[kea-announce] Pre-announcement of Kea DHCP vulnerability issues scheduled for disclosure 25 March 2026

[Suzanne Goldlust]

As part of our policy of pre-notification of upcoming security releases, we are writing to inform you that the March 2026 Kea DHCP maintenance releases that will be published on Wednesday, 25 March, will contain patches for security vulnerabilities affecting stable Kea release branches.

Further details about those vulnerabilities will be publicly disclosed at the time the releases are published. It is our hope that this pre-announcement will aid Kea administrators in preparing for that disclosure when it occurs. To find out more about our disclosure policy, please visit https://kb.isc.org/docs/aa-00861.

Thank you for using ISC's software.