debian/changelog

   1 libpve-http-server-perl (4.1-3) bullseye; urgency=medium
   2
   3   * response: forbid linefeeds in response status message
   4
   5   * proxy request: assert that API url starts with a slash
   6
   7   * pass through streaming: only allow from privileged local pvedaemon as
   8     safety net
   9
  10   * requests: assert that there is no @ in the URLs authority
  11
  12  -- Proxmox Support Team <support@proxmox.com>  Sat, 02 Jul 2022 09:16:21 +0200
  13
  14 libpve-http-server-perl (4.1-2) bullseye; urgency=medium
  15
  16   * tls: log failure to apply TLS 1.3 ciphers
  17
  18   * html formatter: encode href attributes for API debug viewer
  19
  20  -- Proxmox Support Team <support@proxmox.com>  Tue, 17 May 2022 16:40:12 +0200
  21
  22 libpve-http-server-perl (4.1-1) bullseye; urgency=medium
  23
  24   * web socket: guard disconnect block check properly
  25
  26   * avoid warning if request params does not exist
  27
  28   * fix #3807: don't attempt response on closed handle
  29
  30   * fix #3790: allow setting TLS 1.3 cipher suites
  31
  32   * fix #3745: allow overriding TLS key location
  33
  34   * fix #3789: allow disabling TLS v1.2/v1.3
  35
  36  -- Proxmox Support Team <support@proxmox.com>  Thu, 13 Jan 2022 13:32:43 +0100
  37
  38 libpve-http-server-perl (4.0-4) bullseye; urgency=medium
  39
  40   * webproxy: handle unflushed write buffer
  41
  42   * fix #3724: disable TLS renegotiation
  43
  44   * download-stream: allow the api call to set the content-encoding
  45
  46  -- Proxmox Support Team <support@proxmox.com>  Wed, 24 Nov 2021 18:14:53 +0100
  47
  48 libpve-http-server-perl (4.0-3) bullseye; urgency=medium
  49
  50   * anyevent: move unlink from http-server to endpoint
  51
  52  -- Proxmox Support Team <support@proxmox.com>  Mon, 04 Oct 2021 10:18:12 +0200
  53
  54 libpve-http-server-perl (4.0-2) pve pmg; urgency=medium
  55
  56   * AnyEvent/websocket_proxy: remove 'base64' handling
  57
  58   * AnyEvent/websocket_proxy: drop handling of websocket subprotocols
  59
  60  -- Proxmox Support Team <support@proxmox.com>  Tue, 18 May 2021 10:19:00 +0200
  61
  62 libpve-http-server-perl (4.0-1) bullseye; urgency=medium
  63
  64   * rebuild for Debian 11 Bullseye based releases
  65
  66  -- Proxmox Support Team <support@proxmox.com>  Fri, 14 May 2021 16:37:34 +0200
  67
  68 libpve-http-server-perl (3.2-2) pve pmg; urgency=medium
  69
  70   * access control: correctly match v4-mapped-v6 addresses
  71
  72   * access control: also match any IPv6 in 'ALL'
  73
  74  -- Proxmox Support Team <support@proxmox.com>  Fri, 07 May 2021 17:49:34 +0200
  75
  76 libpve-http-server-perl (3.2-1) pve pmg; urgency=medium
  77
  78   * allow 'download' to be passed from API handler
  79
  80   * utils: add LISTEN_IP option in proxy configuration
  81
  82   * support streaming data form a file handle to a client
  83
  84   * allow stream download from path and over short-cutted pvedaemon-proxy
  85
  86  -- Proxmox Support Team <support@proxmox.com>  Fri, 23 Apr 2021 13:54:04 +0200
  87
  88 libpve-http-server-perl (3.1-1) pve pmg; urgency=medium
  89
  90   * accept connection phase: fix connection count leak
  91
  92   * accept connection phase: immediately close socket on early error
  93
  94  -- Proxmox Support Team <support@proxmox.com>  Fri, 11 Dec 2020 08:39:36 +0100
  95
  96 libpve-http-server-perl (3.0-6) pve pmg; urgency=medium
  97
  98   * fix #2766: allow application/json as content-type for post/put requests
  99
 100   * increase maximal accepted header count to 64. Modern browsers and proxy
 101     combinations can exceed the old limit of 30. The maximal accumulated total
 102     header size of 8 KiB stays untouched.
