En

gRPC官网安全更新(2021-09-27)

来源:gRPC官网 发布日期:2021-09-27 阅读次数:8280 评论:0

基本信息

发布日期:2021-09-27(官方当地时间)

更新类型:安全更新

更新版本:v1.41.0

感知时间:2021-09-28 02:30:18

风险等级:未知

情报贡献:TSRC

更新标题

安全更新

更新详情

This is release 1.41.0 ([goat](https://github.com/grpc/grpc/blob/master/doc/g_stands_for.md)) of gRPC Core.

For gRPC documentation, see [grpc.io](https://grpc.io/). For previous releases, see [Releases](https://github.com/grpc/grpc/releases).

This release contains refinements, improvements, and bug fixes, with highlights listed below.


Core
---

- De-experimentalize XdsCredentials and XdsServerCredentials API. ([#26544](https://github.com/grpc/grpc/pull/26544))
- xDS: Remove environmental variable guard for security. ([#27290](https://github.com/grpc/grpc/pull/27290))
- xDS Security: Use new way to fetch certificate provider plugin instance config. ([#27264](https://github.com/grpc/grpc/pull/27264))
- xDS server serving status: Use a struct to allow more fields to be added in the future. ([#27242](https://github.com/grpc/grpc/pull/27242))
- Annotate impl/codegen with IWYU pragmas. ([#27252](https://github.com/grpc/grpc/pull/27252))
- Update submodule envoy-api to origin/main. ([#27256](https://github.com/grpc/grpc/pull/27256))
- Upgrade third_party/protobuf to v3.17.3. ([#27227](https://github.com/grpc/grpc/pull/27227))
- update submodule boringssl-with-bazel with origin/master-with-bazel. ([#27208](https://github.com/grpc/grpc/pull/27208))
- Delete libuv-iomgr implementation and GRPC_UV build option. ([#27188](https://github.com/grpc/grpc/pull/27188))
- Allow access to Google API regional endpoints via Google Default Credentials. ([#27155](https://github.com/grpc/grpc/pull/27155))
- Remove GPR_*_TLS macros except PTHREAD. ([#26974](https://github.com/grpc/grpc/pull/26974))
- Limit initial window size increases and per-stream window delta. ([#26342](https://github.com/grpc/grpc/pull/26342))

C++
---

- Bump version to v1.41.0-pre1. ([#27371](https://github.com/grpc/grpc/pull/27371))
- De-experimentalize XdsServerBuilder. ([#27296](https://github.com/grpc/grpc/pull/27296))
- C++ opencensus filter: Fix point of creating context for overall call. ([#27221](https://github.com/grpc/grpc/pull/27221))
- Flag grpc++_test library testonly. ([#27214](https://github.com/grpc/grpc/pull/27214))
- Add note on officially supported platforms. ([#22344](https://github.com/grpc/grpc/pull/22344))
- Open census call attempt span name and attribute changes (#26889). ([#26902](https://github.com/grpc/grpc/pull/26902))
- Open census call attempt span name and attribute changes. ([#26889](https://github.com/grpc/grpc/pull/26889))

C#
---

- Backport #27382 to v1.41.x. ([#27398](https://github.com/grpc/grpc/pull/27398))
- [csharp] Fix error loading library grpc_csharp_ext.*.dll on windows with non-ASCII encoding. ([#26762](https://github.com/grpc/grpc/pull/26762))
- Annotate copied Content native lib items with package id to enable customization. ([#26725](https://github.com/grpc/grpc/pull/26725))

Objective-C
---

- Objective-C: Fix issue with creating a Unix file socket. ([#26931](https://github.com/grpc/grpc/pull/26931))

Python
---

- Use manylinux_2_17 instead of manylinux_2_24 tag for manylinux2014 aarch64 wheels. ([#27280](https://github.com/grpc/grpc/pull/27280))
- Add Python 3.10 drop 3.5. ([#26074](https://github.com/grpc/grpc/pull/26074))
- [Aio] Remove custom IO manager support. ([#27090](https://github.com/grpc/grpc/pull/27090))

软件描述

gRPC是可以在任何环境中运行的现代开源高性能RPC框架。它可以通过可插拔的支持来有效地连接数据中心内和跨数据中心的服务,以实现负载平衡,跟踪,运行状况检查和身份验证。它也适用于分布式计算的最后一英里,以将设备,移动应用程序和浏览器连接到后端服务。

CVE编号

TSRC分析

暂无

业界资讯

暂无

评论

提交评论 您输入的评论有误,请重新输入