-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 01 Jul 2020 16:01:02 +0530 Source: coturn Binary: coturn Architecture: source amd64 Version: 4.2.1.2-1+deb8u2 Distribution: jessie-security Urgency: high Maintainer: Debian VoIP Team <pkg-voip-maintainers@lists.alioth.debian.org> Changed-By: Utkarsh Gupta <utkarsh@debian.org> Description: coturn - TURN and STUN server for VoIP Changes: coturn (4.2.1.2-1+deb8u2) jessie-security; urgency=high . * Non-maintainer upload by the LTS team. * Add patch to fix: - CVE-2020-4067: init with zero any new or reused stun buffers. Checksums-Sha1: 3f6dc771e29bfa747138168d243f9313048461e0 2142 coturn_4.2.1.2-1+deb8u2.dsc c68aaeda1c1a266c2c3b2e0bf23d68560734d78d 347513 coturn_4.2.1.2.orig.tar.gz 039d8751addf8768aa9d97ba0f5506c4d1490b06 9940 coturn_4.2.1.2-1+deb8u2.debian.tar.xz 4ca773ade87b991889cf98342af1177d47e8b657 285652 coturn_4.2.1.2-1+deb8u2_amd64.deb Checksums-Sha256: 4603f9200362b072682ebdd1971fec973346f8925a94f25a8b788f362d1abddd 2142 coturn_4.2.1.2-1+deb8u2.dsc 9e4d73dcaceb43bc3948c0ec521226e9c2b87bf6919c07328032fdc0be24d86d 347513 coturn_4.2.1.2.orig.tar.gz 33dee821d84823bb6b4c9c3746ec753a473ccdddbb2120c4438f8e699d800071 9940 coturn_4.2.1.2-1+deb8u2.debian.tar.xz 4d31ec6aadaadbe98b6f75c58f065bd538a316d48c2838ace15a3097ca16f3a7 285652 coturn_4.2.1.2-1+deb8u2_amd64.deb Files: a80a1c86e890499bbd66e09fde1966b8 2142 net extra coturn_4.2.1.2-1+deb8u2.dsc c33e0faa3d581f3114f26b098b04c65a 347513 net extra coturn_4.2.1.2.orig.tar.gz 15a496f0ba4aaad301732f9b967b7dd1 9940 net extra coturn_4.2.1.2-1+deb8u2.debian.tar.xz 4663317e4ca6aa2777ada18c232cf040 285652 net extra coturn_4.2.1.2-1+deb8u2_amd64.deb -----BEGIN PGP SIGNATURE----- iQJHBAEBCAAxFiEEbJ0QSEqa5Mw4X3xxgj6WdgbDS5YFAl78Z64THHV0a2Fyc2hA ZGViaWFuLm9yZwAKCRCCPpZ2BsNLlmkQD/9qdjzwiMo83q1vtT0TMAnHSynUnPxT XLIMqu+a5K/WLC6o4p1rc+/Cqsdns2q4K4G6qPeBBkjb+dZgVGuRV/h9Z4ZI/6EB LCzllv39dUoQOHR0TvRlOXauniEwEsLh+lrsU18Zx81RtTVstYtQUQTa6Oyttkws E84yC5ASMPfM1dzvDes/j8uiaqGsZwCKDwYs190VLm7hEgweqJqrOloMHLIgnLya U+IcVuJ/2xTsgElKcPkAYNnMWZUpPc6BQaCN7w2uKmaNfaRiA0YG5lPLz1Lm3EYf 1r7Vla1USLEocJlBEkCg5616uEnVFJicHL2uDloMO/DeyoqEc8bmbpxr+A/jMss6 W/BYQqFkw87MUVw+E4VTuRwpPNcG8nSC6A7fcujeOdMVDAt0awUJdN610yRg6Ylp 9NZ+clQktN5bkahUPEs9hSubc2o5u53djmAqNYMdcTk+TnJNfOJkWWb0+NtyYvH6 qhSxDVvwelfrMpUJHYa3Jqe1Gr9P/yh9UW40tO7LGKrSsj4mu2gvJQJGuIuycbaj fux1/LYNqgofIADvqnjuifYYvHZbdcRYtelBU2QAdFs2FjcXW3b31eOCMSAD2Elx RNroX3M8Iqoa5Dn36V1eWwb/keJWtGRzZsMjzxrb1jgHNEUNsX60hkt/i9d5GIjs IGmkQOE2P9pp1g== =mLl3 -----END PGP SIGNATURE-----