 103
 104  -- Proxmox Support Team <support@proxmox.com>  Thu, 02 Jul 2020 09:42:39 +0200
 105
 106 libpve-http-server-perl (3.0-5) pve pmg; urgency=medium
 107
 108   * partially fix #2618: use new unified spice port range helper from
 109     pve-common, increases maximum proxy port for spice to 61999
 110
 111   * Websocket: implement ping/pong from RFC
 112
 113   * Websocket: performance improvements
 114
 115  -- Proxmox Support Team <support@proxmox.com>  Mon, 09 Mar 2020 16:12:45 +0100
 116
 117 libpve-http-server-perl (3.0-4) pve pmg; urgency=medium
 118
 119   * allow ticket in 'Authorization' header as fallback
 120
 121   * api-server: extract, set and handle API token header
 122
 123  -- Proxmox Support Team <support@proxmox.com>  Wed, 29 Jan 2020 09:32:04 +0100
 124
 125 libpve-http-server-perl (3.0-3) pve pmg; urgency=medium
 126
 127   * send_file_start: allow to pass a open fh and content-type
 128
 129  -- Proxmox Support Team <support@proxmox.com>  Fri, 11 Oct 2019 11:25:12 +0200
 130
 131 libpve-http-server-perl (3.0-2) pve pmg; urgency=medium
 132
 133   * decode_urlencoded: cope with undefined values
 134
 135   * anyevent: rpcenv is optional and from our child instance
 136
 137  -- Proxmox Support Team <support@proxmox.com>  Thu, 11 Jul 2019 19:30:23 +0200
 138
 139 libpve-http-server-perl (3.0-1) pve pmg; urgency=medium
 140
 141   * rebuild for Debian Buster / PVE 6.0
 142
 143   * update jQuery to 3.4.1
 144
 145   * update Bootstrap to 3.4.1
 146
 147  -- Proxmox Support Team <support@proxmox.com>  Tue, 21 May 2019 21:35:00 +0200
 148
 149 libpve-http-server-perl (2.0-13) unstable; urgency=medium
 150
 151   * tls: make dh to openssl 1.1 compatible
 152
 153   * store Host header in rpc environment
 154
 155   * forward Host header in proxy_request
 156
 157  -- Proxmox Support Team <support@proxmox.com>  Wed, 03 Apr 2019 13:55:44 +0200
 158
 159 libpve-http-server-perl (2.0-12) unstable; urgency=medium
 160
 161   * Allow one to specify 'honor_cipher_order' and 'compression' parameters
 162
 163   * move read_proxy_conf from PVE::API2Tools to new PVE::ApiServer::Utils module
 164
 165  -- Proxmox Support Team <support@proxmox.com>  Tue, 26 Feb 2019 07:07:31 +0100
 166
 167 libpve-http-server-perl (2.0-11) unstable; urgency=medium
 168
 169   * fix #1935: spice proxy: read empty line after 200 OK
 170
 171  -- Proxmox Support Team <support@proxmox.com>  Fri, 28 Sep 2018 10:41:22 +0200
 172
 173 libpve-http-server-perl (2.0-10) unstable; urgency=medium
 174
 175   * fix #1869: send correct http response in spice proxy
 176
 177   * websocket: set $max_payload_size = 128*1024; (131072)
 178
 179  -- Proxmox Support Team <support@proxmox.com>  Fri, 17 Aug 2018 08:29:53 +0200
 180
 181 libpve-http-server-perl (2.0-9) unstable; urgency=medium
 182
 183   * Fix #1684 WebSocket proxy behind a buffered proxy
 184
 185  -- Proxmox Support Team <support@proxmox.com>  Mon, 28 May 2018 10:33:41 +0200
 186
 187 libpve-http-server-perl (2.0-8) unstable; urgency=medium
 188
 189   * auth_handler: handle exceptions correctly instead of always returning 401
