Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

coturn-utils-4.6.2-2.1 RPM for s390x

From OpenSuSE Ports Tumbleweed for s390x

Name: coturn-utils Distribution: openSUSE:Factory:zSystems
Version: 4.6.2 Vendor: openSUSE
Release: 2.1 Build date: Mon Oct 16 23:44:25 2023
Group: Productivity/Networking/Talk/Servers Build host: s390zl28
Size: 223539 Source RPM: coturn-4.6.2-2.1.src.rpm
Packager: https://bugs.opensuse.org
Url: https://github.com/coturn/coturn/
Summary: Coturn utils
This package contains the TURN client utils.

Provides

Requires

License

BSD-3-Clause

Changelog

* Fri Oct 13 2023 chris@computersalat.de
  - Update coturn-turnserver_conf.patch
    * Fix comment for listening-ip
  - enable 'verbose' log to see listening IPs and more, not just
    server start/stop
* Mon Oct 09 2023 chris@computersalat.de
  - add coturn-turnserver_conf.patch
    * to have a meaningful turnserver.conf.default
  - create a ready-to-run turnserver.conf
  - fix logrotate script
  - Update README.SUSE for Let's Encrypt Certificates
  - move certs to /etc/coturn/tls
  - Update apparmor profile
  - rework sysusers.d config file
* Tue May 02 2023 Carsten Ziepke <kieltux@gmail.com>
  - Update to 4.6.2
    * Make sure microhttpd starts using epoll if supported
    * Add sessioncount to prometheus metrics
    * Add STUN request/response/error prometheus counters
    * Cleanup logs on turnserver start
    * Fix duplicate stdout log output
    * Log threadId to logs to aid in multi-threaded debugging
    * Optional build info compiled into turnserver binary
    * Fix arguments expansion in docker-entrypoint.sh
    * Santise database connection strings before printing to log
    * Support Windows MSVC
    * Add configuration option for TLS 1.3 ciphersuites
    * Improve openssl3 and FIPS support
    * Use single SSL_CTX for TLS and DTLS support
    * Update openssl API use to non-deprecated version
    * Set string bytes to null to prevent random origin
    * Fix memory corruption on socket close
    * Fix packet backlog fifo that processed packets in reverse
      order in some scenarios
    * Fix off-by-one when terminating gcm_nonce
    * Fixes to Redis memleaks and socketleaks
    * Fix malformed response to mobility refresh request
    * Fuzzing support
    * Ignore raw UDP if no_udp is enabled
    * Better detect availability of SCTP protocol
  - Drop coturn-no-FIPS-140-mode.patch, fixed upstream, see
    https://github.com/coturn/coturn/issues/1170
* Mon Mar 06 2023 Carsten Ziepke <kieltux@gmail.com>
  - Add coturn-no-FIPS-140-mode.patch, fixes build against OpenSSL 3.0
* Sun Dec 04 2022 Michael Ströder <michael@stroeder.com>
  - Version 4.6.1
    - Fix memory corruption on socket close (#1113)
  - Version 4.6.0
    - merge PR #967 (eakraly)
    * fix small issues reported by cppcheck
    - merge PR #974 (eakraly)
    * fix long log line printing
    - merge PR #973 (eakraly)
    * Print turnserver version with --version
    - merge PR #972 (eakraly)
    * do not write outside of a buffer in admin interface
    - merge PR #970 (eakraly)
    * fix uclient certificate loading bug
    - merge PR #971 (eakraly)
    * fix duplicate TCP flag in run_tests.sh script
    - merge PR #962 (huhaipeng)
    * fix turn session leak
    - merge PR #963 (eakraly)
    * Document dependency of new-log-timestamp-format on new-log-timestamp
    - merge PR #951 (steffen-moser)
    * Enable compilation of coturn on Solaris 11.4
    - merge PR #949 (eakraly)
    * First step to re-enable compilation with OpenSSL 1.0.x
    - merge PR #949 (eakraly)
    * Fix cmake build on macOS
    - merge PR #942 (eakraly)
    * Disable SSL renegotiation
    - merge PR #792 (yfaker)
    * Fix user quota release #786
    - merge PR #829 (fancycode)
    * add more info to redis allocation status
    - merge PR #938 (eakraly)
    * update turnserver.conf comment
    - merge PR #773 (haseebq)
    * fix performance regression
    - merge PR #773 (korayvt)
    * add syslog facility config
    - merge PR #897 (unicode-it)
    * add support for dual-stack prom listener
    - merge PR #984 (rozhuk-im)
    * fix build with libressl 3.4.0+
    - merge PR #926 (ggarber)
    * add ci tests workflow
    - merge PR #934 (neocat)
    * show error on invalid config
    - merge PR #787 (dsmeytis)
    * add new prom allocations metric
    - merge PR #869 (micmac1)
    * don't link in libintl
    - merge PR #895 (alexnedo)
    * fix access to freed memory
    - merge PR #919 (sysvinit)
    * configurable prom username labels
    - merge PR #840 (sysvinit)
