From: Thomas Lamprecht Date: Sat, 2 Jul 2022 07:16:29 +0000 (+0200) Subject: bump version to 4.1-3 X-Git-Url: https://git.proxmox.com/?p=pve-http-server.git;a=commitdiff_plain;h=9f092591c8e40143d74b6ebf8fb944697be69c2c bump version to 4.1-3 Signed-off-by: Thomas Lamprecht --- diff --git a/debian/changelog b/debian/changelog index 8447a38..b686162 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,16 @@ +libpve-http-server-perl (4.1-3) bullseye; urgency=medium + + * response: forbid linefeeds in response status message + + * proxy request: assert that API url starts with a slash + + * pass through streaming: only allow from privileged local pvedaemon as + safety net + + * requests: assert that there is no @ in the URLs authority + + -- Proxmox Support Team Sat, 02 Jul 2022 09:16:21 +0200 + libpve-http-server-perl (4.1-2) bullseye; urgency=medium * tls: log failure to apply TLS 1.3 ciphers