Change log : coturn package : Ubuntu

4.6.1-1build4

Published in noble-release on 2024-04-05

Deleted in noble-proposed (Reason: Moved to noble)

coturn (4.6.1-1build4) noble; urgency=medium

  * No-change rebuild for CVE-2024-3094

 -- William Grant <email address hidden>  Mon, 01 Apr 2024 16:41:07 +1100

Available diffs

diff from 4.6.1-1build3 to 4.6.1-1build4 (303 bytes)

4.6.1-1build3

Superseded in noble-release on 2024-04-05

Deleted in noble-proposed on 2024-04-06 (Reason: Moved to noble)

coturn (4.6.1-1build3) noble; urgency=medium

  * No-change rebuild against libssl3t64

 -- Steve Langasek <email address hidden>  Mon, 04 Mar 2024 17:35:59 +0000

Available diffs

diff from 4.6.1-1build2 to 4.6.1-1build3 (301 bytes)

4.6.1-1build2

Deleted in noble-updates on 2024-04-07 (Reason: superseded by release)

Superseded in noble-release on 2024-03-29

Deleted in noble-proposed on 2024-04-07 (Reason: Moved to noble)

coturn (4.6.1-1build2) noble; urgency=medium

  * No-change rebuild against libhiredis1.1.0

 -- Dan Bungert <email address hidden>  Wed, 24 Jan 2024 08:28:28 -0700

Available diffs

diff from 4.6.1-1build1 to 4.6.1-1build2 (315 bytes)

4.6.1-1build1

Superseded in noble-release on 2024-01-25

Published in mantic-release on 2023-09-15

Deleted in mantic-proposed (Reason: Moved to mantic)

coturn (4.6.1-1build1) mantic; urgency=medium

  * No-change rebuild against libevent-core-2.1-7

 -- Steve Langasek <email address hidden>  Fri, 15 Sep 2023 18:41:41 +0000

Available diffs

diff from 4.6.1-1 (in Debian) to 4.6.1-1build1 (569 bytes)

4.6.1-1

Superseded in mantic-release on 2023-09-15

Published in lunar-release on 2023-02-06

Deleted in lunar-proposed (Reason: Moved to lunar)

coturn (4.6.1-1) unstable; urgency=medium

  * Team upload.
  * New upstream release.

 -- Dominik George <email address hidden>  Sun, 05 Feb 2023 11:03:55 +0100

Available diffs

diff from 4.5.2-3.1build2 (in Ubuntu) to 4.6.1-1 (55.9 KiB)

4.5.2-3.1build2

Superseded in lunar-release on 2023-02-06

Deleted in lunar-proposed on 2023-02-07 (Reason: Moved to lunar)

coturn (4.5.2-3.1build2) lunar; urgency=medium

  * No change rebuild for PostgreSQL 15

 -- Athos Ribeiro <email address hidden>  Wed, 18 Jan 2023 11:17:51 -0300

Available diffs

diff from 4.5.2-3.1build1 to 4.5.2-3.1build2 (331 bytes)

4.5.2-3.1build1

Superseded in lunar-release on 2023-01-19

Obsolete in kinetic-release on 2023-11-13

Deleted in kinetic-proposed (Reason: Moved to kinetic)

coturn (4.5.2-3.1build1) kinetic; urgency=medium

  * No-change rebuild against libevent-core-2.1-7a

 -- Steve Langasek <email address hidden>  Fri, 07 Oct 2022 21:20:35 +0000

Available diffs

diff from 4.5.2-3.1 (in Debian) to 4.5.2-3.1build1 (580 bytes)

4.5.2-3.1~ubuntu22.04.1

Published in jammy-updates on 2022-10-26

Deleted in jammy-proposed (Reason: moved to -updates)

coturn (4.5.2-3.1~ubuntu22.04.1) jammy; urgency=medium

  * No change backport from kinetic. LP: #1979978

 -- Simon Fels <email address hidden>  Wed, 29 Jun 2022 21:01:32 +0200

Available diffs

diff from 4.5.2-3build1 to 4.5.2-3.1~ubuntu22.04.1 (1.3 KiB)

4.5.2-3.1

Superseded in kinetic-release on 2022-10-14

Deleted in kinetic-proposed on 2022-10-15 (Reason: Moved to kinetic)

coturn (4.5.2-3.1) unstable; urgency=medium

  * Non-maintainer upload.
  * [518094e] New No-FIPS-140-mode.patch fixes build against OpenSSL 3.0
    (Closes: #995659, LP: #1967018)

 -- Nicholas Guriev <email address hidden>  Thu, 02 Jun 2022 13:36:34 +0300

4.5.2-3build1

Deleted in jammy-proposed on 2021-12-08 (Reason: FTBFS, blocks libssl3 transition; Debian bug #995659)

coturn (4.5.2-3build1) jammy; urgency=medium

  * No-change rebuild against openssl3

 -- Simon Chopin <email address hidden>  Fri, 03 Dec 2021 14:32:39 +0100

Available diffs

diff from 4.5.2-3 (in Debian) to 4.5.2-3build1 (311 bytes)

4.5.2-3

Deleted in jammy-release (Reason: FTBFS, blocks libssl3 transition; Debian bug #995659)