    * configurable prometheus listener port
    - merge PR #870 (micmac1)
    * fix build mariadb connector
    - merge PR #851 (freedomben)
    * fix README typo
    - merge PR #877 (davel)
    * correct doc typo
    - merge PR #755(moznuy) and #825(by argggh)
    * fix sqlite3_shutdown and sqlite3_config race
    - merge PR #826 (by giavac)
    * prom server better
    - merge PR #684 (by brevilo)
    * Define OPENSSL_VERSION_1_1_1 on systems where it doesn't (yet) exist
    * Regression in 4.5.2 that cause issues in openssl version < 1.1.1.
    - typo fix in prometheus (by fcecagno)
    - merge PR #687 (by Wuelber Castillo)
    * Add hash algorithm for hmackey value to redis userdb schema docs
    - replace keep-address-family with allocation-default-address-family (keep-address-family deprecated and will be removed!!)
    - merge PR #703 (by j4zzc4t)
    * Restore no_stdout_log behavior
    - merge PR #727 (by JoKoT3)
    * Support older mysql client version in configure
    - merge PR #721 (by KangLin)
    * Add to support cmake
    - merge PR #717 (by marcoschum)
    * Fix typo in turnserver.conf
    - merge PR #704 (by hills)
    * Packaging scripts can miss out on these errors (exit code)
    - merge PR #679 (by rubo77)
    * Readme.turnserver: how to run server as a daemon
    - merge PR #739 (by hills)
    * SSL reload has hidden bugs which cause crashes
    - Fix regression in PR #739
    - Try to mitigate STUN amplification attatck
    * Add new option --no-rfc5780 to force disable RFC8750
    * Add new option --no-stun-backward-compatibility
      Disable handling old STUN Binding requests and disable
      MAPPED-ADDRESS attribute in binding response (use only the
      XOR-MAPPED-ADDRESS)
    * Add new option --response-origin-only-with-rfc5780
      Add RESPONSE_ORIGIN attribute only if rfc5780 is enabled
    * Don't send SOFTWARE attribute if --no-software-attribute set on (BREAKING CHANGE)
    - merge PR #767 (by ggalperi)
    * fix for log_binding (regression)
* Fri Aug 19 2022 Georg Pfuetzenreuter <georg.pfuetzenreuter@suse.com>
  - Drop @privileged SystemCallFilter, can prevent service from starting (status=31/SYS)
* Mon Oct 18 2021 Michael Ströder <michael@stroeder.com>
  - Dropped harden_coturn.service.patch because systemd units are
    created from own source anyway and are proven to work
* Fri Oct 15 2021 Johannes Segitz <jsegitz@suse.com>
  - Drop ProtectClock hardening, can cause issues if other device acceess is needed
* Mon Aug 30 2021 Johannes Segitz <jsegitz@suse.com>
  - Added hardening to systemd service(s). Added patch(es):
    * harden_coturn.service.patch
    Modified:
    * coturn.service
    * coturn@.service
* Mon Jan 11 2021 Johannes Weberhofer <jweberhofer@weberhofer.at>
  - Version 4.5.2
    * Fix for CVE-2020-26262 (boo#1180764)
    - Fix ipv6 ::1 loopback check
    - Not allow allocate peer address 0.0.0.0/8 and ::/128
    - For more details see the github security advisory:
      https://github.com/coturn/coturn/security/advisories/GHSA-6g6j-r9rf-cm7p
    * fix null pointer dereference in case of out of memory.
    * Fix: Null pointer dereference on tcp_client_input_handler_rfc6062data function
    * Fix: use-after-free vulnerability on write_to_peerchannel function
    * Fix: use-after-free vulnerability on write_client_connection function
    * add prometheus metrics
    * Delete trailing whitespace in example configuration files
    * Add architecture ppc64le to travis build
    * Fix misleading option in doc (prometheus)
    * Allow RFC6062 TCP relay data to look like TLS
    * Add support for proxy protocol V1
    * Print full date and time in logs
    * Add new options: "new-log-timestamp" and "new-log-timestamp-format"
    * Do not use FIPS and remove hardcode OPENSSL_VERSION_NUMBER with LibreSSL
    * Add ACME redirect url
    * support of --acme-redirect <URL>
    * fix acme security, redundancy, consistency
    * Add new --log-binding option to enable binding request logging
    * Fix stale-nonce documentation
    * Version number is changed to semver 2.0
    * pkg-config, and various cleanups in configure file
    * Add systemd notification for better systemd integration
    * Fix c++ support
    * Remove session id/allocation labels
    * Remove per session metrics. We should later add more counters.
* Sun Dec 27 2020 Michael Ströder <michael@stroeder.com>
  - AppArmor profile has ABI 3.0 and some minor changes
  - Modified systemd unit:
    * do not use daemon mode
    * Type=simple
    * added security settings
  - added multi-instance systemd unit
