CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

net/kea 3.2.1_1

Alternative DHCP implementation by ISC

Port info

Maintainer
apevnev@me.com
Packages
latest: 3.2.1_1
Upstream
up to date
Last update
to 3.2.1_1 · c8c0949fbb
Quarterly
2026Q4: 3.2.1
WWW
https://kea.isc.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install kea
installs 3.2.1_1 from latest; from quarterly (2026Q4) 3.2.1
Port
# cd /usr/ports/net/kea && make install clean
# make -C /usr/ports/net/kea config  # change options first
Size
6.0 MiB download · 30 MiB installed
Depends on
devel/boost-libs 1.92.0, devel/log4cplus 2.2.1, lang/python312 3.12.15
License
MPL20
Options
1 of 4 on in the package: DOCS
Show the 3 options that are off
KERBEROS MYSQL PGSQL
pkg-message
Shown after upgrading
Please visit https://kb.isc.org/docs/things-to-be-aware-of-when-upgrading-to-kea-300 for upgrade instructions.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 163.2.1_13.2.1_1–
FreeBSD 153.2.1_13.2.1_1–
FreeBSD 143.2.1_13.2.1_13.2.1_1

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 153.2.13.2.1–
FreeBSD 143.2.13.2.13.2.1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 3.2.1_1.

Fixed (5)

Show 5 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (3) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
294045merge-quarterly+ net/kea: update to 3.0.3, fix CVE (in security/vuxml)In Progress2026-07-17
290674maintainer-feedback? net/kea: restart does not workNew2025-11-08
287598maintainer-feedback? net/kea [2.6.3_1]: After upgrade: Unable to open database: invalid path specified - only /var/db as folder allowedNew2025-06-25

Commits (112)

Guangyuan Yang (ygy)
net/key: Update to 2.0.0

Changes:	http://ftp.isc.org/isc/kea/2.0.0/Kea-2.0.0-ReleaseNotes.txt

PR:		258810
e77a2e47e3
Mathieu Arnold (mat)
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat)
all: Remove all other $FreeBSD keywords.
135fdeebb9
Mathieu Arnold (mat)
Remove # $FreeBSD$ from Makefiles.
305f148f48
Neel Chauhan (nc)
net/kea: Add MySQL and PostgreSQL to the REQUIRES line in the rc.d script.

This prevents database connection errors upon startup.

PR:		253559
Submitted by:	Kamigishi Rei <spambox AT haruhiism DOT net>
Approved by:	Andrey Pevnev <apevnev AT me DOT com> (maintainer)
acec845b61
Alexey Dokuchaev (danfe)
Update to version 1.8.2.

PR:		251905
Submitted by:	maintainer
facd0d2915
Kurt Jaeger (pi)
net/kea: upgrade 1.8.0 -> 1.8.1

PR:		251123
Submitted by:	Andrey Pevnev <apevnev@me.com> (maintainer)
Relnotes:	http://ftp.isc.org/isc/kea/1.8.1/Kea-1.8.1-ReleaseNotes.txt
5d3a48d7fe
Danilo G. Baio (dbaio)
net/kea: Fix colorized output for `keactl status`

It wasn't properly fixed in the upstream.

PR:		248973
Submitted by:	Andrey Pevnev <apevnev@me.com> (maintainer)
Reported by:	Jose Luis Duran <jlduran@gmail.com>
Event:	September 2020 Bugathon
dc7620de27
Danilo G. Baio (dbaio)
net/kea: Add back DISTNAME

I shouldn't have removed the DISTNAME variable in ports r548437, it will be
necessary in a future -P1 release.

PR:		248973
b8abcf61d7
Danilo G. Baio (dbaio)
net/kea: Update to 1.8.0

DISTNAME is ${PORTNAME}-${PORTVERSION} by default -- portlint

PR:		248973
Submitted by:	Andrey Pevnev <apevnev@me.com> (maintainer)
5f495c77aa
Li-Wen Hsu (lwhsu)
Update to 1.6.3

PR:		248507
Submitted by:	Andrey Pevnev <apevnev@me.com> (maintainer)
023d680adf
Kurt Jaeger (pi)
net/kea: update 1.6.1 -> 1.6.2

PR:		244472
Submitted by:	Andrey Pevnev <apevnev@me.com> (maintainer)
Relnotes:	https://downloads.isc.org/isc/kea/1.6.2/Kea162ReleaseNotes.txt
93bf896dbc
Jan Beich (jbeich)
devel/boost-*: update to 1.72.0

Changes:	http://www.boost.org/users/history/version_1_72_0.html
PR:		241449
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D22136
701aa3bcf8
Jochen Neumeister (joneum)
Update to 1.6.1

Changelog: https://downloads.isc.org/isc/kea/1.6.1/Kea161ReleaseNotes.txt

PR:		242127
Submitted by:	Andrey Pevnev <apevnev@me.com> (maintainer)
Sponsored by:	Netzkommune GmbH
975f858203
Tobias Kortkamp (tobik)
Move remaining USE_MYSQL, WANT_MYSQL_VER to USES=mysql
581cac9416
Koichiro Iwao (meta)
net/kea: Pet portlint, rclint

Also, add patch to support colorized output for `keactl status`.

