1 libpve-http-server-perl (5.0.5) bookworm; urgency=medium
3 * fix #4859: properly configure TLSv1.3 only mode
5 -- Proxmox Support Team <support@proxmox.com> Fri, 03 Nov 2023 12:06:31 +0100
7 libpve-http-server-perl (5.0.4) bookworm; urgency=medium
9 * fix #4802: reduce CA lookups while proxying with OpenSSL as packaged in
12 * avoid AnyEvent::AIO to fix CPU spinning if the pure-perl implementation
13 libanyevent-aio-perl is installed, for example on development machines
14 when trying to use the perl language server.
16 -- Proxmox Support Team <support@proxmox.com> Mon, 03 Jul 2023 09:38:56 +0200
18 libpve-http-server-perl (5.0.3) bookworm; urgency=medium
20 * proxy request: handle missing content-type header
22 -- Proxmox Support Team <support@proxmox.com> Fri, 09 Jun 2023 18:58:05 +0200
24 libpve-http-server-perl (5.0.2) bookworm; urgency=medium
26 * formatter/bootstrap: set SameSite attr of auth cookie to 'strict'
28 * when proxying requests, preserve json formatting instead of converting to
31 * support actual arrays for array parameters, as a replacement for '-list' and
34 -- Proxmox Support Team <support@proxmox.com> Wed, 07 Jun 2023 13:21:19 +0200
36 libpve-http-server-perl (5.0.1) bookworm; urgency=medium
38 * fix regression in the html (bootstrap) based API debug explorer, which
39 came in through a more strict pattern checking in a newer version of the
40 used URL encoding library
42 -- Proxmox Support Team <support@proxmox.com> Sat, 03 Jun 2023 15:15:47 +0200
44 libpve-http-server-perl (5.0.0) bookworm; urgency=medium
46 * switch over to native versioning
48 * various small code and packaging clean ups
50 * re-build for Debian 12 Bookworm based releases
52 -- Proxmox Support Team <support@proxmox.com> Wed, 17 May 2023 07:26:11 +0200
54 libpve-http-server-perl (4.2-3) bullseye; urgency=medium
56 * file upload: don't always calculate MD5 for syslog message, rather log the
59 * explicitly disallow tmpfilename parameter in query URL
61 -- Proxmox Support Team <support@proxmox.com> Fri, 14 Apr 2023 16:27:07 +0200
63 libpve-http-server-perl (4.2-2) bullseye; urgency=medium
65 * multipart upload: properly parse file parts without Content-Type
67 -- Proxmox Support Team <support@proxmox.com> Tue, 11 Apr 2023 14:44:03 +0200
69 libpve-http-server-perl (4.2-1) bullseye; urgency=medium
71 * fix #4494: redirect incoming HTTP requests to HTTPS to avoid common
72 pitfall when opening the Proxmox VE or Proxmox Mail Gateway web-interface
75 -- Proxmox Support Team <support@proxmox.com> Thu, 16 Mar 2023 16:57:59 +0100
77 libpve-http-server-perl (4.1-6) bullseye; urgency=medium
79 * multipart upload: fix upload of files starting with newlines
81 * multipart upload: don't fail on presebce of additional headers
83 * multipart upload: loosen trailing-newline requirement from spec, as some
84 more popular clients (e.g., postman) violate that rule.
86 * fix #4344: http-server: fix regression that required the 'Content-Type' to
87 be always present for multipart headers, while it wasn't used at all.
