diff --git a/debian/changelog b/debian/changelog
index 8447a38..b686162 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,16 @@
+libpve-http-server-perl (4.1-3) bullseye; urgency=medium
+
+  * response: forbid linefeeds in response status message
+
+  * proxy request: assert that API url starts with a slash
+
+  * pass through streaming: only allow from privileged local pvedaemon as
+    safety net
+
+  * requests: assert that there is no @ in the URLs authority
+
+ -- Proxmox Support Team <support@proxmox.com>  Sat, 02 Jul 2022 09:16:21 +0200
+
 libpve-http-server-perl (4.1-2) bullseye; urgency=medium
 
   * tls: log failure to apply TLS 1.3 ciphers