PR:		241349
Submitted by:	Jose Luis Duran <jlduran@gmail.com>
Approved by:	 Andrey Pevnev <apevnev@me.com> (maintainer)
6b4e300cbd
Baptiste Daroussin (bapt)
Drop the ipv6 virtual category for n* category as it is not relevant anymore
88a9b99e26
Kurt Jaeger (pi)
net/kea: fix build without DOCS

PR:		240792
Submitted by:	Christian Ullrich <chris@chrullrich.net>
Approved by:	Andrey Pevnev <apevnev@me.com> (maintainer)
81f0ae2f40
Kurt Jaeger (pi)
net/kea: upgrade 1.5.0 -> 1.6.0

- submitter becomes maintainer

PR:		240399
Submitted by:	Andrey Pevnev <apevnev@me.com>
Approved by:	hrs (maintainer)
MFH:		2019Q3
Relnotes:	https://downloads.isc.org/isc/kea/1.6.0/Kea160ReleaseNotes.txt
Security:	CVE-2019-6472, CVE-2019-6473, CVE-2019-6474
44f465f193
Piotr Kubaj (pkubaj)
devel/log4cplus: use new GCC on GCC platforms to fix net/kea

Approved by:	mentors (implicit approval)
84170011d0
Jan Beich (jbeich)
devel/boost-*: update to 1.71.0

Changes:	http://www.boost.org/users/history/version_1_71_0.html
PR:		238827
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D20774
befa71e0f3
Gerald Pfeifer (gerald)
Bump PORTREVISION for ports depending on the canonical version of GCC as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3 to GCC 9.1 under most circumstances now after revision 507371.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.

PR:		238330
ea8c8ec7da
Jan Beich (jbeich)
devel/boost-*: update to 1.70.0

Changes:	http://www.boost.org/users/history/version_1_70_0.html
PR:		235956
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D19303
9b21a3a084
Kurt Jaeger (pi)
net/kea: unbreak if PGSQL or MYSQL is selected

PR:		234530
Reported by:	Matt Smith <matt.xtaz@gmail.com>
Approved by:	hrs (well, sortof)
a7a8d8bb19
Kurt Jaeger (pi)
net/kea: upgrade 1.4.0-P1 -> 1.5.0

PR:		234032
Submitted by:	Andrey Pevnev <apevnev@me.com>
Approved by:	hrs (maintainer timeout)
Relnotes:	https://gitlab.isc.org/isc-projects/kea/blob/Kea-1.5.0/ChangeLog
		https://ftp.isc.org/isc/kea/1.5.0/Kea150ReleaseNotes.txt
69deeb18ad
Gerald Pfeifer (gerald)
Bump PORTREVISION for ports depending on the canonical version of GCC defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t GCC 8.2 under most circumstances.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, as a double check, everything INDEX-11 showed depending on lang/gcc7.

PR:		231590
a9f015d155
Jan Beich (jbeich)
devel/boost-*: update to 1.69.0

Changes:	http://www.boost.org/users/history/version_1_69_0.html
PR:		232525
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D17645
7c879267dc
Kurt Jaeger (pi)
net/kea: change WWW from http to https

PR:		229088
5c50062980
Kurt Jaeger (pi)
net/kea: update 1.3.0 -> 1.4.0-P1

PR:		229088
Submitted by:	Andrey Pevnev <apevnev@me.com>
Reviewed by:	Jeff Kletsky <jeff+freebsd@wagsky.com>
Approved by:	hrs (maintainer timeout)
Relnotes:	https://ftp.isc.org/isc/kea/1.4.0/Kea140ReleaseNotes.txt
		https://ftp.isc.org/isc/kea/1.4.0-P1/Kea140P1ReleaseNotes.txt
		https://www.isc.org/blogs/kea-1-4-adds-high-availability-mode/
		https://kb.isc.org/docs/aa-01615
d6af702448
Koichiro Iwao (meta) · 1.3.0_4
net/kea: remove unused dependency on python 3.3+