89 -- Proxmox Support Team <support@proxmox.com> Mon, 06 Mar 2023 13:39:57 +0100
91 libpve-http-server-perl (4.1-5) bullseye; urgency=medium
93 * upload: re-allow having white-space in filenames
95 -- Proxmox Support Team <support@proxmox.com> Mon, 07 Nov 2022 16:43:31 +0100
97 libpve-http-server-perl (4.1-4) bullseye; urgency=medium
99 * acknowledge content-disposition header
101 * request: add missing early return to future proof error check
103 -- Proxmox Support Team <support@proxmox.com> Thu, 29 Sep 2022 14:37:05 +0200
105 libpve-http-server-perl (4.1-3) bullseye; urgency=medium
107 * response: forbid linefeeds in response status message
109 * proxy request: assert that API url starts with a slash
111 * pass through streaming: only allow from privileged local pvedaemon as
114 * requests: assert that there is no @ in the URLs authority
116 -- Proxmox Support Team <support@proxmox.com> Sat, 02 Jul 2022 09:16:21 +0200
118 libpve-http-server-perl (4.1-2) bullseye; urgency=medium
120 * tls: log failure to apply TLS 1.3 ciphers
122 * html formatter: encode href attributes for API debug viewer
124 -- Proxmox Support Team <support@proxmox.com> Tue, 17 May 2022 16:40:12 +0200
126 libpve-http-server-perl (4.1-1) bullseye; urgency=medium
128 * web socket: guard disconnect block check properly
130 * avoid warning if request params does not exist
132 * fix #3807: don't attempt response on closed handle
134 * fix #3790: allow setting TLS 1.3 cipher suites
136 * fix #3745: allow overriding TLS key location
138 * fix #3789: allow disabling TLS v1.2/v1.3
140 -- Proxmox Support Team <support@proxmox.com> Thu, 13 Jan 2022 13:32:43 +0100
142 libpve-http-server-perl (4.0-4) bullseye; urgency=medium
144 * webproxy: handle unflushed write buffer
146 * fix #3724: disable TLS renegotiation
148 * download-stream: allow the api call to set the content-encoding
150 -- Proxmox Support Team <support@proxmox.com> Wed, 24 Nov 2021 18:14:53 +0100
152 libpve-http-server-perl (4.0-3) bullseye; urgency=medium
154 * anyevent: move unlink from http-server to endpoint
156 -- Proxmox Support Team <support@proxmox.com> Mon, 04 Oct 2021 10:18:12 +0200
158 libpve-http-server-perl (4.0-2) pve pmg; urgency=medium
160 * AnyEvent/websocket_proxy: remove 'base64' handling
162 * AnyEvent/websocket_proxy: drop handling of websocket subprotocols
164 -- Proxmox Support Team <support@proxmox.com> Tue, 18 May 2021 10:19:00 +0200
166 libpve-http-server-perl (4.0-1) bullseye; urgency=medium
168 * rebuild for Debian 11 Bullseye based releases
170 -- Proxmox Support Team <support@proxmox.com> Fri, 14 May 2021 16:37:34 +0200
172 libpve-http-server-perl (3.2-2) pve pmg; urgency=medium
174 * access control: correctly match v4-mapped-v6 addresses
176 * access control: also match any IPv6 in 'ALL'
178 -- Proxmox Support Team <support@proxmox.com> Fri, 07 May 2021 17:49:34 +0200
180 libpve-http-server-perl (3.2-1) pve pmg; urgency=medium
182 * allow 'download' to be passed from API handler
184 * utils: add LISTEN_IP option in proxy configuration
186 * support streaming data form a file handle to a client
188 * allow stream download from path and over short-cutted pvedaemon-proxy
190 -- Proxmox Support Team <support@proxmox.com> Fri, 23 Apr 2021 13:54:04 +0200
192 libpve-http-server-perl (3.1-1) pve pmg; urgency=medium
194 * accept connection phase: fix connection count leak
196 * accept connection phase: immediately close socket on early error
198 -- Proxmox Support Team <support@proxmox.com> Fri, 11 Dec 2020 08:39:36 +0100
200 libpve-http-server-perl (3.0-6) pve pmg; urgency=medium
202 * fix #2766: allow application/json as content-type for post/put requests
204 * increase maximal accepted header count to 64. Modern browsers and proxy
205 combinations can exceed the old limit of 30. The maximal accumulated total
206 header size of 8 KiB stays untouched.
208 -- Proxmox Support Team <support@proxmox.com> Thu, 02 Jul 2020 09:42:39 +0200
210 libpve-http-server-perl (3.0-5) pve pmg; urgency=medium
212 * partially fix #2618: use new unified spice port range helper from
213 pve-common, increases maximum proxy port for spice to 61999
215 * Websocket: implement ping/pong from RFC
217 * Websocket: performance improvements
219 -- Proxmox Support Team <support@proxmox.com> Mon, 09 Mar 2020 16:12:45 +0100
221 libpve-http-server-perl (3.0-4) pve pmg; urgency=medium
223 * allow ticket in 'Authorization' header as fallback
225 * api-server: extract, set and handle API token header
227 -- Proxmox Support Team <support@proxmox.com> Wed, 29 Jan 2020 09:32:04 +0100
229 libpve-http-server-perl (3.0-3) pve pmg; urgency=medium
231 * send_file_start: allow to pass a open fh and content-type
