2.10.4 2022-04-25
[Bug]: Servers offering certificate variants of hostkey algorithms (eg ssh-rsa-cert-v01@openssh.com) could not have their host keys verified by Paramiko clients, as it only ever considered non-cert key types for that part of connection handshaking. This has been fixed.
[Bug]: PKey instances’ __eq__ did not have the usual safety guard in place to ensure they were being compared to another PKey object, causing occasional spurious BadHostKeyException (among other things). This has been fixed. Thanks to Shengdun Hua for the original report/patch and to Christopher Papke for the final version of the fix.
[Support]: Update camelCase method calls against the threading module to be snake_case; this and related tweaks should fix some deprecation warnings under Python 3.10. Thanks to Karthikeyan Singaravelan for the report, @Narendra-Neerukonda for the patch, and to Thomas Grainger and Jun Omae for patch workshopping.
3.38.4 (2022-05-04):
Fix a byte-code problem in the Bloom filter pull-down optimization added by release 3.38.0 in which an error in the byte code causes the byte code engine to enter an infinite loop when the pull-down optimization encounters a NULL key.
There are many changes, including API-breaking ones (see the changelog in
the distribution for more details). The package has also been updated to
allow for lwt and async options.
OpenLDAP 2.6.2
Added libldap support for OpenSSL 3.0
Added slapd support for OpenSSL 3.0
Fixed ldapdelete to prune LDAP subentries
Fixed libldap to drop connection when non-LDAP data is received
Fixed libldap to allow newlines at end of included file
Fixed slapd slaptest conversion of olcLastBind
Fixed slapd to correctly init global_host earlier
Fixed slapd bconfig locking for cn=config replication
Fixed slapd usage of thread local counters
Fixed slapd to clear runqueue task correctly
Fixed slapd idletimeout handling
Fixed slapd syncrepl handling of new sessions
Fixed slapd to clear connections on bind
Fixed slapd to correctly advance connections index
Fixed slapd syncrepl ODSEE replication of unknown attr
Fixed slapd-asyncmeta memory leak in keepalive setting
Fixed slapd-ldap memory leak in keepalive setting
Fixed slapd-meta SEGV on config rewrite
Fixed slapd-meta ordering on config rewrite
Fixed slapd-meta memory leak in keepalive setting
Fixed slapd-monitor SEGV on shutdown
Fixed slapd-monitor crash when hitting sizelimit
Fixed slapd-sql to properly escape filter value
Added slapo-autoca support for OpenSSL 3.0
Added slapo-otp support for OpenSSL 3.0
Fixed slapo-dynlist dynamic group regression
Fixed slapo-pcache SEGV on shutdown
Fixed slapo-ppolicy operation handling to be consistent
Fixed slapo-translucent to correctly duplicate substring filters
Build Environment
Add ability to override default compile time paths
Fix compiliation with certain versions of gcc
Fix compilation with openssl exclusions
Fix warnings from make jobserver
Contrib
Update ppm module to the 2.1 release
Documentation
admin26 Document new lloadd features
Fixed slapd.conf(5)/slapd-config(5) syncrepl sizelimit/timelimit documentation
Fixed slapd-sock(5) to clarify "sockresps result" behavior
