[kea-announce] Kea 3.0.1 and 3.1.1 are released

[Suzanne Goldlust]

Internet Systems Consortium is pleased to announce the releases of Kea 3.0.1 and 3.1.1. Kea 3.0.1 is a maintenance release on the existing stable branch, and Kea 3.1.1 is a development release.

Please note that both versions address a vulnerability in `kea-dhcp4` that caused the server to abort if a client sent a broadcast request with particular options, and Kea failed to find an appropriate subnet for that client. This is CVE-2025-40779.

Release notes for the new stable version are available at https://downloads.isc.org/isc/kea/3.0.1/Kea-3.0.1-ReleaseNotes.txt

Release notes for the new development version are available at https://downloads.isc.org/isc/kea/3.1.1/Kea-3.1.1-ReleaseNotes.txt

Source tarballs and packages are available from our Cloudsmith repositories at https://cloudsmith.io/~isc/repos/kea-3-0/groups/ for the stable version, and at https://cloudsmith.io/~isc/repos/kea-dev/groups/ for the development version. The releases are also available from the ISC download page at https://www.isc.org/download/#Kea. Development versions are not suitable for production use.

Maintenance of the Kea 2.4 branch ended with the release of Kea 3.0.0. Please make plans to update to the 2.6 or 3.0 versions if you haven't already.

Thank you for using ISC’s software!