233 -- Proxmox Support Team <support@proxmox.com> Fri, 11 Oct 2019 11:25:12 +0200
235 libpve-http-server-perl (3.0-2) pve pmg; urgency=medium
237 * decode_urlencoded: cope with undefined values
239 * anyevent: rpcenv is optional and from our child instance
241 -- Proxmox Support Team <support@proxmox.com> Thu, 11 Jul 2019 19:30:23 +0200
243 libpve-http-server-perl (3.0-1) pve pmg; urgency=medium
245 * rebuild for Debian Buster / PVE 6.0
247 * update jQuery to 3.4.1
249 * update Bootstrap to 3.4.1
251 -- Proxmox Support Team <support@proxmox.com> Tue, 21 May 2019 21:35:00 +0200
253 libpve-http-server-perl (2.0-13) unstable; urgency=medium
255 * tls: make dh to openssl 1.1 compatible
257 * store Host header in rpc environment
259 * forward Host header in proxy_request
261 -- Proxmox Support Team <support@proxmox.com> Wed, 03 Apr 2019 13:55:44 +0200
263 libpve-http-server-perl (2.0-12) unstable; urgency=medium
265 * Allow one to specify 'honor_cipher_order' and 'compression' parameters
267 * move read_proxy_conf from PVE::API2Tools to new PVE::ApiServer::Utils module
269 -- Proxmox Support Team <support@proxmox.com> Tue, 26 Feb 2019 07:07:31 +0100
271 libpve-http-server-perl (2.0-11) unstable; urgency=medium
273 * fix #1935: spice proxy: read empty line after 200 OK
275 -- Proxmox Support Team <support@proxmox.com> Fri, 28 Sep 2018 10:41:22 +0200
277 libpve-http-server-perl (2.0-10) unstable; urgency=medium
279 * fix #1869: send correct http response in spice proxy
281 * websocket: set $max_payload_size = 128*1024; (131072)
283 -- Proxmox Support Team <support@proxmox.com> Fri, 17 Aug 2018 08:29:53 +0200
285 libpve-http-server-perl (2.0-9) unstable; urgency=medium
287 * Fix #1684 WebSocket proxy behind a buffered proxy
289 -- Proxmox Support Team <support@proxmox.com> Mon, 28 May 2018 10:33:41 +0200
291 libpve-http-server-perl (2.0-8) unstable; urgency=medium
293 * auth_handler: handle exceptions correctly instead of always returning 401
295 * add 'map' filetype to http-server
297 * do not send websocket status code to port
299 -- Proxmox Support Team <support@proxmox.com> Mon, 11 Dec 2017 15:35:34 +0100
301 libpve-http-server-perl (2.0-7) unstable; urgency=medium
303 * add content type application/x-compressed-tar
305 * allow API calls to download file contents
307 * build: reformat debian/control
309 -- Proxmox Support Team <support@proxmox.com> Tue, 14 Nov 2017 08:05:17 +0100
311 libpve-http-server-perl (2.0-6) unstable; urgency=medium
313 * pass $format to rest_handler()
315 -- Proxmox Support Team <support@proxmox.com> Thu, 10 Aug 2017 12:05:42 +0200
317 libpve-http-server-perl (2.0-5) unstable; urgency=medium
319 * add json/mp3/oga/svg MIME types for the new novnc
321 -- Proxmox Support Team <support@proxmox.com> Fri, 02 Jun 2017 12:49:02 +0200
323 libpve-http-server-perl (2.0-4) unstable; urgency=medium
325 * assume all parameters are utf8 encoded
327 -- Proxmox Support Team <support@proxmox.com> Tue, 02 May 2017 11:55:21 +0200
329 libpve-http-server-perl (2.0-3) unstable; urgency=medium
331 * avoid locale specific time stamps
333 -- Proxmox Support Team <support@proxmox.com> Mon, 24 Apr 2017 07:43:29 +0200
335 libpve-http-server-perl (2.0-2) unstable; urgency=medium
337 * fix #1332: allow ECDHE with all supported curves
339 -- Proxmox Support Team <support@proxmox.com> Mon, 03 Apr 2017 15:11:38 +0200
341 libpve-http-server-perl (2.0-1) unstable; urgency=medium
343 * bump version for debian stretch
345 -- Proxmox Support Team <support@proxmox.com> Fri, 10 Mar 2017 08:50:55 +0100
347 libpve-http-server-perl (1.0-4) unstable; urgency=medium
349 * add debian triggers file
351 -- Proxmox Support Team <support@proxmox.com> Sat, 21 Jan 2017 16:36:47 +0100
353 libpve-http-server-perl (1.0-3) unstable; urgency=medium
355 * console-demo.pl: add a more complex demo
357 * call Net::SSLeay::ERR_clear_error after all handlers
359 * avoid warnings when clients disconnects early
361 -- Proxmox Support Team <support@proxmox.com> Sat, 21 Jan 2017 16:19:20 +0100
363 libpve-http-server-perl (1.0-2) unstable; urgency=medium
365 * simple-demo.pl: simple demo server for testing
367 * extract_auth_cookie: always call uri_unescape($ticket)
369 * use canonical flag for json format
371 * remove base_handler_class from required arguments
373 * remove all references to rpcenv
375 * include jquery and bootstrap
377 * new helper add_dirs
379 * add new hook function to generate CSRF token
381 * add generic formatter framework
383 -- Proxmox Support Team <support@proxmox.com> Mon, 16 Jan 2017 18:39:21 +0100
385 libpve-http-server-perl (1.0-1) unstable; urgency=medium
389 -- Proxmox Support Team <support@proxmox.com> Fri, 13 Jan 2017 12:47:07 +0100