- Update to 4.6.2
* Make sure microhttpd starts using epoll if supported
* Add sessioncount to prometheus metrics
* Add STUN request/response/error prometheus counters
* Cleanup logs on turnserver start
* Fix duplicate stdout log output
* Log threadId to logs to aid in multi-threaded debugging
* Optional build info compiled into turnserver binary
* Fix arguments expansion in docker-entrypoint.sh
* Santise database connection strings before printing to log
* Support Windows MSVC
* Add configuration option for TLS 1.3 ciphersuites
* Improve openssl3 and FIPS support
* Use single SSL_CTX for TLS and DTLS support
* Update openssl API use to non-deprecated version
* Set string bytes to null to prevent random origin
* Fix memory corruption on socket close
* Fix packet backlog fifo that processed packets in reverse
order in some scenarios
* Fix off-by-one when terminating gcm_nonce
* Fixes to Redis memleaks and socketleaks
* Fix malformed response to mobility refresh request
* Fuzzing support
* Ignore raw UDP if no_udp is enabled
* Better detect availability of SCTP protocol
- Drop coturn-no-FIPS-140-mode.patch, fixed upstream, see
https://github.com/coturn/coturn/issues/1170
OBS-URL: https://build.opensuse.org/request/show/1083916
OBS-URL: https://build.opensuse.org/package/show/network:telephony/coturn?expand=0&rev=28
- Version 4.5.2
* Fix for CVE-2020-26262 (boo#1180764)
- Fix ipv6 ::1 loopback check
- Not allow allocate peer address 0.0.0.0/8 and ::/128
- For more details see the github security advisory:
https://github.com/coturn/coturn/security/advisories/GHSA-6g6j-r9rf-cm7p
* fix null pointer dereference in case of out of memory.
* Fix: Null pointer dereference on tcp_client_input_handler_rfc6062data function
* Fix: use-after-free vulnerability on write_to_peerchannel function
* Fix: use-after-free vulnerability on write_client_connection function
* add prometheus metrics
* Delete trailing whitespace in example configuration files
* Add architecture ppc64le to travis build
* Fix misleading option in doc (prometheus)
* Allow RFC6062 TCP relay data to look like TLS
* Add support for proxy protocol V1
* Print full date and time in logs
* Add new options: "new-log-timestamp" and "new-log-timestamp-format"
* Do not use FIPS and remove hardcode OPENSSL_VERSION_NUMBER with LibreSSL
* Add ACME redirect url
* support of --acme-redirect <URL>
* fix acme security, redundancy, consistency
* Add new --log-binding option to enable binding request logging
* Fix stale-nonce documentation
* Version number is changed to semver 2.0
* pkg-config, and various cleanups in configure file
* Add systemd notification for better systemd integration
* Fix c++ support
* Remove session id/allocation labels
* Remove per session metrics. We should later add more counters.
OBS-URL: https://build.opensuse.org/request/show/862256
OBS-URL: https://build.opensuse.org/package/show/network:telephony/coturn?expand=0&rev=17