isc-kea - Debian Package Tracker

general

source: isc-kea (main)
version: 3.0.3-1
maintainer: Kea (DMD)
uploaders: Ondřej Surý [DMD] – Adam Majer [DMD] – Jason Guy [DMD] – Paride Legovini [DMD] – Athos Ribeiro [DMD]
arch: all any
std-ver: 4.7.2
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

oldstable: 2.2.0-6
stable: 2.6.3-1
stable-bpo: 3.0.3-1~bpo13+1
testing: 3.0.3-1
unstable: 3.0.3-1

versioned links

2.2.0-6: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.6.3-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.0.3-1~bpo13+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.0.3-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

kea (2 bugs: 0, 2, 0, 0)
kea-admin
kea-common
kea-ctrl-agent
kea-dev (1 bugs: 0, 1, 0, 0)
kea-dhcp-ddns-server (2 bugs: 0, 0, 2, 0)
kea-dhcp4-server (5 bugs: 0, 5, 0, 0)
kea-dhcp6-server (1 bugs: 0, 1, 0, 0)
kea-doc
python3-kea-connector

action needed

1 security issue in trixie high

There is 1 open security issue in trixie.

1 important issue:

CVE-2026-3608: Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any configured API socket or HA listener can cause the receiving daemon to exit with a stack overflow error. This issue affects Kea versions 2.6.0 through 2.6.4 and 3.0.0 through 3.0.2.

Created: 2026-03-25 Last update: 2026-04-28 19:02

4 security issues in bookworm high

There are 4 open security issues in bookworm.

4 important issues:

CVE-2026-3608: Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any configured API socket or HA listener can cause the receiving daemon to exit with a stack overflow error. This issue affects Kea versions 2.6.0 through 2.6.4 and 3.0.0 through 3.0.2.
CVE-2025-32801: Kea configuration and API directives can be used to load a malicious hook library. Many common configurations run Kea as root, leave the API entry points unsecured by default, and/or place the control sockets in insecure paths. This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through 2.7.8.
CVE-2025-32802: Kea configuration and API directives can be used to overwrite arbitrary files, subject to permissions granted to Kea. Many common configurations run Kea as root, leave the API entry points unsecured by default, and/or place the control sockets in insecure paths. This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through 2.7.8.
CVE-2025-32803: In some cases, Kea log files or lease files may be world-readable. This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through 2.7.8.

Created: 2025-05-28 Last update: 2026-04-28 19:02

lintian reports 408 errors and 3 warnings high

Lintian reports 408 errors and 3 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2026-03-25 Last update: 2026-03-27 05:01

1 bug tagged patch in the BTS normal

The BTS contains patches fixing 1 bug, consider including or untagging them.

Created: 2026-04-06 Last update: 2026-05-25 04:30

1 open merge request in Salsa normal

There is 1 open merge request for this package on Salsa. You should consider reviewing and/or merging these merge requests.

Created: 2025-12-03 Last update: 2026-05-21 19:18

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 3.0.3-2, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit 3c103aa4a6f0fc09427d44e4eec6bce638dc1da7
Merge: 00d2caa 85d32fc
Author: Paride Legovini <paride@debian.org>
Date:   Thu May 21 19:30:27 2026 +0200

    Merge branch 'sysusers' into 'debian/unstable'
    
    Install and use sysusers.d/tmpfiles.d config files
    
    See merge request debian/isc-kea!65

commit 85d32fc3570bb764107f60ed0969ac28745c7022
Author: Luca Boccassi <luca.boccassi@gmail.com>
Date:   Fri May 15 19:36:33 2026 +0100

    Install and use sysusers.d/tmpfiles.d config files
    
    sysusers.d/tmpfiles.d config files allow a package to use declarative
    configuration instead of manually written maintainer scripts. This also
    allows image-based systems to be created with /usr/ only, and also
    allows for factory resetting a system and recreating /etc/ on boot.
    
    https://www.freedesktop.org/software/systemd/man/latest/sysusers.d.html
    https://www.freedesktop.org/software/systemd/man/latest/tmpfiles.d.html

commit 00d2caab0da9563571c61fe87168d45085075367
Author: Paride Legovini <paride@debian.org>
Date:   Mon May 18 18:44:24 2026 +0200

    Salsa CI: do not fail on lintian warning: privacy-breach-generic

commit acb4a5f392f1cc7b1ccbe3ccc4456a2e9a9ddcbd
Author: Paride Legovini <paride@debian.org>
Date:   Mon May 18 16:17:50 2026 +0200

    Update changelog for 3.0.3-2 release

commit 1a1725b9fbe069046c6b19c09a1a0611cb7cd02e
Author: Paride Legovini <paride@debian.org>
Date:   Mon May 18 15:57:41 2026 +0200

    d/rules: set KEA_PKG_TYPE_IN_CONFIGURE=deb at configure time
    
    Fixes custom-library-search-path lintian errors.
    
