[Git][security-tracker-team/security-tracker][master] Add new coturn issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e609d6d0 by Salvatore Bonaccorso at 2026-08-11T21:42:52+02:00
Add new coturn issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -26,15 +26,31 @@ CVE-2026-73218 (Cursor is a code editor built for programming with AI. Prior to
 CVE-2026-73217 (Cursor is a code editor built for programming with AI. Prior to 3.1.2, ...)
 	NOT-FOR-US: Cursor
 CVE-2026-73216 (Coturn is a free open source implementation of TURN and STUN Server. P ...)
-	TODO: check
+	- coturn <unfixed>
+	NOTE: https://github.com/coturn/coturn/security/advisories/GHSA-f6hc-79w3-p8pq
+	NOTE: Fixed by: https://github.com/coturn/coturn/commit/3c5b2615fd405c4e7c5bf3fbeef895c94a90671b (4.17.0)
 CVE-2026-73215 (Coturn is a free open source implementation of TURN and STUN Server. P ...)
-	TODO: check
+	- coturn <unfixed>
+	NOTE: https://github.com/coturn/coturn/security/advisories/GHSA-847g-qmc6-6m4r
+	NOTE: Fixed by: https://github.com/coturn/coturn/commit/4adbd82e78456e13109bf44deed4ec3aceb0bab2 (4.17.0)
 CVE-2026-73214 (Coturn is a free open source implementation of TURN and STUN Server. P ...)
-	TODO: check
+	- coturn <unfixed>
+	NOTE: https://github.com/coturn/coturn/security/advisories/GHSA-5x2p-4vqj-f6m4
+	NOTE: https://github.com/coturn/coturn/pull/2003
+	NOTE: Fixed by: https://github.com/coturn/coturn/commit/beb4de9dcb6a475129595b943c9a34264420df09 (4.16.0)
+	NOTE: https://github.com/coturn/coturn/pull/2012
+	NOTE: Fixed by: https://github.com/coturn/coturn/commit/37e13d1d60af8f1422c01b5e9f1c6bc355d03b85 (4.16.0)
 CVE-2026-73213 (Coturn is a free open source implementation of TURN and STUN Server. P ...)
-	TODO: check
+	- coturn <unfixed>
+	NOTE: https://github.com/coturn/coturn/security/advisories/GHSA-4v97-rxjj-4f99
+	NOTE: Fixed by: https://github.com/coturn/coturn/commit/6c13608c28a04af5d63abddd7565a0dcc4771c28 (4.16.0)
 CVE-2026-73212 (Coturn is a free open source implementation of TURN and STUN Server. P ...)
-	TODO: check
+	- coturn 4.14.0-1
+	NOTE: https://github.com/coturn/coturn/security/advisories/GHSA-2x4g-wx24-48m4
+	NOTE: https://github.com/coturn/coturn/pull/1945
+	NOTE: Fixed by: https://github.com/coturn/coturn/commit/cf4b4952de48510d38415b96300da5fc674bfdda (4.13.1)
+	NOTE: https://github.com/coturn/coturn/pull/1947
+	NOTE: Fixed by: https://github.com/coturn/coturn/commit/d49ee56aa9fe748af064853d5e430eec1ccc3cbc (4.13.1)
 CVE-2026-73211 (PeerTube is an ActivityPub-federated video streaming platform. Prior t ...)
 	TODO: check
 CVE-2026-73210 (A Server-Side Request Forgery (SSRF) vulnerability existed in Lookyloo ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e609d6d059e6dced6d9e6f6d686fda5c394e2cab

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e609d6d059e6dced6d9e6f6d686fda5c394e2cab
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260811/60dcb739/attachment-0001.htm>