coturn (4.5.0.5-1+deb9u2) stretch-security; urgency=high * Non-maintainer upload by the Security Team. * specially crafted HTTP POST request can lead to heap overflow which can result in information leak (CVE-2020-6061) (Closes: #951876) * specially crafted HTTP POST request can lead to server crash and denial of service (CVE-2020-6062) (Closes: #951876) * init with zero any new or reused stun buffers (CVE-2020-4067) -- Salvatore Bonaccorso Fri, 26 Jun 2020 13:49:31 +0200 coturn (4.5.0.5-1+deb9u1) stretch-security; urgency=high * HotFix: for 3 vulnerabilities For more details see: - CVE-2018-4056 coTURN Administrator Web Portal SQL injection vulnerability Fix: Disable (hardcocded) web admin interface until 4.5.1.0, where it will be fixed more correctly. - CVE-2018-4058 coTURN TURN server unsafe loopback forwarding default configuration vulnerability Fix: Disable loopback-peer functionality by default. - CVE-2018-4059 coTURN server unsafe telnet admin portal default configuration vulnerability Fix: Disable telnet cli if the cli-password is empty. -- Mészáros Mihály Mon, 21 Jan 2019 09:31:26 +0100 coturn (4.5.0.5-1) unstable; urgency=medium * Sync to upstream 4.5.0.5 -- Oleg Moskalenko Sun, 16 Oct 2016 23:38:04 -0700 coturn (4.5.0.4-4) unstable; urgency=medium * trying to fix piuparts report -- Oleg Moskalenko Tue, 23 Aug 2016 22:03:18 -0700 coturn (4.5.0.4-3) unstable; urgency=medium * trying to fix piuparts report -- Oleg Moskalenko Mon, 22 Aug 2016 23:56:49 -0700 coturn (4.5.0.4-2) unstable; urgency=medium * Debian Policy upgraded to 3.9.8 -- Oleg Moskalenko Mon, 22 Aug 2016 01:32:39 -0700 coturn (4.5.0.4-1) unstable; urgency=medium * OpenSSL compatibility (closes: #828271) -- Oleg Moskalenko Mon, 22 Aug 2016 00:10:03 -0700 coturn (4.5.0.3-1) unstable; urgency=medium * SSLv3 support removed, closes: #804440 -- Oleg Moskalenko Sun, 15 Nov 2015 23:38:46 -0800 coturn (4.5.0.2-3) unstable; urgency=medium * Telnet package dependency fixed -- Oleg Moskalenko Fri, 02 Oct 2015 23:47:29 -0700 coturn (4.5.0.2-1) unstable; urgency=medium * DTLS segfault fixed -- Oleg Moskalenko Wed, 30 Sep 2015 00:25:00 -0700 coturn (4.5.0.1-5) unstable; urgency=medium * Package for Sid -- Oleg Moskalenko Mon, 28 Sep 2015 00:17:13 -0700 coturn (4.5.0.1-4) unstable; urgency=medium * Copyright fixed -- Oleg Moskalenko Sat, 26 Sep 2015 20:55:13 -0700 coturn (4.5.0.1-3) unstable; urgency=medium * Typo fixed -- Oleg Moskalenko Sat, 26 Sep 2015 18:06:31 -0700 coturn (4.5.0.1-2) unstable; urgency=medium * Specs adjusted -- Oleg Moskalenko Sat, 26 Sep 2015 15:03:38 -0700 coturn (4.5.0.1-1) unstable; urgency=low * Sync to upstream 4.5.0.1 -- Oleg Moskalenko Sun, 20 Sep 2015 21:58:30 -0700 coturn (4.4.5.4-2) unstable; urgency=low * Github migration -- Oleg Moskalenko Sun, 19 Jul 2015 14:10:51 -0700 coturn (4.4.5.4-1) unstable; urgency=low * Migrated to Github -- Oleg Moskalenko Sun, 19 Jul 2015 14:00:45 -0700 coturn (4.4.5.3-1) unstable; urgency=low * sync to 4.4.5.3: security fix -- Oleg Moskalenko Sun, 28 Jun 2015 20:35:15 -0700 coturn (4.4.5.2-1) unstable; urgency=low * Sync to upstream 4.4.5.2 -- Oleg Moskalenko Sat, 06 Jun 2015 01:07:27 -0700 coturn (4.4.5.1-1) unstable; urgency=low * Sync to 4.4.5.1 upstream -- Oleg Moskalenko Wed, 27 May 2015 00:17:29 -0700 coturn (4.4.4.2-1) unstable; urgency=low * SCTP fixes. -- Oleg Moskalenko Sun, 05 Apr 2015 21:24:55 -0700 coturn (4.4.4.1-2) unstable; urgency=low * sctp example script added to install -- Oleg Moskalenko Mon, 23 Mar 2015 23:44:00 -0700 coturn (4.4.4.1-1) unstable; urgency=low * Sync to 4.4.4.1: SCTP