mirrors/coturn
1
0
Fork 0
mirror of https://github.com/coturn/coturn.git synced 2026-05-04 18:36:10 +02:00
Code Issues Projects Releases Wiki Activity

Tidy debian/changelog

Browse Source
This commit is contained in:
Mészáros Mihály 2019-01-28 13:23:46 +01:00
parent 218987f425
commit 6cce69cf35
1 changed files with 19 additions and 19 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

38
debian/changelog vendored
View File

@ -1,26 +1,26 @@
coturn (4.5.1.0-1) unstable; urgency=medium
* Sync to upstream 4.5.1.0
* Fix CVE-2018-4058
coTURN unsafe loopback forwarding default configuration vulnerability
* by default loopback disabled
* no-loopback option removed!
* allow-loopback-peers option added
* Fix CVE-2018-4056
coTURN Administrator Web Portal SQL injection vulnerability
* Web admin disabled by default
* Web admin could listen on separated IP and port
* web-admin-ip option added
* web-admin-port option added
* Web admin is disabled on STUN/TURN ports.
* web-admin-listen-on-workers option added
to enable web-admin STUN/TURN ports
* Fix CVE-2018-4059
coTURN server unsafe telnet admin portal default configuration vulnerability
* An empty cli-password with an allow-loopback-peers option is prohibited.
* fix memory leak in read_config_file
- Fix CVE-2018-4058: coTURN unsafe loopback forwarding
default configuration vulnerability
- by default loopback disabled
- no-loopback option removed!
- allow-loopback-peers option added
- Fix CVE-2018-4056: coTURN Administrator Web Portal
SQL injection vulnerability
- Web admin disabled by default
- Web admin could listen on separated IP and port
- web-admin-ip option added
- web-admin-port option added
- Web admin is disabled on STUN/TURN ports.
- web-admin-listen-on-workers option added
to enable web-admin STUN/TURN ports
- Fix CVE-2018-4059: coTURN server unsafe telnet admin
portal default configuration vulnerability
- An empty cli-password with an allow-loopback-peers option is prohibited.
- fix memory leak in read_config_file
-- Mészáros Mihály <misi@majd.eu> Thu, 06 Dec 2018 09:47:16 +0000
-- Mészáros Mihály <misi@majd.eu> Mon, 28 Jan 2019 13:16:57 +0100
coturn (4.5.0.8-1) unstable; urgency=medium