[kea-announce] Pre-announcement of a Kea security issue scheduled for disclosure 29 October 2025

[Victoria Risk]

Kea users-

As part of our policy of pre-notification of upcoming security releases, we are writing to inform you that the October 2025 Kea maintenance releases that will be published on Wednesday, 29 October, will contain a patch for a security vulnerability affecting stable Kea release branches.

Further details about this vulnerability will be publicly disclosed at the time the releases are published.  It is our hope that this pre-announcement will aid Kea administrators in preparing for that disclosure when it occurs.  If you have feedback or questions concerning this policy, please open a confidential GitLab issue at https://gitlab.isc.org/isc-projects/kea/-/issues/new?issue[confidential]=true (preferred) or send an email to kea-security at isc.org.

Thank you