En

gRPC官网安全更新(2021-04-07)

来源:gRPC官网 发布日期:2021-04-07 阅读次数:9219 评论:0

基本信息

发布日期:2021-04-07(官方当地时间)

更新类型:安全更新

更新版本:v1.37.0

感知时间:2021-04-08 01:50:28

风险等级:未知

情报贡献:TSRC

更新标题

安全更新

更新详情

This is release 1.37.0 ([gilded](https://github.com/grpc/grpc/blob/master/doc/g_stands_for.md)) of gRPC Core.

For gRPC documentation, see [grpc.io](https://grpc.io/). For previous releases, see [Releases](https://github.com/grpc/grpc/releases).

This release contains refinements, improvements, and bug fixes, with highlights listed below.


Core
---

- Bump up minimum supported clang to 4.0. ([#25443](https://github.com/grpc/grpc/pull/25443))
- Use URI form of address for channelz listen node. ([#25785](https://github.com/grpc/grpc/pull/25785))
- Implementation CSDS (xDS Config Dump). ([#25038](https://github.com/grpc/grpc/pull/25038))
- Don't assume that c-ares won't retry failed writes in grpc_core::GrpcPolledFdWindows::SendVUDP. ([#25726](https://github.com/grpc/grpc/pull/25726))
- Fix an infinite read loop with SRV record resolution on windows. ([#25672](https://github.com/grpc/grpc/pull/25672))
- xDS status notifier. ([#25321](https://github.com/grpc/grpc/pull/25321))
- Remove CAS loops in global subchannel pool and simplify subchannel refcounting. ([#25485](https://github.com/grpc/grpc/pull/25485))
- Add missing security field to channelz Socket. ([#25593](https://github.com/grpc/grpc/pull/25593))
- Disable check_call_host when server_verification_option is not GRPC_TLS_SERVER_VERIFICATION. ([#25577](https://github.com/grpc/grpc/pull/25577))

C++
---

- Remove fault injection environmental variable guard. ([#25792](https://github.com/grpc/grpc/pull/25792))
- Implement C++ Admin Interface API. ([#25753](https://github.com/grpc/grpc/pull/25753))
- cmake: Reflect minor version change in SONAME for C++ and C#. ([#25617](https://github.com/grpc/grpc/pull/25617))
- xDS Client-Side Fault Injection. ([#24354](https://github.com/grpc/grpc/pull/24354))

C#
---

- [C#] Add buildTransitive directory to NuGet package. ([#25385](https://github.com/grpc/grpc/pull/25385))
- Reduce Grpc.Core nuget size by generating separate .so with/without debug symbols for grpc_csharp_ext. ([#25729](https://github.com/grpc/grpc/pull/25729))
- make Grpc C# work on aarch64 linux. ([#25717](https://github.com/grpc/grpc/pull/25717))
- Add support for additional protoc arguments in Grpc.Tools. ([#25374](https://github.com/grpc/grpc/pull/25374))
- C#: Use explicit native extension loading whenever possible. ([#25490](https://github.com/grpc/grpc/pull/25490))

Python
---

- use boringssl asm optimizations in aarch64 wheel source build. ([#25453](https://github.com/grpc/grpc/pull/25453))
- Clarify Guarantees about grpc.Future Interface. ([#25383](https://github.com/grpc/grpc/pull/25383))
- Use crosscompilation to build python armv7 wheels. ([#25704](https://github.com/grpc/grpc/pull/25704))
- [Aio] Add time_remaining method to ServicerContext. ([#25719](https://github.com/grpc/grpc/pull/25719))
- Standardize all environment variable boolean configuration in python's setup.py. ([#25444](https://github.com/grpc/grpc/pull/25444))
- Crosscompile python aarch64 wheels with dockcross. ([#25418](https://github.com/grpc/grpc/pull/25418))
- Fix Signal Safety Issue. ([#25394](https://github.com/grpc/grpc/pull/25394))

Ruby
---

- Cherry-pick PR #25429 "Add ruby 3.0 support for mac binary packages" to 1.37.x. ([#25869](https://github.com/grpc/grpc/pull/25869))
- Include `GRPC::GenericService` from root namespace. ([#25153](https://github.com/grpc/grpc/pull/25153))
- Ruby: support for PSM security. ([#25330](https://github.com/grpc/grpc/pull/25330))

软件描述

gRPC是可以在任何环境中运行的现代开源高性能RPC框架。它可以通过可插拔的支持来有效地连接数据中心内和跨数据中心的服务,以实现负载平衡,跟踪,运行状况检查和身份验证。它也适用于分布式计算的最后一英里,以将设备,移动应用程序和浏览器连接到后端服务。

CVE编号

TSRC分析

暂无

业界资讯

暂无

评论

提交评论 您输入的评论有误,请重新输入