Obsolete in impish-release on 2022-07-23

Deleted in impish-proposed (Reason: Moved to impish)

coturn (4.5.2-3) unstable; urgency=medium

  [ Ferenc Wágner ]
  * [50ab417] Don't rely on the documentation being present for creating the DB.
    Dpkg may be configured to omit installing files under /usr/share/doc.
    Since the database schema is shipped in a private directory as well,
    switch to using that instance instead. (Closes: #985054)
  * [6f94ecb] Let the purge go through under unforeseen circumstances
  * [d8f0a0a] Let debhelper do its business before the final cleanup
  * [4033c69] Make the SQLite database writable by the turnserver user and
    group.
    File permissions alone aren't enough, the containing directory needs to
    be writable as well.
  * [81731d8] Ship the empty /var/lib/turndb directory for better
    discoverability
  * [34a2b34] Split up our autopkgtest into several tests

  [ Mészáros Mihály ]
  * [1666988] Add forwarded not-needed to
    Fix-undefinded-OPENSSL_VERSION_1_1_1.patch

 -- Mészáros Mihály <email address hidden>  Wed, 24 Mar 2021 20:30:23 +0100

Available diffs

diff from 4.5.2-2 to 4.5.2-3 (2.2 KiB)

4.5.2-2

Superseded in impish-release on 2021-05-04

Obsolete in hirsute-release on 2022-07-23

Deleted in hirsute-proposed on 2022-07-24 (Reason: moved to Release)

coturn (4.5.2-2) unstable; urgency=medium

  [ Michael Prokop ]
  * [059ff0a] debian/coturn.postrm: fix check for dpkg-statoverride on package
    removal. This fixes a regression introduced in commit b9a4a8.
    While at it, also move the statoverride removal before the account removal.
    (Closes: #981330)

  [ Ferenc Wágner ]
  * [e991e26] Enroll to basic Salsa-CI

  [ Mészáros Mihály ]
  * [3505b22] HotFix upstream undefinded OPENSSL_VERSION_1_1_1
  * [20f9a9e] Add tls test to debian autopkgtest

 -- Mészáros Mihály <email address hidden>  Wed, 10 Feb 2021 22:03:27 +0100

Available diffs

diff from 4.5.2-1 to 4.5.2-2 (1.8 KiB)

4.5.2-1

Superseded in hirsute-release on 2021-02-11

Deleted in hirsute-proposed on 2021-02-12 (Reason: moved to Release)

coturn (4.5.2-1) unstable; urgency=high

  * [49df393] New upstream release (4.5.2)
    - fix null pointer dereference in case of out of memory.(by Thomas Moeller)
    - merge PR #517 (by wolmi)
      add prometheus metrics
    - merge PR #637 (by David Florness)
      Delete trailing whitespace in example configuration files
    - merge PR #631 (by Debabrata Deka)
      Add architecture ppc64le to travis build
    - merge PR #627 (by Samuel)
      Fix misleading option in doc (prometheus)
    - merge PR #643 (by tupelo-schneck)
      Allow RFC6062 TCP relay data to look like TLS
    - merge PR #655 (by plinss)
      Add support for proxy protocol V1
    - merge PR #618 (by Paul Wayper)
      Print full date and time in logs
      Add new options:
      "new-log-timestamp" and "new-log-timestamp-format"
    - merge PR #599 (by Cédric Krier)
      Do not use FIPS and remove hardcode OPENSSL_VERSION_NUMBER with LibreSSL
    - update Docker mongoDB and fix with workaround the missing systemctl
    - merge PR #660 (by Camden Narzt)
      fix compilation on macOS Big Sur
    - merge PR #546 #551 #672 (by jelmd)
      Add support of --acme-redirect <URL>
      fix acme security, redundancy, consistency
    - Disable binding request logging to avoid DoS attacks.(Breaking change!)
      Add new --log-binding option to enable binding request logging
    - Fix stale-nonce documentation. Resolves #604
    - Version numbering is changed to semver 2.0
    - Merge PR #288 (by Hristo Venev)
      pkg-config, and various cleanups in configure file
    - Add systemd notification for better systemd integration
    - Fix Issue #621 (by ycaibb)
      Null pointer dereference on tcp_client_input_handler_rfc6062data function
    - Fix Issue #600 (by ycaibb)
      use-after-free vulnerability on write_to_peerchannel function
    - Fix Issue #601 (by ycaibb)
      use-after-free vulnerability on write_client_connection function
    - Little refactoring prometheus
      Fix c++ support
      Simplify (as agreed in Issue #666)
      Remove session id/allocation labels
      Remove per session metrics. We should later add more counters.
    - Fix CVE-2020-26262 (credits: Enable-Security)
      Fix ipv6 ::1 loopback check
      Not allow allocate peer address 0.0.0.0/8 and ::/128
      For more details see the github security advisory:
      https://github.com/coturn/coturn/security/advisories/GHSA-6g6j-r9rf-cm7p
  * [f0c1753] Change coturn service type to systemd notify (Closes: #934513)
  * [f9b9547] Add libsystemd-dev to build dependency
  * [5a811b1] Update watch version to 4
  * [c0a645e] Update Debian Standards to 4.5.1
  * [e429100] Patch not-needed to forwarded to upstream
  * [bc56267] Add pkg-config to build dependency
  * [bd98206] Postrm remove dir /var/lib/turn
  * [8c58afe] Change sqlite db permissions.
    Change owner to turnserver:turnserver and mode 660 (Closes: #930097)
  * [b9a4a8b] Change config file permissions.
    Change owner to root:turnserver and mode 640 (Closes: #954379)
  * [3e85092] init.d script drop root privileges (Closes: 904415)
  * [24eb87a] Add info about binding privileged ports (Closes: #964009)
  * [136a8a2] Disable pid file creation

