CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

net/kea 3.2.1_1

Alternative DHCP implementation by ISC

Port info

Maintainer
apevnev@me.com
Packages
latest: 3.2.1_1
Upstream
up to date
Last update
to 3.2.1_1 · c8c0949fbb
Quarterly
2026Q4: 3.2.1
WWW
https://kea.isc.org/
Links
cgit · VuXML

Install

Package
# pkg install kea
installs 3.2.1_1 from latest; from quarterly (2026Q4) 3.2.1
Port
# cd /usr/ports/net/kea && make install clean
# make -C /usr/ports/net/kea config  # change options first
Size
6.0 MiB download · 30 MiB installed
Depends on
devel/boost-libs 1.92.0, devel/log4cplus 2.2.1, lang/python312 3.12.15
License
MPL20
Options
1 of 4 on in the package: DOCS
Show the 3 options that are off
KERBEROS MYSQL PGSQL
pkg-message
Shown after upgrading
Please visit https://kb.isc.org/docs/things-to-be-aware-of-when-upgrading-to-kea-300 for upgrade instructions.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 163.2.1_13.2.1_1–
FreeBSD 153.2.1_13.2.1_1–
FreeBSD 143.2.1_13.2.1_13.2.1_1

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 153.2.13.2.1–
FreeBSD 143.2.13.2.13.2.1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 3.2.1_1.

Fixed (5)

Show 5 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (3) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
294045merge-quarterly+ net/kea: update to 3.0.3, fix CVE (in security/vuxml)In Progress2026-07-17
290674maintainer-feedback? net/kea: restart does not workNew2025-11-08
287598maintainer-feedback? net/kea [2.6.3_1]: After upgrade: Unable to open database: invalid path specified - only /var/db as folder allowedNew2025-06-25

Commits (112)

Xin LI (delphij) · 3.2.1_1
devel/log4cplus: update to 2.2.1

The shared library version changed from 9 to 11, so bump
PORTREVISION of net/kea and net/kea-devel.

Upstream's new pkg-config install code, once rewritten by
USES=pathfix, installed a second log4cplus.pc under a doubled
prefix; patch CMakeLists.txt to correct the path.
c8c0949fbb
Vladimir Druzenko (vvd) · 3.2.1
net/kea: Update 3.2.0 => 3.2.1

Release Notes:
https://downloads.isc.org/isc/kea/3.2.1/Kea-3.2.1-ReleaseNotes.txt

PR:		298999 297304
Sponsored by:	UNIS Labs (vvd, commit patch)
Co-authored-by:	Mark Holm <mail@mail-in.dk>
2acc1a8f74
Dima Panov (fluffy) · 3.2.0_2
*/*: update boost consumers after boost-1.92
97a84ef467
Dima Panov (fluffy) · 3.2.0_1
*/*: bump consumers after devel/boost update
213840c151
Vladimir Druzenko (vvd) · 3.2.0
net/kea: Update 3.0.3 => 3.2.0

Release Notes:
https://gitlab.isc.org/isc-projects/kea/-/wikis/Release-Notes/release-notes-3.2.0

Upgrading:
https://kb.isc.org/docs/things-to-be-aware-of-when-upgrading-to-kea-3-2

PR:		296258
Sponsored by:	UNIS Labs
6e475f022d
Dima Panov (fluffy) · 3.0.3
net/kea: add missed #include <boost/static_assert.hpp>

This fixes build with boost-1.91+

Approved by:	portmgr blanket
b2761a16ca
Vladimir Druzenko (vvd) · 3.0.3
net/kea: Update 3.0.2 => 3.0.3

Release Notes:
https://downloads.isc.org/isc/kea/3.0.3/Kea-3.0.3-ReleaseNotes.txt

PR:		294045
Security:	CVE-2026-3608
MFH:		2026Q1
74997bb77e
Michael Osipov (michaelo) · 3.0.2_2
net/kea{,-devel}: Use documented placeholder NETWOKING in RC scripts

PR:		293652
Approved by:	apevnev@me.com (maintainer)
Differential Revision:	https://reviews.freebsd.org/D55712
524b57fcc5
Vladimir Druzenko (vvd) · 3.0.2_1
net/kea: Fix malformed manpages, improve port

Manuals are malformed like:
----------
    kea-admin - Shell script for managing Kea databases -

     System Message: ERROR/3 (kea-admin.8.rst:, line 11)
            Unknown directive type "iscman".

