Correction: Protobuf was upgraded to 3.18.2, not 3.19.2. On Thu, Jan 6, 2022 at 3:15 PM Eric Anderson <[email protected]> wrote:
> gRPC Java 1.42.2 is released and is available on Maven Central. It will > take additional time to be indexed by search.maven.org, but it is in the > repository. > > https://github.com/grpc/grpc-java/releases/tag/v1.42.2 > > Bug Fixes > > - census: fixed a bug which in rare cases, a NullPointerException may > be thrown by recordFinishedAttempt(). Users not enabling grpc-census > are not impacted by this bug (#8706 > <https://github.com/grpc/grpc-java/pull/8706>) > - core: fix a race condition when calling ManagedChannel.enterIdle() ( > #8761 <https://github.com/grpc/grpc-java/pull/8761>) > > Dependencies > > - Upgraded Protobuf to 3.19.2 to avoid CVE-2021-22569. See the protobuf > advisory > > <https://github.com/protocolbuffers/protobuf/security/advisories/GHSA-wrvw-hg22-4m67> > - Upgraded Guava to 30.1.1-android > > -- You received this message because you are subscribed to the Google Groups "grpc.io" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/grpc-io/CA%2B4M1oN77fpHqSEVf5t%3DXxr6EcjGueKLpzDsLxwWX63tNT7wzQ%40mail.gmail.com.