 -- Mészáros Mihály <email address hidden>  Mon, 11 Jan 2021 20:05:38 +0100

Available diffs

diff from 4.5.1.3-1ubuntu1 (in Ubuntu) to 4.5.2-1 (42.2 KiB)

4.5.1.3-1ubuntu1

Superseded in hirsute-release on 2021-01-16

Deleted in hirsute-proposed on 2021-01-17 (Reason: moved to Release)

coturn (4.5.1.3-1ubuntu1) hirsute; urgency=medium

  * SECURITY UPDATE: Unsafe loopback interface
    - debian/patches/CVE-2020-26262.patch: Add check if address is in
      0.0.0.0/8 or ::/128.
    - CVE-2020-26262

 -- Mészáros Mihály <email address hidden>  Mon, 14 Dec 2020 14:50:15 +0100

Available diffs

diff from 4.5.1.3-1 (in Debian) to 4.5.1.3-1ubuntu1 (1.6 KiB)

4.5.1.3-1ubuntu0.1

Obsolete in groovy-updates on 2021-12-22

Obsolete in groovy-security on 2021-12-22

coturn (4.5.1.3-1ubuntu0.1) groovy-security; urgency=medium

  * SECURITY UPDATE: Unsafe loopback interface
    - debian/patches/CVE-2020-26262.patch: Add check if address is in
      0.0.0.0/8 or ::/128.
    - CVE-2020-26262

 -- Mészáros Mihály <email address hidden>  Mon, 14 Dec 2020 14:50:15 +0100

Available diffs

diff from 4.5.1.3-1 (in Debian) to 4.5.1.3-1ubuntu0.1 (1.6 KiB)

4.5.1.1-1.1ubuntu0.20.04.2

Published in focal-updates on 2021-01-11

Published in focal-security on 2021-01-11

coturn (4.5.1.1-1.1ubuntu0.20.04.2) focal-security; urgency=medium

  * SECURITY UPDATE: Unsafe loopback interface
    - debian/patches/CVE-2020-26262.patch: Add check if address is in
      0.0.0.0/8 or ::/128.
    - CVE-2020-26262

 -- Mészáros Mihály <email address hidden>  Mon, 14 Dec 2020 14:50:15 +0100

Available diffs

4.5.0.7-1ubuntu2.18.04.3

Published in bionic-updates on 2021-01-11

Published in bionic-security on 2021-01-11

coturn (4.5.0.7-1ubuntu2.18.04.3) bionic-security; urgency=medium

  * SECURITY UPDATE: Unsafe loopback interface
    - debian/patches/CVE-2020-26262.patch: Add check if address is in
      0.0.0.0/8 or ::/128.
    - CVE-2020-26262

 -- Mészáros Mihály <email address hidden>  Mon, 14 Dec 2020 14:50:15 +0100

Available diffs

4.5.0.3-1ubuntu0.4

Published in xenial-updates on 2021-01-11

Published in xenial-security on 2021-01-11

coturn (4.5.0.3-1ubuntu0.4) xenial-security; urgency=medium

  * SECURITY UPDATE: Unsafe loopback interface
    - debian/patches/CVE-2020-26262.patch: Add check if address is in
      0.0.0.0/8 or ::/128.
    - CVE-2020-26262

 -- Mészáros Mihály <email address hidden>  Mon, 14 Dec 2020 14:50:15 +0100

Available diffs

4.5.1.1-1.1ubuntu0.20.04.1

Superseded in focal-updates on 2021-01-11

Superseded in focal-security on 2021-01-11

coturn (4.5.1.1-1.1ubuntu0.20.04.1) focal-security; urgency=medium

  * SECURITY UPDATE: Heap-buffer overflow in HTTP POST request
    - debian/patches/CVE-2020-6061.patch: Fix overflow
    - CVE-2020-6061
  * SECURITY UPDATE: DoS when parsing certain HTTP POST request
    - debian/patches/CVE-2020-6062.patch: Fix parsing of POST requests
    - CVE-2020-6062
  * SECURITY UPDATE: Information leak between different client connections
    - debian/patches/CVE-2020-4067.patch: initialize with zero any new or
      reused stun buffers
    - CVE-2020-4067

 -- Eduardo Barretto <email address hidden>  Thu, 02 Jul 2020 10:34:50 -0300

Available diffs

diff from 4.5.1.1-1.1build2 (in Ubuntu) to 4.5.1.1-1.1ubuntu0.20.04.1 (2.5 KiB)

4.5.1.1-1.1ubuntu0.19.10.1

Obsolete in eoan-updates on 2020-12-29

Obsolete in eoan-security on 2020-12-29

coturn (4.5.1.1-1.1ubuntu0.19.10.1) eoan-security; urgency=medium

  * SECURITY UPDATE: Heap-buffer overflow in HTTP POST request
    - debian/patches/CVE-2020-6061.patch: Fix overflow
    - CVE-2020-6061
  * SECURITY UPDATE: DoS when parsing certain HTTP POST request
    - debian/patches/CVE-2020-6062.patch: Fix parsing of POST requests
    - CVE-2020-6062
  * SECURITY UPDATE: Information leak between different client connections
    - debian/patches/CVE-2020-4067.patch: initialize with zero any new or
      reused stun buffers
    - CVE-2020-4067

 -- Eduardo Barretto <email address hidden>  Thu, 02 Jul 2020 11:25:48 -0300

Available diffs

diff from 4.5.1.1-1.1build1 (in Ubuntu) to 4.5.1.1-1.1ubuntu0.19.10.1 (2.5 KiB)