 190
 191   * add 'map' filetype to http-server
 192
 193   * do not send websocket status code to port
 194
 195  -- Proxmox Support Team <support@proxmox.com>  Mon, 11 Dec 2017 15:35:34 +0100
 196
 197 libpve-http-server-perl (2.0-7) unstable; urgency=medium
 198
 199   * add content type application/x-compressed-tar
 200
 201   * allow API calls to download file contents
 202
 203   * build: reformat debian/control
 204
 205  -- Proxmox Support Team <support@proxmox.com>  Tue, 14 Nov 2017 08:05:17 +0100
 206
 207 libpve-http-server-perl (2.0-6) unstable; urgency=medium
 208
 209   * pass $format to rest_handler()
 210
 211  -- Proxmox Support Team <support@proxmox.com>  Thu, 10 Aug 2017 12:05:42 +0200
 212
 213 libpve-http-server-perl (2.0-5) unstable; urgency=medium
 214
 215   * add json/mp3/oga/svg MIME types for the new novnc
 216
 217  -- Proxmox Support Team <support@proxmox.com>  Fri, 02 Jun 2017 12:49:02 +0200
 218
 219 libpve-http-server-perl (2.0-4) unstable; urgency=medium
 220
 221   * assume all parameters are utf8 encoded
 222
 223  -- Proxmox Support Team <support@proxmox.com>  Tue, 02 May 2017 11:55:21 +0200
 224
 225 libpve-http-server-perl (2.0-3) unstable; urgency=medium
 226
 227   * avoid locale specific time stamps
 228
 229  -- Proxmox Support Team <support@proxmox.com>  Mon, 24 Apr 2017 07:43:29 +0200
 230
 231 libpve-http-server-perl (2.0-2) unstable; urgency=medium
 232
 233   * fix #1332: allow ECDHE with all supported curves
 234
 235  -- Proxmox Support Team <support@proxmox.com>  Mon, 03 Apr 2017 15:11:38 +0200
 236
 237 libpve-http-server-perl (2.0-1) unstable; urgency=medium
 238
 239   * bump version for debian stretch
 240
 241  -- Proxmox Support Team <support@proxmox.com>  Fri, 10 Mar 2017 08:50:55 +0100
 242
 243 libpve-http-server-perl (1.0-4) unstable; urgency=medium
 244
 245   * add debian triggers file
 246
 247  -- Proxmox Support Team <support@proxmox.com>  Sat, 21 Jan 2017 16:36:47 +0100
 248
 249 libpve-http-server-perl (1.0-3) unstable; urgency=medium
 250
 251   * console-demo.pl: add a more complex demo
 252
 253   * call Net::SSLeay::ERR_clear_error after all handlers
 254
 255   * avoid warnings when clients disconnects early
 256
 257  -- Proxmox Support Team <support@proxmox.com>  Sat, 21 Jan 2017 16:19:20 +0100
 258
 259 libpve-http-server-perl (1.0-2) unstable; urgency=medium
 260
 261   * simple-demo.pl: simple demo server for testing
 262
 263   * extract_auth_cookie: always call uri_unescape($ticket)
 264
 265   * use canonical flag for json format
 266
 267   * remove base_handler_class from required arguments
 268
 269   * remove all references to rpcenv
 270
 271   * include jquery and bootstrap
 272
 273   * new helper add_dirs
 274
 275   * add new hook function to generate CSRF token
 276
 277   * add generic formatter framework
 278
 279  -- Proxmox Support Team <support@proxmox.com>  Mon, 16 Jan 2017 18:39:21 +0100
 280
 281 libpve-http-server-perl (1.0-1) unstable; urgency=medium
 282
 283   * first try
 284
 285  -- Proxmox Support Team <support@proxmox.com>  Fri, 13 Jan 2017 12:47:07 +0100
 286