        .. iscman:: kea-admin
----------

----------
     :program:`kea-admin`
      [command] [backend] [-h database_host] [-P database_port] [-u
     database_username] [-p [database_password]] [-n database_name] [-d
     script_directory] [-v] [-x extra_argument [-x extra_argument ...]] [-4 |
     -6] [-i input_file] [-o output_file] [-y]

     System Message: ERROR/3 (kea-admin.8.rst:, line 19)
            Unknown interpreted text role "program".
----------
Remove directives that rst2man (py-docutils) does not understand.

Improve port (no functional changes):
- Fix warnings from portclippy.
- Sort USES.
- Optimize post-install.

PR:		292094
MFH:		2026Q1
Co-authored-by:	Vladimir Druzenko <vvd@FreeBSD.org>
8ee7012cf6
Dima Panov (fluffy) · 3.0.2
net/kea: prepare for Boost-1.90 (+)

Ensure logger always have #include <boost/static_assert.hpp>

c++ -Isrc/lib/log/libkea-log.so.75.0.0.p -Isrc/lib/log -I../src/lib/log -I. -I.. -Isrc -I../src -Isrc/bin -I../src/bin -Isrc/lib -I../src/lib -I/usr/local/include -fdiagnostics-color=never -D_LIBCPP_HAR
../src/lib/log/logger_level_impl.cc:47:5: error: use of undeclared identifier 'BOOST_STATIC_ASSERT'
   47 |     BOOST_STATIC_ASSERT(static_cast<int>(DEFAULT) == 0);
      |     ^
../src/lib/log/logger_level_impl.cc:48:5: error: use of undeclared identifier 'BOOST_STATIC_ASSERT'
   48 |     BOOST_STATIC_ASSERT(static_cast<int>(DEBUG) == 1);
      |     ^
../src/lib/log/logger_level_impl.cc:49:5: error: use of undeclared identifier 'BOOST_STATIC_ASSERT'
   49 |     BOOST_STATIC_ASSERT(static_cast<int>(INFO) == 2);
      |     ^
../src/lib/log/logger_level_impl.cc:50:5: error: use of undeclared identifier 'BOOST_STATIC_ASSERT'
   50 |     BOOST_STATIC_ASSERT(static_cast<int>(WARN) == 3);
      |     ^
../src/lib/log/logger_level_impl.cc:51:5: error: use of undeclared identifier 'BOOST_STATIC_ASSERT'
   51 |     BOOST_STATIC_ASSERT(static_cast<int>(ERROR) == 4);
      |     ^
../src/lib/log/logger_level_impl.cc:52:5: error: use of undeclared identifier 'BOOST_STATIC_ASSERT'
   52 |     BOOST_STATIC_ASSERT(static_cast<int>(FATAL) == 5);
      |     ^
../src/lib/log/logger_level_impl.cc:53:5: error: use of undeclared identifier 'BOOST_STATIC_ASSERT'
   53 |     BOOST_STATIC_ASSERT(static_cast<int>(NONE) == 6);
      |     ^
7 errors generated.
8f1f84de98
R. Christian McDonald (rcm) · 3.0.2
net/kea*: update to fix CVE-2025-11232

News:
https://kb.isc.org/docs/cve-2025-11232

PR:		290660
Reviewed by:	brd
MFH:		2025Q4
Security:	CVE-2025-11232
Sponsored by:	Rubicon Communications, LLC ("Netgate")
372e31f0af
Dima Panov (fluffy) · 3.0.1_2
devel/boost: bump consumers after boost upgrade (+)

Get rid of direct dependency ob libbost_system.so, use libboost_thread.so instead
67fb95fb3b
Daniel Engberg (diizzy) · 3.0.1_1
*/*: Remove libtool dependency