Also,
* Bump PORTREVISION due to dependency change

PR:		220907
Submitted by:	Andrew Fyfe
Approved by:	maintainer timeout (15 months), mentors (implicit)
36b6e91b32
Jan Beich (jbeich) · 1.3.0_3
devel/boost-*: update to 1.68.0

- Switch to C++14 for libboost_system to support C++14 consumers

Changes:	http://www.boost.org/users/history/version_1_68_0.html
PR:		229569
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D16165
0b055d47f2
Gerald Pfeifer (gerald) · 1.3.0_2
Bump PORTREVISION for ports depending on the canonical version of GCC in the ports tree (via Mk/bsd.default-versions.mk and lang/gcc) which has now moved from GCC 6 to GCC 7 by default.

This includes ports
 - featuring USE_GCC=yes or USE_GCC=any,
 - featuring USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and those
 - with USES=compiler specifying one of openmp, nestedfct, c11, c++0x,
   c++11-lib, c++11-lang, c++14-lang, c++17-lang, or gcc-c++11-lib.

PR:		222542
09f9633cb6
Jan Beich (jbeich) · 1.3.0_1
net/kea: unbreak with boost 1.68

libdhcp++.cc:420:24: error: call to 'distance' is ambiguous
            num_defs = distance(range.first, range.second);
                       ^~~~~~~~
libdhcp++.cc:428:24: error: call to 'distance' is ambiguous
            num_defs = distance(range.first, range.second);
                       ^~~~~~~~
libdhcp++.cc:537:24: error: call to 'distance' is ambiguous
            num_defs = distance(range.first, range.second);
                       ^~~~~~~~
libdhcp++.cc:545:24: error: call to 'distance' is ambiguous
            num_defs = distance(range.first, range.second);
                       ^~~~~~~~
libdhcp++.cc:637:31: error: call to 'distance' is ambiguous
            size_t num_defs = distance(range.first, range.second);
                              ^~~~~~~~
libdhcp++.cc:743:35: error: call to 'distance' is ambiguous
                size_t num_defs = distance(range.first, range.second);
                                  ^~~~~~~~
/usr/include/c++/v1/iterator:511:1: note: candidate function [with _InputIter = boost::multi_index::detail::hashed_index_iterator<boost::multi_index::detail::hashed_index_node<boost::multi_index::detail::hashed_index_node<boost::multi_index::detail::index_node_base<boost::shared_ptr<isc::dhcp::OptionDefinition>, std::__1::allocator<boost::shared_ptr<isc::dhcp::OptionDefinition> > >, boost::multi_index::detail::hashed_non_unique_tag>, boost::multi_index::detail::hashed_non_unique_tag>, boost::multi_index::detail::bucket_array<std::__1::allocator<boost::shared_ptr<isc::dhcp::OptionDefinition> > >, boost::multi_index::detail::hashed_index_global_iterator_tag>]
distance(_InputIter __first, _InputIter __last)
^
/usr/local/include/boost/iterator/distance.hpp:49:9: note: candidate function [with SinglePassIterator = boost::multi_index::detail::hashed_index_iterator<boost::multi_index::detail::hashed_index_node<boost::multi_index::detail::hashed_index_node<boost::multi_index::detail::index_node_base<boost::shared_ptr<isc::dhcp::OptionDefinition>, std::__1::allocator<boost::shared_ptr<isc::dhcp::OptionDefinition> > >, boost::multi_index::detail::hashed_non_unique_tag>, boost::multi_index::detail::hashed_non_unique_tag>, boost::multi_index::detail::bucket_array<std::__1::allocator<boost::shared_ptr<isc::dhcp::OptionDefinition> > >, boost::multi_index::detail::hashed_index_global_iterator_tag>]
        distance(SinglePassIterator first, SinglePassIterator last)
        ^

PR:		229569
c8688e426d
Jan Beich (jbeich) · 1.3.0_1
devel/boost-*: update to 1.67.0

Changes:	http://www.boost.org/users/history/version_1_67_0.html
PR:		227427
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D15030
cc95712fbe
Hiroki Sato (hrs) · 1.3.0
Fix build.

PR:	226272
aba5e016f0
Hiroki Sato (hrs) · 1.3.0
Update to 1.3.0.
a286fcc1b1
Jan Beich (jbeich) · 1.2.0_4
net/kea: unbreak with boost 1.66

PR:		224184
Submitted by:	Bartłomiej Piotrowski
Obtained from:	Arch Linux (via upstream)
Approved by:	maintainer timeout (3 weeks)
e81ca34eba
Jan Beich (jbeich) · 1.2.0_4
devel/boost-*: update to 1.66.0

Changes:	http://www.boost.org/users/history/version_1_66_0.html
PR:		223922
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D13279
25beeff079
Danilo G. Baio (dbaio) · 1.2.0_3
Update license of ports using MPL (without version)

All ports now should use MPL[10|11|20] license.

