Platform SDK for .NET Release Notes
|Release Date||Release Type||Restrictions||AIX||Linux||Solaris||Windows|
This release includes only resolved issues.
This release contains the following resolved issues:
The following corrections and clarifications were made regarding potential vulnerabilities reported by automated scanners:
- The ConnectionSetting class has been refactored in voice.protocol.dll to include improve storage of sensitive information by replacing plain strings with more complex structures that prevent direct memory scanning.
- An encryption key that was hard-coded is now configurable, allowing possible future server-side support.
- The secure connection between server and browser is provided by using TLS with strong encryption. Reports of a broken or risky algorithm (CWE-327) in Platform SDK may occur due to internal-only features related to user identification, but do not represent a vulnerability. (PSDK-9539)
No special procedure is required to upgrade to release 9.0.006.04.