X-Git-Url: https://git.proxmox.com/?p=pve-access-control.git;a=blobdiff_plain;f=changelog.Debian;h=c63bdb34f594c06bf90bead402d37647448a3d0b;hp=476a7e4009bd9efb85cd9494ad05f393a95b86ce;hb=cee5583b3dfff0b68dbb42a93ec90f4d4f1bd7b3;hpb=d9483d94065796763eecfb48ff63568a6f1e857c diff --git a/changelog.Debian b/changelog.Debian index 476a7e4..c63bdb3 100644 --- a/changelog.Debian +++ b/changelog.Debian @@ -1,3 +1,143 @@ +libpve-access-control (3.0-9) unstable; urgency=low + + * prevent user enumeration attacks + + * allow dots in access paths + + -- Proxmox Support Team Mon, 18 Nov 2013 09:06:38 +0100 + +libpve-access-control (3.0-8) unstable; urgency=low + + * spice: use lowercase hostname in ticktet signature + + -- Proxmox Support Team Mon, 28 Oct 2013 08:11:57 +0100 + +libpve-access-control (3.0-7) unstable; urgency=low + + * check_volume_access : use parse_volname instead of path, and remove + path related code. + + * use warnings instead of global -w flag. + + -- Proxmox Support Team Tue, 01 Oct 2013 12:35:53 +0200 + +libpve-access-control (3.0-6) unstable; urgency=low + + * use shorter spiceproxy tickets + + -- Proxmox Support Team Fri, 19 Jul 2013 12:39:09 +0200 + +libpve-access-control (3.0-5) unstable; urgency=low + + * add code to generate tickets for SPICE + + -- Proxmox Support Team Wed, 26 Jun 2013 13:08:32 +0200 + +libpve-access-control (3.0-4) unstable; urgency=low + + * moved add_vm_to_pool/remove_vm_from_pool from qemu-server + + -- Proxmox Support Team Tue, 14 May 2013 11:56:54 +0200 + +libpve-access-control (3.0-3) unstable; urgency=low + + * Add new role PVETemplateUser (and VM.Clone priviledge) + + -- Proxmox Support Team Mon, 29 Apr 2013 11:42:15 +0200 + +libpve-access-control (3.0-2) unstable; urgency=low + + * remove CGI.pm related code (pveproxy does not need that) + + -- Proxmox Support Team Mon, 15 Apr 2013 12:34:23 +0200 + +libpve-access-control (3.0-1) unstable; urgency=low + + * bump version for wheezy release + + -- Proxmox Support Team Fri, 15 Mar 2013 08:07:06 +0100 + +libpve-access-control (1.0-26) unstable; urgency=low + + * check_volume_access: fix access permissions for backup files + + -- Proxmox Support Team Thu, 28 Feb 2013 10:00:14 +0100 + +libpve-access-control (1.0-25) unstable; urgency=low + + * add VM.Snapshot permission + + -- Proxmox Support Team Mon, 10 Sep 2012 09:23:32 +0200 + +libpve-access-control (1.0-24) unstable; urgency=low + + * untaint path (allow root to restore arbitrary paths) + + -- Proxmox Support Team Wed, 06 Jun 2012 13:06:34 +0200 + +libpve-access-control (1.0-23) unstable; urgency=low + + * correctly compute GUI capabilities (consider pools) + + -- Proxmox Support Team Wed, 30 May 2012 08:47:23 +0200 + +libpve-access-control (1.0-22) unstable; urgency=low + + * new plugin architecture for Auth modules, minor API change for Auth + domains (new 'delete' parameter) + + -- Proxmox Support Team Wed, 16 May 2012 07:21:44 +0200 + +libpve-access-control (1.0-21) unstable; urgency=low + + * do not allow user names including slash + + -- Proxmox Support Team Tue, 24 Apr 2012 10:07:47 +0200 + +libpve-access-control (1.0-20) unstable; urgency=low + + * add ability to fork cli workers in background + + -- Proxmox Support Team Wed, 18 Apr 2012 08:28:20 +0200 + +libpve-access-control (1.0-19) unstable; urgency=low + + * return set of privileges on login - can be used to adopt GUI + + -- Proxmox Support Team Tue, 17 Apr 2012 10:25:10 +0200 + +libpve-access-control (1.0-18) unstable; urgency=low + + * fix bug #151: corretly parse username inside ticket + + * fix bug #152: allow user to change his own password + + -- Proxmox Support Team Wed, 11 Apr 2012 09:40:15 +0200 + +libpve-access-control (1.0-17) unstable; urgency=low + + * set propagate flag by default + + -- Proxmox Support Team Thu, 01 Mar 2012 12:40:19 +0100 + +libpve-access-control (1.0-16) unstable; urgency=low + + * add 'pveum passwd' method + + -- Proxmox Support Team Thu, 23 Feb 2012 12:05:25 +0100 + +libpve-access-control (1.0-15) unstable; urgency=low + + * Add VM.Config.CDROM privilege to PVEVMUser rule + + -- Proxmox Support Team Wed, 22 Feb 2012 11:44:23 +0100 + +libpve-access-control (1.0-14) unstable; urgency=low + + * fix buf in userid-param permission check + + -- Proxmox Support Team Wed, 22 Feb 2012 10:52:35 +0100 + libpve-access-control (1.0-13) unstable; urgency=low * allow more characters in ldap base_dn attribute