Approved by:	portmgr (blanket)
c27d4e377f
Jan Beich (jbeich) · 1.2.0_3
devel/boost-*: update to 1.65.1

Changes:	http://www.boost.org/users/history/version_1_65_1.html
PR:		218835
Approved by:	maintainer timeout (1.65.1: 2 weeks; 1.65.0: 1 month)
Tested by:	jhibbits (on powerpc64, earlier version)
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D11582
98eb11b2f0
Jan Beich (jbeich) · 1.2.0_2
devel/boost-*: enable C++11 features

PR:		218835
Obtained from:	https://github.com/DragonFlyBSD/DeltaPorts/pull/690
Approved by:	maintainer timeout (2 months)
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D11582
7e21a6476a
Gerald Pfeifer (gerald) · 1.2.0_1
Bump PORTREVISION for ports depending on the canonical version of GCC (via Mk/bsd.default-versions.mk and lang/gcc) which has moved from GCC 5.4 to GCC 6.4 under most circumstances.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c++11-lib, c++11-lang,
   c++14-lang, c++0x, c11, or gcc-c++11-lib.

PR:		219275
e59c88cece
Dmitry Marakasov (amdmi3) · 1.2.0
- Update to 1.2.0 - While here, add test support

PR:		219263
Submitted by:	pi
Approved by:	maintainer timeout (hrs, 3 weeks)
8938f5e593
Mark Linimon (linimon) · 1.1.0_5
Mark some ports failing on power64.  In cases where the error message was a stub, provide a real one.

While here, pet portlint.

Approved by:	portmgr (tier-2 blanket)
Reported by:	swills
82c3cac0d2
Jan Beich (jbeich) · 1.1.0_5
devel/boost-*: update to 1.64.0

Changes:	http://www.boost.org/users/history/version_1_64_0.html
PR:		218835
Approved by:	office (bapt)
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D10472
b324ade02d
Gerald Pfeifer (gerald) · 1.1.0_4
Bump PORTREVISIONs for ports depending on the canonical version of GCC and lang/gcc which have moved from GCC 4.9.4 to GCC 5.4 (at least under some circumstances such as versions of FreeBSD or platforms).

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using using Mk/bsd.octave.mk which in turn has USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c++11-lib, c++14-lang,
   c++11-lang, c++0x, c11, or gcc-c++11-lib.

PR:		216707
04d6f52202
Jan Beich (jbeich) · 1.1.0_3
devel/boost-*: update to 1.63.0

Changes:	http://www.boost.org/users/history/version_1_63_0.html
PR:		215598
Exp-run by:	antoine
Approved by:	office (bapt)
MFH:		2017Q1
59e02117ae
Cy Schubert (cy) · 1.1.0_2
Fix build due to breakage from r426825, targeting net/ntp*. The patch to net/kea/pkg-plist was never intended in r426825. r426825 was for net/ntp* only.

PR:		215610
Reported by:	jbeich
Pointy hat to:	cy (me)
0cf6ed72c3
Jan Beich (jbeich) · 1.1.0_2
devel/boost-*: update to 1.62.0

- Enable `long double` C99 math usage
- Switch 9.x back to building with GCC

Changes:	http://www.boost.org/users/history/
PR:		199601
Submitted by:	Chen Xu, bapt, amdmi3, truckman (based on)
Reviewed by:	rakuco (kde) (earlier version)
Exp-run by:	antoine (3 tries), truckman (consumers only, earlier versions)
Approved by:	bapt (office)
a8713d15f4
Cy Schubert (cy) · 1.1.0_1
Configure leap-second smearing (always).

Leap-second smearing is an experimental option that may be specified in
ntp.conf(5) to spread the effect of a leap-second over an interval as
specified by the leapsmearinterval config file statement. Recommended
values are between 7200 (2 hours) and 86400 (24 hours).

It is advised that leap-second smearing not be used for public NTP
servers (https://www.meinbergglobal.com/download/burnicki/Leap\
%20Second%20Smearing%20With%20NTP.pdf). It is also advised that NTP
clients not use a mix of NTP servers using leap-second smearing with
NTP servers not using leap-second smearing as that could cause
undefined client behaviour.

Suggested by:	des
28a9fdda41