support and encrypted admin passwords support. -- Oleg Moskalenko Mon, 23 Mar 2015 23:28:25 -0700 coturn (4.4.2.3-1) unstable; urgency=low * Sync to upstream 4.4.2.3 -- Oleg Moskalenko Thu, 05 Mar 2015 23:33:39 -0800 coturn (4.4.2.2-1) unstable; urgency=low * Sync to upstream 4.4.2.2: SQLite db schema bug fixed -- Oleg Moskalenko Sun, 22 Feb 2015 21:14:19 -0800 coturn (4.4.2.1-1) unstable; urgency=low * Sync to the new upstream version: updated according to the new draft specs; bug fixes. -- Oleg Moskalenko Sun, 08 Feb 2015 13:04:20 -0800 coturn (4.4.1.2-1) unstable; urgency=low * Sync to 4.4.1.2 upstream -- Oleg Moskalenko Sun, 01 Feb 2015 20:43:30 -0800 coturn (4.4.1.1-2) unstable; urgency=low * source control info fixed -- Oleg Moskalenko Fri, 30 Jan 2015 22:34:46 -0800 coturn (4.4.1.1-1) unstable; urgency=low * Sync to 4.4.1.1: security fixes; https web admin connection. -- Oleg Moskalenko Sun, 25 Jan 2015 01:50:44 -0800 coturn (4.3.3.1-1) unstable; urgency=low * Sync to 4.3.3.1 -- Oleg Moskalenko Wed, 24 Dec 2014 00:50:38 -0800 coturn (4.3.2.2-1) unstable; urgency=low * Sync to 4.3.2.2 -- Oleg Moskalenko Sun, 14 Dec 2014 22:06:24 -0800 coturn (4.3.2.1-1) unstable; urgency=low * Sync to upstream 4.3.2.1 -- Oleg Moskalenko Sun, 14 Dec 2014 21:42:37 -0800 coturn (4.3.1.3-1) unstable; urgency=low * Sync to 4.3.1.3: a maintenance build. -- Oleg Moskalenko Sun, 07 Dec 2014 22:50:45 -0800 coturn (4.3.1.2-1) unstable; urgency=low * Sync to 4.3.1.2: SQLite DB installation fixed. -- Oleg Moskalenko Sun, 23 Nov 2014 13:38:11 -0800 coturn (4.3.1.1-1) unstable; urgency=low * Sync to 4.3.1.1: SQLite support added. -- Oleg Moskalenko Sun, 23 Nov 2014 00:15:03 -0800 coturn (4.2.3.1-1) unstable; urgency=low * Sync to 4.2.3.1 -- Oleg Moskalenko Sun, 09 Nov 2014 22:56:18 -0800 coturn (4.2.2.2-1) unstable; urgency=low * 1) Sync to 4.2.2.2; 2) UFW definitions added to the debian package. -- Oleg Moskalenko Wed, 29 Oct 2014 23:49:49 -0700 coturn (4.2.1.2-1) unstable; urgency=low * Sync to upstream 4.2.1.2 version: the oAuth support added. -- Oleg Moskalenko Mon, 13 Oct 2014 00:52:06 -0700 coturn (4.1.2.1-3) unstable; urgency=low * List of supported specs extended. -- Oleg Moskalenko Tue, 02 Sep 2014 22:57:32 -0700 coturn (4.1.2.1-2) unstable; urgency=low * SVN source control tags changed to GIT -- Oleg Moskalenko Tue, 02 Sep 2014 22:23:55 -0700 coturn (4.1.2.1-1) unstable; urgency=low * Sync to upstream 4.1.2.1 -- Oleg Moskalenko Wed, 20 Aug 2014 22:23:56 -0700 coturn (4.1.1.1-1) unstable; urgency=low * Sync to upstream 4.1.1.1 -- Oleg Moskalenko Thu, 31 Jul 2014 00:55:33 -0700 coturn (4.1.0.2-1) unstable; urgency=low * Sync to upstream 4.1.0.2 -- Oleg Moskalenko Tue, 22 Jul 2014 13:23:09 -0700 coturn (4.1.0.1-1) unstable; urgency=low * Sync to upstream 4.1.0.1: SSODA support, bug fixes. -- Oleg Moskalenko Tue, 22 Jul 2014 08:46:21 -0700 coturn (4.0.1.3-1) unstable; urgency=low * Sync to upstream 4.0.1.3 -- Oleg Moskalenko Sat, 21 Jun 2014 00:00:39 -0700 coturn (4.0.1.2-1) unstable; urgency=low * Sync to upstream 4.0.1.2: Bandwidth specs implemented. -- Oleg Moskalenko Sat, 07 Jun 2014 00:07:45 -0700 coturn (4.0.0.2-1) unstable; urgency=low * Sync to upstream 4.0.0.2. * Package description in the control file updated. -- Oleg Moskalenko Fri, 23 May 2014 23:20:39 -0700 coturn (4.0.0.1-1) unstable; urgency=low * New upstream release. * Kernel channels definitions added. -- Oleg Moskalenko Wed, 07 May 2014 23:28:04 -0700 coturn (4.0.0.0-1) unstable; urgency=low * Initial Debian release (Closes: #747010) -- Daniel Pocock Wed, 07 May 2014 21:33:36 +0200