None of these ports utilizes libtool
Build tested using Poudriere

Approved by:	blanket, build fix
7f25f24de0
Dima Panov (fluffy) · 3.0.1_1
net/kea: prepare for Boost-1.89, do not link with stub Boost::system

Backport upstream MR2771 (https://gitlab.isc.org/isc-projects/kea/-/merge_requests/2771)

Approved by:	portmgr blanket
4e1ace6157
Renato Botelho (garga) · 3.0.1
net/kea: Update to 3.0.1

PR:		289139
MFH:		2025Q3
Security:	CVE-2025-40779
df08e10bd6
Cy Schubert (cy) · 3.0.0_5
net/kea: Fix shebangfix QA error for real

Thank you to fluffy@ for the real solution using shebangfix.
cc18c24381
Cy Schubert (cy) · 3.0.0_4
net/kea: Revert part of d3b93d68cde7

Fixing stage-qa breaks configure on systems without python installed.

Reported by:	Andrey Pevnev <apevnev@me.com>
0d3f06e3f2
Cy Schubert (cy) · 3.0.0_3
net/kea: Fix shebangfix QA error

QA flags a shebang in kea-shell. Unfortunately USES=shebangfix
fails to resolve the issue because the shebang it sees is unexpected.
980f46b41d
Cy Schubert (cy) · 3.0.0_2
net/kea: Fix two QA issues

Fix extraneous /var/lib creation. It is not used.

Fix python3 duplicate BUILD_DEPENDS. QA flags this when USES=python
should be used.
d3b93d68cd
Cy Schubert (cy) · 3.0.0_1
net/kea*: Add pkgconfig dependency

This addresses PR/288831 kea fails to build with PGSQL backend.

PR:		288831
Submitted by:	Andrey Pevnev <apevnev@me.com>
6c80207685
Cy Schubert (cy) · 3.0.0
net/kea: update to 3.0.0

PR:		287845
Release Notes:	https://ftp.isc.org/isc/kea/3.0.0/Kea-3.0.0-ReleaseNotes.txt
Update info:	https://kb.isc.org/docs/things-to-be-aware-of-when-upgrading-to-kea-300
882561dec7
Charlie Li (vishwin) · 2.6.3_1
python.mk: rename PYTHON_EXT_SUFFIX to PYTHON_TAG, document, etc

EXT_SUFFIX, according to PEP 3149, refers to the full tag and
extension for compiled extension module objects, eg .cpython-311.so,
.cpython-313t.so, etc. We do not use the correct semantic meaning,
and this usage becomes ambiguous and confusing when tags do not
match between bytecode and compiled extension module objects.

Rename our PYTHON_EXT_SUFFIX to PYTHON_TAG to align with PEP 3147's
specification of a magic tag, which consists of implementation name
and shorthand version only. This is meant for bytecode and other
files containing this tag in their filename that do not depend on
a specific Python ABI for the same version. Chase all existing
consumers.

Introduce PYTHON_SOABI to align with PEP 3149's specification of a
tag, which consists of implementation name, shorthand version and
any ABI flags present (this and PYTHON_TAG are identical without
ABI flags). This is meant for compiled extension module objects and
other files that depend on a specific Python ABI for the same
version.

Add documentation for these variables that our PYTHON_EXT_SUFFIX
never had.

PR: 274671
Event: Kitchener-Waterloo Hackathon 202506
4f0eba1efd
Dima Panov (fluffy) · 2.6.3_1
devel/boost: bump consumers after Boost update
18632db919
Brad Davis (brd) · 2.6.3
net/kea: Update to 2.6.3

PR:		287120
MFH:		2025Q2
Security:	34744aab-3bf7-11f0-b81c-001b217e4ee5
af0648d7c6
Zsolt Udvari (uzsolt) · 2.6.2
net/kea: Update to 2.6.2

Changelog:
https://downloads.isc.org/isc/kea/2.6.2/Kea-2.6.2-ReleaseNotes.txt

PR:		285675
Approved by:	submitter is maintainer
ec2fdac123
Cy Schubert (cy) · 2.6.1_2
net/kea-devel: Welcome kea-devel, tracking the development branch

The kea 2.7.X branch tracks kea development. We are importing 2.7.6
here. The development branch includes many fixes not in the 2.6.X
(stable) branch such as LLVM 19 and boost 1.87 support.

