UbuntuUpdates.org

Package "kea"

Name: kea

Description:

DHCP server [meta]
Latest version: 2.6.3-2ubuntu0.1
Release: questing (25.10)
Level: updates
Repository: main
Head package: isc-kea
Homepage: http://kea.isc.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "kea"

All arch deb package
APT INSTALL

Other versions of "kea" in Questing

Repository Area Version
base main 2.6.3-2
security main 2.6.3-2ubuntu0.1

Changelog

Version: 2.6.3-2ubuntu0.1 2026-06-08 20:07:44 UTC

  isc-kea (2.6.3-2ubuntu0.1) questing-security; urgency=medium

  * SECURITY UPDATE: DoS via crafted message to API socket or HA listener
    - debian/patches/CVE-2026-3608.patch: Restrict number of recursive calls
      when parsing config in src/lib/cc/data.cc, src/lib/cc/data.h,
      src/lib/cc/tests/data_unittests.cc, src/lib/process/redact_config.cc,
      src/lib/process/redact_config.h,
      src/lib/process/tests/d_cfg_mgr_unittests.cc.
    - CVE-2026-3608

 -- Marc Deslauriers <email address hidden> Fri, 05 Jun 2026 15:00:14 -0400
CVE-2026-3608 Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any configured API socket or HA list


About   -   Send Feedback to @ubuntu_updates