4.5.0.7-1ubuntu2.18.04.2

Superseded in bionic-updates on 2021-01-11

Superseded in bionic-security on 2021-01-11

coturn (4.5.0.7-1ubuntu2.18.04.2) bionic-security; urgency=medium

  * SECURITY UPDATE: Heap-buffer overflow in HTTP POST request
    - debian/patches/CVE-2020-6061.patch: Fix overflow
    - CVE-2020-6061
  * SECURITY UPDATE: DoS when parsing certain HTTP POST request
    - debian/patches/CVE-2020-6062.patch: Fix parsing of POST requests
    - CVE-2020-6062
  * SECURITY UPDATE: Information leak between different client connections
    - debian/patches/CVE-2020-4067.patch: initialize with zero any new or
      reused stun buffers
    - CVE-2020-4067

 -- Eduardo Barretto <email address hidden>  Thu, 02 Jul 2020 12:49:53 -0300

Available diffs

diff from 4.5.0.7-1ubuntu2.18.04.1 to 4.5.0.7-1ubuntu2.18.04.2 (2.3 KiB)

4.5.0.3-1ubuntu0.3

Superseded in xenial-updates on 2021-01-11

Superseded in xenial-security on 2021-01-11

coturn (4.5.0.3-1ubuntu0.3) xenial-security; urgency=medium

  * SECURITY UPDATE: Heap-buffer overflow in HTTP POST request
    - debian/patches/CVE-2020-6061.patch: Fix overflow
    - CVE-2020-6061
  * SECURITY UPDATE: DoS when parsing certain HTTP POST request
    - debian/patches/CVE-2020-6062.patch: Fix parsing of POST requests
    - CVE-2020-6062
  * SECURITY UPDATE: Information leak between different client connections
    - debian/patches/CVE-2020-4067.patch: initialize with zero any new or
      reused stun buffers
    - CVE-2020-4067

 -- Eduardo Barretto <email address hidden>  Thu, 02 Jul 2020 12:51:17 -0300

Available diffs

diff from 4.5.0.3-1ubuntu0.2 to 4.5.0.3-1ubuntu0.3 (2.4 KiB)

4.5.1.3-1

Superseded in hirsute-release on 2021-01-11

Obsolete in groovy-release on 2021-12-22

Deleted in groovy-proposed on 2022-07-23 (Reason: moved to Release)

coturn (4.5.1.3-1) unstable; urgency=medium

  * [ec640a2] New upstream release (4.5.1.3)
    - Fixes CVE-2020-6061
      heap overflow vulnerability
      Crafted HTTP POST request can lead to information leaks
      and other misbehavior
    - Fixes CVE-2020-6062
      denial-of-service vulnerability
      Crafted HTTP POST request can lead to server crash and denial of service
    - Fixes CVE-2020-4067
      STUN response buffer not initialized
      One client (an attacker) could use their connection to intelligently
      query coturn server to get interesting bytes in the padding bytes from
      the connection of another client
    - Tidy, and remove compatibility layers
      * Remove turn_free_simple
      * Remove turn_malloc()
      * Remote turn_realloc()
      * Remote turn_free()
      * Remove turn_calloc()
      * Remove turn_strdup()
      * Remove SSL_NEW() and SSL_FREE()
      * Remove pointer debugging machinery
      * Remove ns_bzero(), ns_bcopy(), and ns_bcmp()
      * Remove [su]{08,16,32,64}bits type defines
    - Fix the webadmin ip permission add/delete sql injection
    - Fix mongo driver crash when invalid connection string is used
    - Change Diffie Hellman default key length from 1066 to 2066
    - New test Certificate and test CA
    - Fixes in packaging (rpm, docker)
  * [1af9910] Remove patch for CVE 2020 6061+6062
  * [82079ae] Update debehelper to debhelper-compat  and ver 13
  * [60997b6] Add Pre-Depends
  * [2830ed6] Add Rules-Requires-Root
  * [f648d45] Update metadata
  * [aca2929] Change Debian VoIP Team mailinglist
  * [f2f1398] exclude CA from examples and docs
  * [83c24b5] Add symlink turnutils_uclient > usr/bin/turnutils
  * [1f2cd31] migrate bin from turnserver to coturn, symlink

 -- Mészáros Mihály <email address hidden>  Sat, 27 Jun 2020 17:24:51 +0200

Available diffs

diff from 4.5.1.1-1.2 to 4.5.1.3-1 (189.0 KiB)

4.5.1.1-1.2

Superseded in groovy-release on 2020-06-30

Deleted in groovy-proposed on 2020-07-01 (Reason: moved to Release)

coturn (4.5.1.1-1.2) unstable; urgency=medium

  * Non-maintainer upload.
  * Update Uploaders. (Closes: #953466)
  * Fix "CVE-2020-6061 CVE-2020-6062" by applying upstream patch.
    (Closes: #951876)

 -- Tobias Frost <email address hidden>  Mon, 13 Apr 2020 18:49:12 +0200

Available diffs

diff from 4.5.1.1-1.1build2 (in Ubuntu) to 4.5.1.1-1.2 (1.8 KiB)

4.5.1.1-1.1build2

Superseded in groovy-release on 2020-04-29

Published in focal-release on 2019-10-24

Deleted in focal-proposed (Reason: moved to Release)

coturn (4.5.1.1-1.1build2) focal; urgency=medium

  * No-change rebuild for libevent soname changes.

