[From nobody Wed Jun 10 10:35:06 2026 Received: (at 1134577-close) by bugs.debian.org; 10 Jun 2026 09:34:51 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.1 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA, FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE, SPF_HELO_PASS,SPF_PASS,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 99; hammy, 150; neutral, 161; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:50094) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wXFKl-00Eb1K-1u for 1134577-close@bugs.debian.org; Wed, 10 Jun 2026 09:34:51 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wXFKe-00CPtu-26 for 1134577-close@bugs.debian.org; Wed, 10 Jun 2026 09:34:44 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=nRtCh5sS7Jj4nGWrz791OJP7/8KgCeLck4TPYQ0np8U=; b=TCWq+NF4MP2mg+OrEA53/1j1uL Bgf0vEBB4Qweb66302vIZXKyaD78Ja15wbf4hvoSzXqMyH8XQraoRxklJWn5sT6Wy+Ub+Fz/RhmZU WEehX1AvNaasOzOTcGHfb1t0+46ULebhsKjcuMMuZrivPZAchDbAAnOM7zftfcVz8rcLyaS5W+JWU G0ubwO5pLG2aGz+agdXs7C3KJFZcta22EGDBeNDO9Wznyi1zziPyMSQ/lgcoejZ8uEOzeu1iIoltj M7Uxmss93ShFyp+l8IGeikW9VYZvA6dj9Vzn7IgVPFn4LEMeuzSK3UtvAx+PagmFIHQTijBEuLHT3 UD5Q42iA==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wXFKd-00000008FBi-3nao; Wed, 10 Jun 2026 09:34:43 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Christoph Martin <chrism@debian.org> To: 1134577-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: coturn Debian: DAK Debian-Changes: coturn_4.12.0-1_source.changes Debian-Source: coturn Debian-Version: 4.12.0-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1134577: fixed in coturn 4.12.0-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============5613198520925316216==" Message-Id: <E1wXFKd-00000008FBi-3nao@fasolo.debian.org> Date: Wed, 10 Jun 2026 09:34:43 +0000 X-CrossAssassin-Score: 2 --===============5613198520925316216== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: coturn Source-Version: 4.12.0-1 Done: Christoph Martin <chrism@debian.org> We believe that the bug you reported is fixed in the latest version of coturn, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1134577@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Christoph Martin <chrism@debian.org> (supplier of updated coturn package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 10 Jun 2026 10:29:35 +0200 Source: coturn Architecture: source Version: 4.12.0-1 Distribution: unstable Urgency: high Maintainer: Debian VoIP Team <pkg-voip-maintainers@lists.alioth.debian.org> Changed-By: Christoph Martin <chrism@debian.org> Closes: 1129267 1134577 Changes: coturn (4.12.0-1) unstable; urgency=3Dhigh . [ Thomas Bartosik ] * Non-maintainer upload. * New upstream release. * Fixes https://bugs.debian.org/1134577 (CVE-2026-40613), https://bugs.debian.org/1129267 (CVE-2026-27624) * TLS1.3 support for TURN/TLS * Drop obsolete patches for openssl <3 * Built with OpenSSL 3.5 (auto-openssl transition) . [ Christoph Martin ] * cleanup source * add myself to uploaders * Closes: #1134577 * Closes: #1129267 Checksums-Sha1: 5cb2b1270e9a8aec3ddb03e18595c745106bed57 2256 coturn_4.12.0-1.dsc 605422866a4b9061712fc7413a5552c4cc280d22 651908 coturn_4.12.0.orig.tar.gz ed223ee17d23015dadc76928fe45f03925633134 14528 coturn_4.12.0-1.debian.tar.xz 3a8eb7bc183c7ee3f06a72a15d3185e12b1ac4a0 7474 coturn_4.12.0-1_amd64.buildinfo Checksums-Sha256: 6e288ce40b23b3bd1820499b1da9f1d3f917ffcbb4b7518143755371b566b6ff 2256 coturn= _4.12.0-1.dsc 5374811d50548e2eb1982c0591a55c79c95d78633c17fd211bef13206087e95b 651908 cotu= rn_4.12.0.orig.tar.gz 39901713ae51a9a9cafb7e37ea46852a25aae763b0ecb7cf8dd20b97fded2ac0 14528 cotur= n_4.12.0-1.debian.tar.xz 6748a97d911f3bd642c9f6fdd07f355fa1e6fd3bae000f8a7c63e06ef9938960 7474 coturn= _4.12.0-1_amd64.buildinfo Files: a5515e35af3a262accf47ca726a665c2 2256 net optional coturn_4.12.0-1.dsc 54652667e84889268ac38fba6f071681 651908 net optional coturn_4.12.0.orig.tar.= gz 1bdd14c6e57fa850c469d233a368efc8 14528 net optional coturn_4.12.0-1.debian.t= ar.xz 05d67986b5ab87a74351a89dc8a3e65d 7474 net optional coturn_4.12.0-1_amd64.bui= ldinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEbdFebnsTnCYy4y02kcMUbl2GabQFAmopJpYACgkQkcMUbl2G abQRqg/+OuRhdIXFXoRQI9/nxfmmlZiF58Ix1M76phQjgu35eCNahuu6wcSiE1f6 pNrRFVvZIT1cY9uQEzWq5p6iDY14SF0CKXHmNCHMAVUrNTZyx56zU1RbYc8s7ElO 92h/mehr0QBToMqlJbzVrpsjIcL9BDjmRzZrRgxPmIqbpb52hmrxEq4ahGUTgHym +S7tMb8fUNVQAM+8T0VwSGzM1E//Qe99MCD7CGuAyBu2T8shmQ+HKBqFW/npI16n 7nOPEidZhOvWLq4opvCnL2qd8RpnVnOC6R9Q87fJ1b0mSHU9DItWSo7pE6o7DEf6 S5mFvLO+JpD/yJmV+AJmG+dw+5UinhEgfgHpX+wi1WeXGnPIAnbp2HeIFbO34Z3x 5d6s1KP0DYljdDgJxq6z/fm8Hs9/8hgXPiaksd2Vt/vRqW8n8ou0XgNyrTqszhYd FHrOO4yocoUuz3LkcsNiynNNRpMcntwjahaC3V2C6l0poXRBboB25mCVcVfDjOde wKqdXE6hWCheQ4CSLnIGkmTv3MoeA2nhYpzH5jgT2zweiSl9f+Hh+QpJ3vAYNAXc 8KJx70FoPAOhxH244B4X11rPa3zy9TiWB8UGP3+uupGfnffmGDm0TdahapqWtynZ TVQqp1kcTQlmhIk/7AIYFp74k1nUtbLkXd54aEURMXdpIMRrlmo=3D =3D0reJ -----END PGP SIGNATURE----- --===============5613198520925316216== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaikvswAKCRCb9qggYcy5 IUQGAQDwq7yKm3xl0lW2HEOnOXfLM34dHHIa4iwm8CxHHmqTCgD/WIgUjl3AeVpO 8EskQEaH9BomPhzJI7wwXrvBLgmF4wM= =MiJz -----END PGP SIGNATURE----- --===============5613198520925316216==-- ]