upgrade: coturn 4.6.3-r1 -> 4.10.0-r1

Changelog summary: Security fixes (CVE-2025-69217, CVE-2026-27624,
CVE-2026-40613), performance improvements (recvmmsg, lock-free atomics),
memory safety fixes, and DDoS handling improvements.

Risk: CAUTION (4.7.0 has breaking changes for deprecated config options)
Breaking changes: 4.7.0 removed keep-address-family,
  response-origin-only-with-rfc5780, inverted no-stun-backward-compatibility.
  None of these are in our config — no impact.
DB backup: no (not DB-backed)
Config changes applied: none (no-tlsv1, no-tlsv1_1, no-cli now unnecessary
  but still accepted — no removal needed)
Flagged for manual review: none

Co-Authored-By: Service Upgrade Agent <noreply@viktorbarzin.me>
This commit is contained in:
Viktor Barzin 2026-04-16 16:34:59 +00:00
parent cce513349a
commit 287d5eb28d

View file

@ -148,7 +148,7 @@ resource "kubernetes_deployment" "coturn" {
spec {
container {
name = "coturn"
image = "coturn/coturn:4.6.3-r1"
image = "coturn/coturn:4.10.0-r1"
args = ["-c", "/etc/turnserver/turnserver.conf"]
# STUN/TURN signaling port