    Gbp-Dch: Full

commit 3cf475b67307f198ccdd720e249e1fb4a9297d00
Author: Paride Legovini <paride@debian.org>
Date:   Mon May 18 15:32:57 2026 +0200

    d/kea-admin.l-o: drop unused script-not-executable override

commit e4dfdd355849ed130842ad913ef9065bc1924f47
Author: Paride Legovini <paride@debian.org>
Date:   Mon May 18 15:21:46 2026 +0200

    d/control: bump Standards-Version to 4.7.4, no changes needed

commit 67a25f5c0dcd238eee23236ff7287e33c159f499
Author: Paride Legovini <paride@debian.org>
Date:   Mon May 18 15:18:53 2026 +0200

    d/control: drop redundant Priority: optional

commit a905a57cbb4453ecd899acaa98041c8166e1c636
Author: Paride Legovini <paride@debian.org>
Date:   Mon May 18 15:18:21 2026 +0200

    d/control: drop redundant Rules-Requires-Root: no

Created: 2026-05-18 Last update: 2026-05-21 19:18

Multiarch hinter reports 1 issue(s) low

There are issues with the multiarch metadata for this package.

kea-doc could be marked Multi-Arch: foreign

Created: 2016-09-14 Last update: 2026-05-24 22:32

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.4 instead of 4.7.2).

Created: 2025-12-23 Last update: 2026-03-31 15:01

testing migrations

This package will soon be part of the auto-openssl transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.

news

[rss feed]

[2026-04-23] Accepted isc-kea 3.0.3-1~bpo13+1 (source amd64 all) into stable-backports (Debian FTP Masters) (signed by: Paride Legovini)
[2026-03-28] isc-kea 3.0.3-1 MIGRATED to testing (Debian testing watch)
[2026-03-25] Accepted isc-kea 3.0.3-1 (source) into unstable (Athos Ribeiro)
[2026-03-15] isc-kea 3.0.2-3 MIGRATED to testing (Debian testing watch)
[2026-03-11] Accepted isc-kea 3.0.2-3 (source) into unstable (Athos Ribeiro)
[2026-02-22] isc-kea 3.0.2-2 MIGRATED to testing (Debian testing watch)
[2026-02-20] Accepted isc-kea 3.0.2-2 (source) into unstable (Athos Ribeiro)
[2026-02-19] Accepted isc-kea 3.0.2-1 (source) into unstable (Athos Ribeiro)
[2025-09-01] isc-kea 2.6.4-1 MIGRATED to testing (Debian testing watch)
[2025-08-29] Accepted isc-kea 2.6.4-1 (source) into unstable (Paride Legovini)
[2025-08-27] Accepted isc-kea 2.6.3-2 (source) into unstable (Athos Ribeiro)
[2025-06-06] isc-kea 2.6.3-1 MIGRATED to testing (Debian testing watch)
[2025-06-03] Accepted isc-kea 2.6.3-1 (source) into unstable (Paride Legovini)
[2025-04-05] isc-kea 2.6.1-2 MIGRATED to testing (Debian testing watch)
[2025-04-02] Accepted isc-kea 2.6.1-2 (source) into unstable (Paride Legovini)
[2025-01-16] isc-kea 2.6.1-1 MIGRATED to testing (Debian testing watch)
[2025-01-07] Accepted isc-kea 2.6.1-1 (source) into unstable (Athos Ribeiro)
[2024-05-03] isc-kea 2.4.1-3 MIGRATED to testing (Debian testing watch)
[2024-03-29] Accepted isc-kea 2.4.1-3 (source) into unstable (Paride Legovini)
[2024-03-03] isc-kea 2.4.1-2 MIGRATED to testing (Debian testing watch)
[2024-02-26] Accepted isc-kea 2.4.1-2 (source) into unstable (Andreas Hasenack) (signed by: Athos Ribeiro)
[2023-12-18] isc-kea 2.4.1-1 MIGRATED to testing (Debian testing watch)
[2023-12-15] Accepted isc-kea 2.4.1-1 (source) into unstable (Athos Ribeiro)
[2023-10-30] isc-kea 2.4.0-1 MIGRATED to testing (Debian testing watch)
[2023-10-26] Accepted isc-kea 2.4.0-1 (source) into unstable (Athos Ribeiro)
[2023-09-29] isc-kea 2.2.1-3 MIGRATED to testing (Debian testing watch)
[2023-09-27] Accepted isc-kea 2.2.1-3 (source) into unstable (Paride Legovini)
[2023-09-15] isc-kea 2.2.1-2 MIGRATED to testing (Debian testing watch)
[2023-09-15] isc-kea 2.2.1-2 MIGRATED to testing (Debian testing watch)
[2023-09-12] Accepted isc-kea 2.2.1-2 (source) into unstable (Athos Ribeiro) (signed by: Paride Legovini)

bugs [bug history graph]

all: 14
RC: 0
I&N: 11
M&W: 3
F&P: 0
patch: 1

links

homepage
lintian (408, 3)
buildd: logs, reproducibility, cross
popcon
browse source code
other distros
security tracker
l10n (100, -)
debian patches
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 3.0.3-1
3 bugs