* Wed Aug 19 2020 Callum Farmer <callumjfarmer13@gmail.com>
  - Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)
* Tue Jun 30 2020 Johannes Weberhofer <jweberhofer@weberhofer.at>
  - Version 4.5.1.3:
    * Remove reference to SSLv3: gh#coturn/coturn#566
    * Ignore MD5 for BoringSSL: gh#coturn/coturn#579
    * STUN response buffer not initialized properly; he issue found and
      reported gh#coturn/coturn#583 by Felix Dörre all credits belongs to
      him. CVE-2020-4067, boo#1173510
  - Let coturn allow binding to ports below 1024 per default
* Mon May 04 2020 Johannes Weberhofer <jweberhofer@weberhofer.at>
  - Extended Readme.SUSE with description on how to bind to ports below 1024
  - Fixes and enhancements in service-file
  - /etc/sysconfig/coturn defaults now to not show software's version to the public
  - Version 4.5.1.2:
    * Do not display empty CLI passwd alert if CLI is not enabled
    * Removed several functions: gh#coturn/coturn#359
    * Fix webadmin IP permission and possible SQL-injections: gh#coturn/coturn#386
    * Fix Mongo driver crash on invalid connection string: gh#coturn/coturn#390
    * enhanced fread return length check: gh#coturn/coturn#392
    * disconnect database gracefully: #367
    * Using SSL_get_version method for BoringSSL compatibility:
      turn_session_info->tls_method returns real TLS version:
      gh#coturn/coturn#382
    * Added systemd service example: gh#coturn/coturn#276
    * Add bandwidth usage reporting packet/bandwidth usage by peers:
      gh#coturn/coturn#284
    * Modifying configure to enable compile with private libraries:
      gh#coturn/coturn#381
    * Append to log files rather than overriding them: gh#coturn/coturn#417
    * Updated incorrect string length check for 'ssh': gh#coturn/coturn#442
    * Fix Dockerfile for latest Debian: gh#coturn/coturn#449
    * CVE-2020-6061, CVE-2020-6062: specially crafted HTTP POST request can lead
      to heap overflow which can result in information leak:
      gh#coturn/coturn#489
    * STUN input validation: gh#coturn/coturn#472
    * Allow MD5 in FIPS mode: gh#coturn/coturn#398
    * update travis config ubuntu/mac images
    * added null check for second char: gh#coturn/coturn#466
    * compiler warning fixes: gh#coturn/coturn#470
    * Fix a memory leak when an SHATYPE isn't supported: gh#coturn/coturn#471
    * fix compiler warning comparison between signed and unsigned integer expressions
    * fix compiler warning string truncation
    * change Diffie Hellman default key length from 1066 to 2066
    * drop of supplementary group IDs: gh#coturn/coturn#522
    * Unify spelling of Coturn: gh#coturn/coturn#514
    * Rename "prod" config option to "no-software-attribute": gh#coturn/coturn#506
      gh#coturn/coturn#478
    * change sql data dir in docker-compose-all.yml: gh#coturn/coturn#516
    * add flags to disable periodic use of dynamic tables: gh#coturn/coturn#525
    * fix typos and grammar: gh#coturn/coturn#463, gh#coturn/coturn#488
    * Update README.docker: gh#coturn/coturn#475
    * fix config extension in README.docker: gh#coturn/coturn#519
    * Code beautifications: gh#coturn/coturn#327, gh#coturn/coturn#455,
      gh#coturn/coturn#513
  - Removed patches now included in upstream: coturn-4.5.1.0-append-log.patch,
    coturn-4.5.1.1-cve-2020-6061.patch, coturn-4.5.1.1-cve-2020-6062.patch and
    coturn-4.5.1.1.missing-call-to-setgroups-before-setuid.patch
* Tue Apr 14 2020 lars@linux-schulserver.de
  - added apparmor profile (coturn-apparmor-usr.bin.turnserver)
  - fix executable permissions in devel package by using defattr
* Sun Apr 12 2020 Johannes Weberhofer <jweberhofer@weberhofer.at>
  - Use pkgconfig(systemd) for packaging
* Sat Apr 11 2020 Jan Engelhardt <jengelh@inai.de>
  - Shorten description by stripping the long list of all RFCs.
  - Drop %defattr; use %autosetup.
* Thu Apr 09 2020 Johannes Weberhofer <jweberhofer@weberhofer.at>
  - Initial release of coturn 4.5.1.1

Files

/usr/bin/turnutils_natdiscovery
/usr/bin/turnutils_oauth
/usr/bin/turnutils_peer
/usr/bin/turnutils_stunclient
/usr/bin/turnutils_uclient
/usr/share/doc/packages/coturn/README.turnutils
/usr/share/licenses/coturn-utils
/usr/share/licenses/coturn-utils/LICENSE
/usr/share/man/man1/turnutils.1.gz
/usr/share/man/man1/turnutils_natdiscovery.1.gz
/usr/share/man/man1/turnutils_oauth.1.gz
/usr/share/man/man1/turnutils_peer.1.gz
/usr/share/man/man1/turnutils_stunclient.1.gz
/usr/share/man/man1/turnutils_uclient.1.gz


Generated by rpm2html 1.8.1

Fabrice Bellet, Sat Mar 9 12:50:11 2024