 -- Matthias Klose <email address hidden>  Sat, 19 Oct 2019 19:55:17 +0000

Available diffs

diff from 4.5.1.1-1.1build1 to 4.5.1.1-1.1build2 (320 bytes)

4.5.1.1-1.1build1

Superseded in focal-release on 2019-10-24

Obsolete in eoan-release on 2020-12-29

Deleted in eoan-proposed on 2020-12-29 (Reason: moved to release)

coturn (4.5.1.1-1.1build1) eoan; urgency=medium

  * No change rebuild for libmysqlclient21.

 -- Robie Basak <email address hidden>  Mon, 12 Aug 2019 01:59:37 +0000

Available diffs

diff from 4.5.1.1-1.1 (in Debian) to 4.5.1.1-1.1build1 (313 bytes)

4.5.1.1-1.1

Superseded in eoan-release on 2019-08-22

Deleted in eoan-proposed on 2019-08-24 (Reason: moved to release)

coturn (4.5.1.1-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Don't ship the (empty) /var/lib/turn/turndb SQLite database and generate it
    on-demand in the postinst instead, avoiding overwriting it on
    upgrade/reinstall. (Closes: #929269)

 -- Chris Lamb <email address hidden>  Sun, 26 May 2019 15:11:04 +0100

Available diffs

diff from 4.5.1.1-1 to 4.5.1.1-1.1 (990 bytes)

4.5.1.1-1

Superseded in eoan-release on 2019-06-01

Deleted in eoan-proposed on 2019-06-02 (Reason: moved to release)

coturn (4.5.1.1-1) unstable; urgency=medium

  * [a13ba45] Fix: missing /etc/turnserver.conf
  * [8a03c32] Revert "Temporary prevent from failing"
    This reverts commit 218987f4256a8894e06d7876c434b1f37fd0785f.
  * [96ca6cb] New upstream release (4.5.1.1) (Closes: #916919)
  * [f399223] Set log to syslog
  * [7b135b2] Upgrde to debian-policy 4.3

 -- Mészáros Mihály <email address hidden>  Sun, 03 Mar 2019 00:38:30 +0100

Available diffs

diff from 4.5.1.0-1build1 (in Ubuntu) to 4.5.1.1-1 (17.1 KiB)

4.5.0.3-1ubuntu0.2

Superseded in xenial-updates on 2020-07-06

Superseded in xenial-security on 2020-07-06

coturn (4.5.0.3-1ubuntu0.2) xenial-security; urgency=medium

  * Disable autotests on armhf for now as tests segfault (when tried
    multiple times).

 -- Eduardo Barretto <email address hidden>  Thu, 14 Feb 2019 15:36:33 -0200

Available diffs

diff from 4.5.0.3-1ubuntu0.1 to 4.5.0.3-1ubuntu0.2 (725 bytes)

4.5.0.7-1ubuntu2.18.10.1

Obsolete in cosmic-updates on 2020-07-13

Obsolete in cosmic-security on 2020-07-13

coturn (4.5.0.7-1ubuntu2.18.10.1) cosmic-security; urgency=medium

  * [1328ae1] HotFix: for 3 Vulnerability.
    For more details see:
    - CVE-2018-4056 - coTURN Administrator Web Portal SQL injection vulnerability
    - CVE-2018-4058 - coTURN TURN server unsafe loopback forwarding default configuration vulnerability
    - CVE-2018-4059 - coTURN server unsafe telnet admin portal default configuration vulnerability
    These patches address hotfix the 3 CVE above.
    * Disable-Web-admin-interface-due-Security-Vulnerability.patch
    It disables hardcocded web admin interface until 4.5.1.0 where it will be fixed correctly.
    * Disable-loopback-peers-due-Vulnerability.patch
    Disable by default loopback-peer functionality.
    * empty-cli-password-not-allowed-disable-telnet-cli.patch
    Disable telnet cli if the cli-password is empty.

 -- Mészáros Mihály <email address hidden>  Wed, 06 Feb 2019 14:56:38 +0100

Available diffs

diff from 4.5.0.7-1ubuntu2 (in Ubuntu) to 4.5.0.7-1ubuntu2.18.10.1 (1.9 KiB)

4.5.0.7-1ubuntu2.18.04.1

Superseded in bionic-updates on 2020-07-06

Superseded in bionic-security on 2020-07-06

coturn (4.5.0.7-1ubuntu2.18.04.1) bionic-security; urgency=medium

  * [1328ae1] HotFix: for 3 Vulnerability.
    For more details see:
    - CVE-2018-4056 - coTURN Administrator Web Portal SQL injection vulnerability
    - CVE-2018-4058 - coTURN TURN server unsafe loopback forwarding default configuration vulnerability
    - CVE-2018-4059 - coTURN server unsafe telnet admin portal default configuration vulnerability
    These patches address hotfix the 3 CVE above.
    * Disable-Web-admin-interface-due-Security-Vulnerability.patch
    It disables hardcocded web admin interface until 4.5.1.0 where it will be fixed correctly.
    * Disable-loopback-peers-due-Vulnerability.patch
    Disable by default loopback-peer functionality.
    * empty-cli-password-not-allowed-disable-telnet-cli.patch
    Disable telnet cli if the cli-password is empty.

