From: Chocobozzz <me@florianbigard.com>
Date: Tue, 22 Feb 2022 14:25:55 +0000 (+0100)
Subject: Update changelog
X-Git-Tag: v4.1.0~2
X-Git-Url: https://git.immae.eu/?a=commitdiff_plain;h=85e0961c6bef2b4e105e5f9e74f7ad42bf07dbd8;p=github%2FChocobozzz%2FPeerTube.git

Update changelog
---

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9abc75cb6..41175af40 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -34,6 +34,11 @@
  * Add ability for admins to specify `youtube-dl`/`yt-dlp` python binary path [#4706](https://github.com/Chocobozzz/PeerTube/pull/4706)
  * PeerTube server startup is faster
 
+### Security
+
+  * Check video privacy before listing or accepting captions, comments or rates
+  * Check video import target URL does not resolve to internal IP. This technique has some limits so if you have private HTTP services on your server/network publicly accessible, we recommend to use a proxy or a dedicated interface for PeerTube
+
 ### CLI tools
 
  * Also remove HLS files when using `prune-storage` script
@@ -101,6 +106,9 @@
  * Prevent video import on non unicast ips
  * Improve markdown to plain text converter, especially when handling lists
  * Fix scheduled publication on upload
+ * Fix youtube-dl max buffer size error
+ * Hide remote subscribe if user is logged in
+ * Fix video file `storage` column inconsistency
 
 
 ## v4.0.0