Note that just like bind9, also developed by ISC (isc.org), even version
numbers, i.e. 2.6, are stable branch while odd numbered version numbers,
i.e. 2.7, are development branch.
b05ad41721
Cy Schubert (cy) · 2.6.1_2
net/kea: Fix build following boost 1.87 import

Fix build following a4245a4c6ce1.

Obtained from:	upstream 81edc181f8 -  Update asiolink for boost 1.87
4db2ed6923
Dima Panov (fluffy) · 2.6.1_2
net/kea: mark as BROKEN with Boost>=1.87 (+)

Since 1.87 release some long-time-ago deprecated Boost.asio facilities was dropped off

Sponsored by:	Future Crew, LLC
895ad4a602
Dima Panov (fluffy) · 2.6.1_2
devel/boost: bump consu,ers after update Boost to 1.86 release

Sponsored by:	Future Crew, LLC
312ee18b02
Dima Panov (fluffy) · 2.6.1_1
*/*: bump consumers after devel/boost* update

With hat:	office
Sponsored by:	Future Crew, LLC
55cfbcf56c
Dimitry Andric (dim) · 2.6.1
net/kea: update patch for building with libc++ 19

In https://gitlab.isc.org/isc-projects/kea/-/merge_requests/2410,
Francis Dupont noted there were some errors in the unit tests.

These were due to mistakes on my side, so I now made sure all the unit
tests pass (they silently require GoogleTest!), and updated the upstream
merge request. I hope this goes in soon, but it all seems to take a long
time.

PR:		281124
Approved by:	apevnev@me.com (maintainer)
MFH:		2024Q3
f3bf83db98
Dimitry Andric (dim) · 2.6.1
net/kea: fix build with libc++ 19

As noted in the libc++ 19 release notes [1], std::char_traits<> is now
only provided for char, char8_t, char16_t, char32_t and wchar_t, and any
instantiation for other types will fail.

This causes net/kea to fail to compile with clang 19 and libc++ 19,
resulting in errors similar to:

    In file included from edns.cc:9:
    In file included from ../../../src/lib/exceptions/exceptions.h:11:
    /usr/include/c++/v1/string:820:42: error: implicit instantiation of undefined template 'std::char_traits<unsigned char>'
      820 |   static_assert(is_same<_CharT, typename traits_type::char_type>::value,
          |                                          ^
    ../../../src/lib/dns/name.h:727:16: note: in instantiation of template class 'std::basic_string<unsigned char>' requested here
      727 |     NameString ndata_;
          |                ^
    /usr/include/c++/v1/__fwd/string.h:23:29: note: template is declared here
       23 | struct _LIBCPP_TEMPLATE_VIS char_traits;
          |                             ^

`NameString` is defined as `std::basic_string<unsigned char>`, which is
no longer possible. So redefine it as a `std::vector<unsigned char>`
instead.

This requires a few adjustments in other places: adjusting the arguments
for the `assign()` method, which for `std::vector` takes a begin and end
iterator, instead of a begin iterator and a size, and replacing the
`append()` method with an equivalent `insert()`.

These changes have also been sent upstream [2].

[1] https://libcxx.llvm.org/ReleaseNotes/19.html#deprecations-and-removals
[2] https://gitlab.isc.org/isc-projects/kea/-/merge_requests/2410

PR:		280696
Approved by:	apevnev@me.com (maintainer)
MFH:		2024Q3
eddc2f815b
Vladimir Druzenko (vvd) · 2.6.1
net/kea: update 2.6.0 → 2.6.1

Release Notes:
https://downloads.isc.org/isc/kea/2.6.1/Kea-2.6.1-ReleaseNotes.txt

Remove GNU_CONFIGURE_MANPREFIX.