 -- Mészáros Mihály <email address hidden>  Wed, 06 Feb 2019 14:56:38 +0100

Available diffs

diff from 4.5.0.7-1ubuntu2 (in Ubuntu) to 4.5.0.7-1ubuntu2.18.04.1 (1.9 KiB)

4.5.1.0-1build1

Superseded in eoan-release on 2019-04-21

Obsolete in disco-release on 2020-07-14

Deleted in disco-proposed on 2020-07-14 (Reason: moved to release)

coturn (4.5.1.0-1build1) disco; urgency=medium

  * No-change rebuild against mysql 5.7, reverting the deferred mysql-
    8.0 transition

 -- Steve Langasek <email address hidden>  Tue, 05 Feb 2019 10:47:59 -0800

Available diffs

diff from 4.5.0.7-1ubuntu3 to 4.5.1.0-1build1 (35.5 KiB)
diff from 4.5.1.0-1 (in Debian) to 4.5.1.0-1build1 (344 bytes)

4.5.1.0-1

Superseded in disco-proposed on 2019-02-05

coturn (4.5.1.0-1) unstable; urgency=medium

  * Sync to upstream 4.5.1.0
    - Fix CVE-2018-4058: coTURN unsafe loopback forwarding
      default configuration vulnerability
      - by default loopback disabled
      - no-loopback option removed!
      - allow-loopback-peers option added
    - Fix CVE-2018-4056: coTURN Administrator Web Portal
      SQL injection vulnerability
      - Web admin disabled by default
      - Web admin could listen on separated IP and port
      - web-admin-ip option added
      - web-admin-port option added
      - Web admin is disabled on STUN/TURN ports.
      - web-admin-listen-on-workers option added
        to enable web-admin STUN/TURN ports
    - Fix CVE-2018-4059: coTURN server unsafe telnet admin
      portal default configuration vulnerability
      - An empty cli-password with an allow-loopback-peers option is prohibited.
    - fix memory leak in read_config_file

 -- Mészáros Mihály <email address hidden>  Mon, 28 Jan 2019 13:16:57 +0100

Available diffs

diff from 4.5.0.7-1ubuntu3 (in Ubuntu) to 4.5.1.0-1 (35.5 KiB)

4.5.0.7-1ubuntu3

Superseded in disco-release on 2019-02-05

Deleted in disco-proposed on 2019-02-07 (Reason: moved to release)

coturn (4.5.0.7-1ubuntu3) disco; urgency=medium

  * No-change rebuild against libhiredis0.14

 -- Steve Langasek <email address hidden>  Mon, 12 Nov 2018 08:46:15 +0000

Available diffs

diff from 4.5.0.7-1ubuntu2 to 4.5.0.7-1ubuntu3 (322 bytes)

4.5.0.7-1ubuntu2

Superseded in disco-release on 2018-11-15

Obsolete in cosmic-release on 2020-07-13

Published in bionic-release on 2018-02-08

Deleted in bionic-proposed (Reason: moved to release)

coturn (4.5.0.7-1ubuntu2) bionic; urgency=high

  * No change rebuild against openssl1.1.

 -- Dimitri John Ledkov <email address hidden>  Tue, 06 Feb 2018 12:41:30 +0000

Available diffs

diff from 4.5.0.7-1ubuntu1 to 4.5.0.7-1ubuntu2 (337 bytes)

4.5.0.7-1ubuntu1

Superseded in bionic-release on 2018-02-08

Deleted in bionic-proposed on 2018-02-10 (Reason: moved to release)

coturn (4.5.0.7-1ubuntu1) bionic; urgency=medium

  * Merge from Debian unstable.  Remaining changes:
    - Dont run the testsuite on armhf for now as random segfaults occur on a
      clean chroot.

Available diffs

diff from 4.5.0.6-1ubuntu2 to 4.5.0.7-1ubuntu1 (15.7 KiB)

4.5.0.6-1ubuntu2

Superseded in bionic-release on 2017-12-12

Obsolete in artful-release on 2020-07-10

Deleted in artful-proposed on 2020-07-10 (Reason: moved to release)

coturn (4.5.0.6-1ubuntu2) artful; urgency=medium

  * No-change rebuild against libevent-core-2.1-6

 -- Steve Langasek <email address hidden>  Mon, 31 Jul 2017 01:27:29 +0000

Available diffs

diff from 4.5.0.6-1ubuntu1 to 4.5.0.6-1ubuntu2 (336 bytes)

4.5.0.6-1ubuntu1

Superseded in artful-release on 2017-08-10

Deleted in artful-proposed on 2017-08-11 (Reason: moved to release)

coturn (4.5.0.6-1ubuntu1) artful; urgency=medium

  * Merge from Debian unstable.  Remaining changes:
    - Dont run the testsuite on armhf for now as its unstable.

Available diffs

diff from 4.5.0.5-1ubuntu1 to 4.5.0.6-1ubuntu1 (6.9 KiB)

4.5.0.5-1ubuntu1

Superseded in artful-release on 2017-06-06

Obsolete in zesty-release on 2018-06-22

Deleted in zesty-proposed on 2018-06-22 (Reason: moved to release)

coturn (4.5.0.5-1ubuntu1) zesty; urgency=medium

  * Disable autotests on armhf for now as tests segfault (when tried
    multiple times).

 -- Bhavani Shankar <email address hidden>  Tue, 21 Mar 2017 12:07:36 +0530

Available diffs

diff from 4.5.0.3-1build1 to 4.5.0.5-1ubuntu1 (32.6 KiB)
diff from 4.5.0.5-1 (in Debian) to 4.5.0.5-1ubuntu1 (944 bytes)

4.5.0.5-1

Superseded in zesty-proposed on 2017-03-21

coturn (4.5.0.5-1) unstable; urgency=medium

  * Sync to upstream 4.5.0.5

 -- Oleg Moskalenko <email address hidden>  Sun, 16 Oct 2016 23:38:04 -0700

4.5.0.3-1build1

Superseded in zesty-release on 2017-03-21

Obsolete in yakkety-release on 2018-01-23

Published in xenial-release on 2016-04-18

Deleted in xenial-proposed (Reason: moved to release)

coturn (4.5.0.3-1build1) xenial; urgency=medium

  * Rebuild against libmysqlclient20.

