[From nobody Tue Oct  6 14:37:11 2026
Received: (at submit) by bugs.debian.org; 2 Oct 2026 16:53:54 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
 (2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-20.3 required=4.0 tests=BAYES_00,
 BODY_INCLUDES_PACKAGE,FROMDEVELOPER,HAS_PACKAGE,SPF_HELO_NONE,
 SPF_SOFTFAIL,XMAILER_REPORTBUG autolearn=ham autolearn_force=no
 version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 14; hammy, 130; neutral, 31; spammy,
 0. spammytokens: hammytokens:0.000-+--H*Ad:N*Bug,
 0.000-+--HTo:N*Debian, 0.000-+--forky, 0.000-+--HTo:N*Bug,
 0.000-+--HTo:N*System
Return-path: <mika@debian.org>
Received: from odysseus.grml.info ([136.243.234.18]:58604)
 by buxtehude.debian.org with esmtps
 (TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from <mika@debian.org>) id 1xCgW9-003xMA-0K
 for submit@bugs.debian.org; Fri, 02 Oct 2026 16:53:54 +0000
Received: by odysseus.grml.info (Postfix, from userid 1000)
 id 09DE84012C; Fri,  2 Oct 2026 18:53:50 +0200 (CEST)
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Michael Prokop <mika@debian.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: coturn: New upstream version 4.18 available
Message-ID: <2026-10-02T18-49-04@devnull.michael-prokop.at>
Message-ID: <179096003099.1495657.14327249354736889036.reportbug@odysseus.grml.info>
X-Mailer: reportbug 7.10.3+deb11u2
Date: Fri, 02 Oct 2026 18:53:50 +0200
Delivered-To: submit@bugs.debian.org

Package: coturn
Version: 4.15.0-1
Severity: wishlist

Hi,

coturn v4.18.0 was released on 2026-09-08, see
https://github.com/coturn/coturn/releases

CVE-2026-68555 should be fixed as of 4.16.0, which would furthermore
close #1145022.

Also, CVE-2026-73213 + CVE-2026-73214 should be fixed with 4.16.0
and CVE-2026-73215 + CVE-2026-73216 should be fixed with 4.17.0,
which would close #1144385.

So updating to v4.18 should fix the RC bugs that currently prevent
coturn from being part of Debian/forky.

(If there's anything to assist with, please let us know.
Thanks for maintaining coturn in Debian!)

regards
-mika-
]