.5

• Fixed JUnit vulnerability issues
• We fixed JUnit vulnerability issues and updated the latest version of JUnit (4.13.1)

7.3.4

• Fixed log4j-core vulnerability issues
• We fixed log4j-core vulnerability issues and updated the latest version of log4j

7.3.3

Bug Fix: To support better concurrency for calls to RIS service.

7.3.2

Enhancement: Implemented Http Apache Client instead of HttpUrlConnections.

Reason: It will support asynchronous call.

7.2.2

Issue: RIS SDK compatibility issue was there with Java 11.

• Javax.bind is not in-built with Java 11, dependency added in Pom.xml
• Javadoc is updated from 2.10.4 to 3.1.0
• Junit is updated from 4.10 to 4.12

7.2.1

Issue: Log4j is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic for log data.

Solution: Log4j2 implemented in RIS Sdk instead of log4j.

7.2.0

Omniscore implemented in Java. We have included a getter method called getOmniscore that returns the Omniscore value in the Response.

7.1.1

Added support to pass an IPV6 address with the IPAD field.

Note: IPV6 addresses are converted to a static IPV4 address within RIS (10.0.0.1).

7.0.0

• Introducing configuration key – this breaks backward compatibility with older releases
• Removed the SALT phrase
• Maven improvements and code updates

6.5.2

• Removed request parameters CCMM and CCYY

6.5.1

• Improved communication logging
• Added more information to connection headers
• Integrated more payment types, refer to https://api.test.kount.net/rpc/support/payments.html

6.5.0

SALT phrase configurable as system variable.

6.4.2

• Minor improvements for integration tests logging
• Fixed build issue when JDK 1.7 is used

6.4.0

• New requirement for JDK/JRE version 1.7 and above
• Secure communication between client and server now using TLS v1.2
• Added Apache Maven tools for easier compilation, build, unit and integration tests, javadoc generation, and packaging
• General source code improvements and modernization
• General javadoc enhancements