 -- Robie Basak <email address hidden>  Thu, 31 Mar 2016 12:57:00 +0000

Available diffs

diff from 4.5.0.3-1 (in Debian) to 4.5.0.3-1build1 (331 bytes)

4.5.0.3-1

Superseded in xenial-release on 2016-04-18

Deleted in xenial-proposed on 2016-04-19 (Reason: moved to release)

coturn (4.5.0.3-1) unstable; urgency=medium

  * SSLv3 support removed, closes: #804440

 -- Oleg Moskalenko <email address hidden>  Sun, 15 Nov 2015 23:38:46 -0800

Available diffs

diff from 4.5.0.2-3 to 4.5.0.3-1 (5.2 KiB)

4.5.0.2-3

Superseded in xenial-release on 2015-11-16

Deleted in xenial-proposed on 2015-11-17 (Reason: moved to release)

coturn (4.5.0.2-3) unstable; urgency=medium

  * Telnet package dependency fixed

 -- Oleg Moskalenko <email address hidden>  Fri, 02 Oct 2015 23:47:29 -0700

Available diffs

diff from 4.4.5.4-2 to 4.5.0.2-3 (14.7 KiB)

4.4.5.4-2

Superseded in xenial-release on 2015-10-24

Obsolete in wily-release on 2018-01-22

Deleted in wily-proposed on 2018-01-22 (Reason: moved to release)

coturn (4.4.5.4-2) unstable; urgency=low

  * Github migration

 -- Oleg Moskalenko <email address hidden>  Sun, 19 Jul 2015 14:10:51 -0700

Available diffs

diff from 4.4.5.2-1 to 4.4.5.4-2 (10.5 KiB)
diff from 4.4.5.3-1 to 4.4.5.4-2 (6.1 KiB)

4.4.5.3-1

Superseded in wily-proposed on 2015-07-20

coturn (4.4.5.3-1) unstable; urgency=low

  * sync to 4.4.5.3: security fix

 -- Oleg Moskalenko <email address hidden>  Sun, 28 Jun 2015 20:35:15 -0700

Available diffs

diff from 4.4.5.2-1 to 4.4.5.3-1 (5.8 KiB)

4.4.5.2-1

Superseded in wily-release on 2015-08-06

Deleted in wily-proposed on 2015-08-07 (Reason: moved to release)

coturn (4.4.5.2-1) unstable; urgency=low

  * Sync to upstream 4.4.5.2

 -- Oleg Moskalenko <email address hidden>  Sat, 06 Jun 2015 01:07:27 -0700

Available diffs

diff from 4.4.5.1-1 to 4.4.5.2-1 (3.1 KiB)

4.4.5.1-1

Superseded in wily-release on 2015-06-07

Deleted in wily-proposed on 2015-06-08 (Reason: moved to release)

coturn (4.4.5.1-1) unstable; urgency=low

  * Sync to 4.4.5.1 upstream

 -- Oleg Moskalenko <email address hidden>  Wed, 27 May 2015 00:17:29 -0700

Available diffs

diff from 4.4.4.2-1 to 4.4.5.1-1 (30.2 KiB)

4.4.4.2-1

Superseded in wily-release on 2015-05-27

Deleted in wily-proposed on 2015-05-28 (Reason: moved to release)

coturn (4.4.4.2-1) unstable; urgency=low


  * SCTP fixes.

 -- Oleg Moskalenko <email address hidden>  Sun, 05 Apr 2015 21:24:55 -0700

Available diffs

diff from 4.4.2.1-1 to 4.4.4.2-1 (24.3 KiB)

4.4.2.1-1

Superseded in wily-release on 2015-05-08

Obsolete in vivid-release on 2018-01-18

Deleted in vivid-proposed on 2018-01-19 (Reason: moved to release)

coturn (4.4.2.1-1) unstable; urgency=low


  * Sync to the new upstream version: updated according to the new draft
    specs; bug fixes.

 -- Oleg Moskalenko <email address hidden>  Sun, 08 Feb 2015 13:04:20 -0800

Available diffs

diff from 4.4.1.2-1 to 4.4.2.1-1 (13.3 KiB)

4.4.1.2-1

Superseded in vivid-release on 2015-02-09

Deleted in vivid-proposed on 2015-02-10 (Reason: moved to release)

coturn (4.4.1.2-1) unstable; urgency=low


  * Sync to 4.4.1.2 upstream

 -- Oleg Moskalenko <email address hidden>  Sun, 01 Feb 2015 20:43:30 -0800

Available diffs

diff from 4.4.1.1-2 to 4.4.1.2-1 (7.5 KiB)

4.4.1.1-2

Superseded in vivid-release on 2015-02-02

Deleted in vivid-proposed on 2015-02-03 (Reason: moved to release)

coturn (4.4.1.1-2) unstable; urgency=low


  * source control info fixed

 -- Oleg Moskalenko <email address hidden>  Fri, 30 Jan 2015 22:34:46 -0800

Available diffs

diff from 4.4.1.1-1 to 4.4.1.1-2 (517 bytes)

4.4.1.1-1

Superseded in vivid-release on 2015-02-02

Deleted in vivid-proposed on 2015-02-03 (Reason: moved to release)

coturn (4.4.1.1-1) unstable; urgency=low


  * Sync to 4.4.1.1: security fixes; https web admin connection.

