[kea-announce] Kea 2.4.2, 2.6.3 and 2.7.9 - with security updates - are now available
Victoria Risk
vicky at isc.org
Wed May 28 16:54:40 UTC 2025
Kea users:
Internet Systems Consortium is pleased to announce the release of Kea 2.4.2, 2.6.3 and 2.7.9. Please note that all three of these releases contain fixes addressing multiple security issues detailed in three CVEs published today.
CVE-2025-32801: Loading a malicious hook library can lead to local privilege escalation https://kb.isc.org/docs/cve-2025-32801
CVE-2025-32802: Insecure handling of file paths allows multiple local attacks https://kb.isc.org/docs/cve-2025-32802
CVE-2025-32803: Insecure file permissions can result in confidential information leakage https://kb.isc.org/docs/cve-2025-32803
Kea 2.4.2 is expected to be our last release on that old stable branch, which we will be retiring with the release of Kea 3.0, expected in June.
Kea 2.6.3 is our current stable version.
Release notes for these two versions are available at:
Kea 2.4.2 https://downloads.isc.org/isc/kea/2.4.2/Kea-2.4.2-ReleaseNotes.txt
Kea 2.6.3 https://downloads.isc.org/isc/kea/2.6.3/Kea-2.6.3-ReleaseNotes.txt
Releases in the Kea 2.7.x sequence are part of the Kea development branch, where new features are provided for testing and evaluation before the branch is designated stable and recommended for production use.
Release notes for the development version are available at: https://downloads.isc.org/isc/kea/2.7.9/Kea-2.7.9-ReleaseNotes.txt
Source tarballs and packages are available from our Cloudsmith repositories at https://cloudsmith.io/~isc/repos/kea-2-4/groups/ and https://cloudsmith.io/~isc/repos/kea-2-6/groups/ for the stable versions and https://cloudsmith.io/~isc/repos/kea-dev/packages/ for the development version. All releases are also available from the ISC download page at https://www.isc.org/download/#Kea.
Thank you for using ISC’s software!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/kea-announce/attachments/20250528/429a3a40/attachment.htm>
More information about the kea-announce
mailing list