< back to search

shield Security update for coturn
openSUSE-2026-143

This update for coturn fixes the following issues: - Update to version 4.9.0 * Multiple security fixes. * Fix to Web Admin password check. * Cleanup of deprecated openssl APIs. * CVE-2026-27624: bypass localhost and IP range block using IPv4-mapped IPv6. (boo#1258847) - Update to version 4.8.0 * Faster packet validation on listener threads to improve handling of DDoS attacks. * Make socket buffer size configurable with sock-buf-size. * Address memory leaks and potential crashes. * CVE-2025-69217: Improve random number usage to address (boo#1255744) - Update to version 4.7.0 * Breaking changes in order to get to sane defaults for improved security by default + Support for openssl 1.1.1 and 3.x only. + Cleanup deprecated options - if your scripts have them turnserver will fail to start. + Reverse SOFTWARE_ATTRIBUTE_OPT to avoid inverse logic - now need to explicitly enable it. + Deprecate response-origin-only-with-rfc5780. + Invert no-stun-backward-compatibility to be default on. * TLSv1 and TLSv1_1 are now optional (no need to turn them off). * Minor bug fixes and regressions. * Improved support for modern version of prometheus. - Upgrade to coturn 4.6.3 * Release highlights: - Multiple memory fixes - New drain feature - Better support for new versions of Redis - Add support for raw public keys * Complete change list - Add clang-tidy, include-what-you-use, and msvc-analyzer github actions - Add CodeQL workflow - added missing function prototype of turn_random_number() - Added sessionID to some log lines - added support for amazon linux and renamed tests.yml - added warnings for prometheus apt unavailability - Add github action that runs tests with compiler sanitizers - Additional refactoring of ns_turn_allocation.* to address security scanner concerns - Add MariaDB support to README.md - Add new Drain feature - Add prometheus setting suggestions on turn.conf in example folder - Address clang-tidy warnings in db files - Address some build issues introduced by api changes - Add support for raw public keys - Add the InsertBraces command for clang-format to ensure that all conditionals always have braces - Add warning and disable web admin if no-tls option used - Adjust wording in cmake message when prometheous cannot be found. - Allow authenticating with a username to redis - Always run lint, regardless of branch - Avoid nullptr dereference of server variable in various functions - avoid potential nullptr derefernence in udp_create_server_socket - Avoid read-past-end of string in get_bold_admin_title - Avoid writing potentially uninitialized data to aes_128 key file - changed variables in stunclient.c to bool - Change minimal required cmake version to 3.16 - Change printf() to TURN_LOG_FUNC() for --no-stdout-log - Change the various map functions to return bool instead of inconsistantly return 0, 1, or -1 - Check allocation results in add_static_user_account - Check the result of calloc in handle_logon_request - Check the result of malloc in del_alt_server - Check the result of malloc in mongo_set_realm_option_one - Check the result of malloc in send_message_to_redis - Check the result of malloc in string_list_add - Check the result of realloc and calloc in ch_map_get - CMake: Declare the variable nearby - configure: data files shouldn't be executable - defined a magic number for stun fingerprinting - Delete dead code - Delete unused variable - Doc: add flowchart - Easy installation of coturn on AWS - Fix buffer overflow in generate_enc_password with increase rsalt by 2 - Fix build with libressl 3.6+ - Fix clang-format lint warnings - Fix cli auth - Fix Cmake find issue in libevent - Fix cmake find prometheus(fix #1304) - Fix compiler warnings from continuous integration - Fix const during free warning in rfc5769check app - Fix error of make command in Cygwin environment - Fix formatting to fix lint error - Fix lint complaint about comment - Fix lint errors - Fix linting error in mainrelay.c - Fix make lint - Fix memcpy len checks stun_is_challenge_response_str - Fix memleak in pgsql_reread_realms - Fix memory leak in netengine.c - Fix memory leak in rfc5769check.c - Fix memory leak on http_server.c - Fix mingw build - Fix missing strncpy in fix_stun_check_message_integrity_str - Fix msvc analyzer error on goto label on rfc5769check - Fix nodejs/glibc problem with old container images. - Fix no-tls warning typo - Fix potential null passed to function expecting nonnull - Fix recursive call in delete alternate server - Fix return correct error code for `create_relay_connection` in case of `RESERVATION-TOKEN` failure - Fix rpm version scripts - Fix run cmake.yml in any github action - Fix typos - Fix ubuntu 16 build with GH action checkout version to v3 - Implement custom prometheus http handler - Include what you use - Install openssl-1.1.1 on amazonlinux:2 instead of openssl-1.0.1 - malloc now allocates space for string terminator - Memset user_db before reading conf file, not after - Missing session ID in coturn logs for denied IP - 1330 - Move the hiredis_libevent2 code from common to relay - Only set MHD_USE_DUAL_STACK if IPv6 is available - Print version only, no extra lines - Reduce ifdefs in code: TURN_NO_PROMETHEUS - Refactor: peer_input_handle - Reformat code - Remove unimplemented test folder reference from CMakeLists.txt - Replace HeapAlloc with malloc - Replace srand/rand with srandom/random - Return a 400 response to HTTP requests - Run all of the CI except for Docker builds on any change - Simplify macOS detection macros - Simplify workflow for codeql - strncpy doesn't return size_t - ubuntu build dependencies extracted to composite actions - Update FlowChart - Update libtelnet - Update lukka/run - Update SQLite.md - Update turnserver.conf Example about listening-ip - Update turnserver.spec - Update version in vcpkg.json - Use active CPU number instead of total number - Use bool, instead of int, for the functions in ns_turn_msg.c - Use bool over int for the turnutils_uclient program - Use calloc where appropriate, avoid memset when normal buffer initialization works - Windows: Only attempt to bind when the network interface is up - workflow tidying - Don't hard require systemd -- not needed in containers - enable 'verbose' log to see listening IPs and more, not just server start/stop - have a meaningful turnserver.conf.default - create a ready-to-run turnserver.conf - fix logrotate script - Update README.SUSE for Let's Encrypt Certificates - move certs to /etc/coturn/tls - Update apparmor profile - rework sysusers.d config file

cloud_download Downloads

SUSE Package Hub 15.7 aarch64
  • Packages
    coturn
    TURN and STUN server for VoIP
    4.9.0-bp157.2.3.1 lock rpm
    coturn-devel
    Coturn development headers
    4.9.0-bp157.2.3.1 lock rpm
    coturn-utils
    Coturn utils
    4.9.0-bp157.2.3.1 lock rpm
SUSE Package Hub 15.7 s390x
  • Packages
    coturn
    TURN and STUN server for VoIP
    4.9.0-bp157.2.3.1 lock rpm
    coturn-devel
    Coturn development headers
    4.9.0-bp157.2.3.1 lock rpm
    coturn-utils
    Coturn utils
    4.9.0-bp157.2.3.1 lock rpm
SUSE Package Hub 15.7 x86_64
  • Packages
    coturn
    TURN and STUN server for VoIP
    4.9.0-bp157.2.3.1 lock rpm
    coturn-devel
    Coturn development headers
    4.9.0-bp157.2.3.1 lock rpm
    coturn-utils
    Coturn utils
    4.9.0-bp157.2.3.1 lock rpm
SUSE Package Hub 15.7 ppc64le
  • Packages
    coturn
    TURN and STUN server for VoIP
    4.9.0-bp157.2.3.1 lock rpm
    coturn-devel
    Coturn development headers
    4.9.0-bp157.2.3.1 lock rpm
    coturn-utils
    Coturn utils
    4.9.0-bp157.2.3.1 lock rpm