 -- Oleg Moskalenko <email address hidden>  Sun, 25 Jan 2015 01:50:44 -0800

Available diffs

diff from 4.3.3.1-1 to 4.4.1.1-1 (80.1 KiB)

4.3.3.1-1

Superseded in vivid-release on 2015-01-25

Deleted in vivid-proposed on 2015-01-26 (Reason: moved to release)

coturn (4.3.3.1-1) unstable; urgency=low


  * Sync to 4.3.3.1

 -- Oleg Moskalenko <email address hidden>  Wed, 24 Dec 2014 00:50:38 -0800

Available diffs

diff from 4.3.2.2-1 to 4.3.3.1-1 (9.0 KiB)

4.3.2.2-1

Superseded in vivid-release on 2014-12-24

Deleted in vivid-proposed on 2014-12-25 (Reason: moved to release)

coturn (4.3.2.2-1) unstable; urgency=low


  * Sync to 4.3.2.2

 -- Oleg Moskalenko <email address hidden>  Sun, 14 Dec 2014 22:06:24 -0800

Available diffs

diff from 4.3.1.3-1 to 4.3.2.2-1 (14.0 KiB)

4.3.1.3-1

Superseded in vivid-release on 2014-12-15

Deleted in vivid-proposed on 2014-12-16 (Reason: moved to release)

coturn (4.3.1.3-1) unstable; urgency=low


  * Sync to 4.3.1.3: a maintenance build.

 -- Oleg Moskalenko <email address hidden>  Sun, 07 Dec 2014 22:50:45 -0800

Available diffs

diff from 4.3.1.2-1 to 4.3.1.3-1 (7.7 KiB)

4.3.1.2-1

Superseded in vivid-release on 2014-12-08

Deleted in vivid-proposed on 2014-12-09 (Reason: moved to release)

coturn (4.3.1.2-1) unstable; urgency=low


  * Sync to 4.3.1.2: SQLite DB installation fixed.

 -- Oleg Moskalenko <email address hidden>  Sun, 23 Nov 2014 13:38:11 -0800

Available diffs

diff from 4.3.1.1-1 to 4.3.1.2-1 (3.9 KiB)

4.3.1.1-1

Superseded in vivid-release on 2014-11-24

Deleted in vivid-proposed on 2014-11-25 (Reason: moved to release)

coturn (4.3.1.1-1) unstable; urgency=low


  * Sync to 4.3.1.1: SQLite support added.

 -- Oleg Moskalenko <email address hidden>  Sun, 23 Nov 2014 00:15:03 -0800

Available diffs

diff from 4.2.3.1-1 to 4.3.1.1-1 (32.5 KiB)

4.2.3.1-1

Superseded in vivid-release on 2014-11-23

Deleted in vivid-proposed on 2014-11-24 (Reason: moved to release)

coturn (4.2.3.1-1) unstable; urgency=low


  * Sync to 4.2.3.1

 -- Oleg Moskalenko <email address hidden>  Sun, 09 Nov 2014 22:56:18 -0800

Available diffs

diff from 4.2.2.2-1 to 4.2.3.1-1 (8.3 KiB)

4.2.2.2-1

Superseded in vivid-release on 2014-11-10

Deleted in vivid-proposed on 2014-11-11 (Reason: moved to release)

coturn (4.2.2.2-1) unstable; urgency=low


  * 1) Sync to 4.2.2.2; 2) UFW definitions added to the debian package.

 -- Oleg Moskalenko <email address hidden>  Wed, 29 Oct 2014 23:49:49 -0700

Available diffs

diff from 4.2.1.2-1 to 4.2.2.2-1 (20.5 KiB)

4.2.1.2-1

Superseded in vivid-release on 2014-10-30

Deleted in vivid-proposed on 2014-10-31 (Reason: moved to release)

coturn (4.2.1.2-1) unstable; urgency=low


  * Sync to upstream 4.2.1.2 version: the oAuth support added.

 -- Oleg Moskalenko <email address hidden>  Mon, 13 Oct 2014 00:52:06 -0700

Available diffs

diff from 4.1.1.1-1 to 4.2.1.2-1 (57.4 KiB)

4.1.1.1-1

Superseded in vivid-release on 2014-10-26

Obsolete in utopic-release on 2016-11-03

Deleted in utopic-proposed on 2016-11-03 (Reason: moved to release)

coturn (4.1.1.1-1) unstable; urgency=low


  * Sync to upstream 4.1.1.1

 -- Oleg Moskalenko <email address hidden>  Thu, 31 Jul 2014 00:55:33 -0700

Available diffs

diff from 4.1.0.2-1 to 4.1.1.1-1 (4.1 KiB)

4.1.0.2-1

Superseded in utopic-release on 2014-07-31

Deleted in utopic-proposed on 2014-08-02 (Reason: moved to release)

coturn (4.1.0.2-1) unstable; urgency=low


  * Sync to upstream 4.1.0.2

 -- Oleg Moskalenko <email address hidden>  Tue, 22 Jul 2014 13:23:09 -0700

Available diffs

diff from 4.0.0.0-1 to 4.1.0.2-1 (71.9 KiB)

4.0.0.0-1

Superseded in utopic-release on 2014-07-23

Deleted in utopic-proposed on 2014-07-24 (Reason: moved to release)

coturn (4.0.0.0-1) unstable; urgency=low


  * Initial Debian release (Closes: #747010)

 -- Daniel Pocock <email address hidden>  Wed, 07 May 2014 21:33:36 +0200

Ubuntucoturn package

Change log for coturn package in Ubuntu

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Ubuntu
coturn package