Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
+libpve-http-server-perl (4.1-3) bullseye; urgency=medium
+
+ * response: forbid linefeeds in response status message
+
+ * proxy request: assert that API url starts with a slash
+
+ * pass through streaming: only allow from privileged local pvedaemon as
+ safety net
+
+ * requests: assert that there is no @ in the URLs authority
+
+ -- Proxmox Support Team <support@proxmox.com> Sat, 02 Jul 2022 09:16:21 +0200
+
libpve-http-server-perl (4.1-2) bullseye; urgency=medium
* tls: log failure to apply TLS 1.3 ciphers