PR:	280540
7532375f7a
Guido Falsi (madpilot) · 2.6.0
net/kea: Update to 2.6.0

- Use DISTVERSION to account for upstream release numbering strategy
- Cleanup Makefile, reorder/sort variables
- Put WANT_PGSQL inside optional PGSQL_VARS

PR:	279376
d2749ec073
Muhammad Moinur Rahman (bofh)
net/kea: Moved man to share/man

Approved by:    portmgr (blanket)
e2f436f1cf
Dima Panov (fluffy)
devel/boost: bump consumers after library update
db616534ff
Koichiro Iwao (meta)
net/kea: Update to 2.4.1

PR:		275454
Changes:	https://downloads.isc.org/isc/kea/2.4.1/Kea-2.4.1-ReleaseNotes.txt
58ffe1cc45
Dima Panov (fluffy)
devel/boost*: bump all consumers after 1.83.0
21d8008e86
Fernando Apesteguía (fernape)
net/kea: update to 2.4.0

ChangeLog: https://downloads.isc.org/isc/kea/2.4.0/Kea-2.4.0-ReleaseNotes.txt

PR:		272385
Reported by:	apevnev@me.com (maintainer)
20f8a3dc6e
Rene Ladan (rene)
all: remove explicit versions in USES=python for "3.x+"

The logic in USES=python will automatically convert this to 3.8+ by
itself.

Adjust two ports that only had Python 3.7 mentioned but build fine
on Python 3.8 too.

finance/quickfix: mark BROKEN with PYTHON

libtool: compile:  c++ -DHAVE_CONFIG_H -I. -I../.. -I -I. -I.. -I../.. -I../C++ -DLIBICONV_PLUG -DPYTHON_MAJOR_VERSION=3 -Wno-unused-variable -Wno-maybe-uninitialized -O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong -fno-strict-aliasing -DLIBICONV_PLUG -Wall -ansi -Wno-unused-command-line-argument -Wpointer-arith -Wwrite-strings -Wno-overloaded-virtual -Wno-deprecated-declarations -Wno-deprecated -std=c++0x -MT _quickfix_la-QuickfixPython.lo -MD -MP -MF .deps/_quickfix_la-QuickfixPython.Tpo -c QuickfixPython.cpp  -fPIC -DPIC -o .libs/_quickfix_la-QuickfixPython.o
warning: unknown warning option '-Wno-maybe-uninitialized'; did you mean '-Wno-uninitialized'? [-Wunknown-warning-option]
QuickfixPython.cpp:175:11: fatal error: 'Python.h' file not found
          ^~~~~~~~~~
1 warning and 1 error generated.

Reviewed by:	portmgr, vishwin, yuri
Differential Revision:	<https://reviews.freebsd.org/D40568>
3d9a815d9c
Dima Panov (fluffy)
*/*: bump all direct Boost cunsumers
3e45e8e244
Dima Panov (fluffy)
*/*:	bump libboost*.so libraries consumert after Boost upgrade
e1287d0d12
Stefan Eßer (se)
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se)
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Dima Panov (fluffy)
*/*: bump all consumers after recent boost upgrade
4cf39decb3
Nuno Teixeira (eduardo)
net/kea: Update to 2.2.0

ChangeLog:	https://downloads.isc.org/isc/kea/2.2.0/Kea-2.2.0-ReleaseNotes.txt
PR:		265469
f5ef5d349b
Dima Panov (fluffy)
devel/boost-all: bump all library consumers after boost upgrade

PR:	246106
b082b3d13e
Fernando Apesteguía (fernape)
net/kea: update to 2.0.2

ChangeLog: https://ftp.isc.org/isc/kea/2.0.2/Kea-2.0.2-ReleaseNotes.txt

PR:	262326
Reported by:	apevnev@me.com (maintainer)
5b058e4bf4
Dries Michiels (driesm)
net/kea: Update to 2.0.1

Changes:		https://ftp.isc.org/isc/kea/2.0.1/Kea-2.0.1-ReleaseNotes.txt
PR:			260455
Approved by:		philip (mentor)
Differential Revision:	https://reviews.freebsd.org/D33519
2ce910765c
Li-Wen Hsu (lwhsu)
net/kea: Add an option to install kea-shell(8)

PR:		259856
Approved by:	Andrey Pevnev <apevnev@me.com> (maintainer)
43b8f6460a