From 8d393dc81e68dc9e9afbc6f2795d5f6aa813286b Mon Sep 17 00:00:00 2001 From: Thomas Lamprecht Date: Sat, 2 Jul 2022 09:24:03 +0200 Subject: [PATCH] bump version to 3.2-5 Signed-off-by: Thomas Lamprecht --- debian/changelog | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/debian/changelog b/debian/changelog index cb6e213..7af7ea5 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,16 @@ +libpve-http-server-perl (3.2-5) buster; urgency=medium + + * requests: assert that there is no @ in the URLs authority + + * pass through streaming: only allow from privileged local pvedaemon + as safety net + + * proxy request: assert that API url starts with a slash + + * response: forbid linefeeds in response status message + + -- Proxmox Support Team Sat, 02 Jul 2022 09:23:41 +0200 + libpve-http-server-perl (3.2-4) buster; urgency=medium * html formatter: encode href attributes for API debug viewer