CVE and update status of the FreeBSD ports tree3,296 unaddressed CVEs in 671 portsAll times are CET
Port details

net/kea 3.2.1_1

Alternative DHCP implementation by ISC

Port info

Maintainer
apevnev@me.com
Packages
latest: 3.2.1_1
Upstream
up to date
Last update
to 3.2.1_1 · c8c0949fbb
Quarterly
2026Q4: 3.2.1
WWW
https://kea.isc.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install kea
installs 3.2.1_1 from latest; from quarterly (2026Q4) 3.2.1
Port
# cd /usr/ports/net/kea && make install clean
# make -C /usr/ports/net/kea config  # change options first
Size
6.0 MiB download · 30 MiB installed
Depends on
devel/boost-libs 1.92.0, devel/log4cplus 2.2.1, lang/python312 3.12.15
License
MPL20
Options
1 of 4 on in the package: DOCS
Show the 3 options that are off
KERBEROS MYSQL PGSQL
pkg-message
Shown after upgrading
Please visit https://kb.isc.org/docs/things-to-be-aware-of-when-upgrading-to-kea-300 for upgrade instructions.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 163.2.1_13.2.1_1–
FreeBSD 153.2.1_13.2.1_1–
FreeBSD 143.2.1_13.2.1_13.2.1_1

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 153.2.13.2.1–
FreeBSD 143.2.13.2.13.2.1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 3.2.1_1.

Fixed (5)

Show 5 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (3) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
294045merge-quarterly+ net/kea: update to 3.0.3, fix CVE (in security/vuxml)In Progress2026-07-17
290674maintainer-feedback? net/kea: restart does not workNew2025-11-08
287598maintainer-feedback? net/kea [2.6.3_1]: After upgrade: Unable to open database: invalid path specified - only /var/db as folder allowedNew2025-06-25

Commits (112)

Jan Beich (jbeich) · 1.1.0_1
net/kea: unbreak build with boost 1.62 on 9.x

`_ZZN5boost6system15system_categoryEvE21system_category_const' referenced in section `.text' of .libs/libkea_asiolink_la-io_address.o: defined in discarded section `.bss._ZZN5boost6system15system_categoryEvE21system_category_const[_ZZN5boost6system15system_categoryEvE21system_category_const]' of .libs/libkea_asiolink_la-io_address.o
`_ZZN5boost6system16generic_categoryEvE22generic_category_const' referenced in section `.text' of .libs/libkea_asiolink_la-io_address.o: defined in discarded section `.bss._ZZN5boost6system16generic_categoryEvE22generic_category_const[_ZZN5boost6system16generic_categoryEvE22generic_category_const]' of .libs/libkea_asiolink_la-io_address.o
[...]

PR:		199601
Reported by:	antoine (via exp-run)
Approved by:	portmgr blanket
789be6c327
Hiroki Sato (hrs) · 1.1.0
Update to 1.1.0.

PR:	213457
58f32c98e5
Mathieu Arnold (mat) · 1.0.0
Use USES=pathfix where applicable.

PR:		213195
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D8093
a0bcd2cf68
Dmitry Marakasov (amdmi3) · 1.0.0
Most commonly used build systems support silent builds, when they hide actual commands executed and only show short summary line (like "CC foo.c"). CMake and ninja enable this by default, some autotools using ports do as well. This is unacceptable because we need complete build logs at any time, so we now switch to verbose build logs unconditionally. Note that this change deliberately affects ALL 

Change summary:

- Always do verbose builds for cmake, ninja and GNU configure (the
  latter includes check if --disable-silent-rules is actually supported
  by the configure script; there are isolated cases when it's not true)
- Remove CMAKE_VERBOSE, NINJA_VERBOSE and
  CONFIGURE_ARGS=--disable-silent-rules from all ports which set them
  for this is no longer needed
- Revert hacks for --disable-silent-rules support priorly committed
  to biology/ncbi-blast+ and net-p2p/mldonkey - no longer needed as well

Submitted by:	amdmi3
Reviewed by:	mat
Exp-run by:	antoine
Approved by:	portmgr (mat, antoine)
Differential Revision:	D7534
30a00f2227
Mathieu Arnold (mat) · 1.0.0
Remove unneeded usage of:

- MASTER_SITE_SUBDIR
- ${MASTER_SITES_FOO}
- :DEFAULT (and use a default when appropriate)

Sponsored by:	Absolight
7f304f0633
Dmitry Marakasov (amdmi3) · 1.0.0
Remove NLS, DOCS, EXAMPLES and IPV6 from OPTIONS_DEFAULT, they are enabled by default anyway and don't need to be listed

Approved by:	portmgr blanket
c86e9d9724
Mathieu Arnold (mat) · 1.0.0
Remove ${PORTSDIR}/ from dependencies, categories m, n, o, and p.

With hat:	portmgr
Sponsored by:	Absolight
8d6597e0bb
Ruslan Makhmatkhanov (rm) · 1.0.0
Bump minimal python3 version to 3.3 in USES

Because we are going to remove python 3.2 from the ports tree

With hat:   python
1d86d24911
Hiroki Sato (hrs) · 1.0.0
Update to 1.0.0, the first production version.  This includes security fixes for CVE-2015-8373 in addition to the following improvements:

- Lease expiration. A configurable mechanism which provides the
  ability to properly clean up expired leases including hook points,
  DNS clean up, and logging.

- Client classification. Initial support for client classification
  using conditional logic expressions to test inbound packet content
  is available for both DHCPv4 and DHCPv6.

- Decline support in both DHCPv4 and DHCPv6.

- New statistics. Several new statistics have been added. They can be
  used to monitor lease expiration and decline processing.

- PXE boot. Several new DHCPv4 and DHCPv6 options useful for PXE and
  iPXE boot are now supported.

- Host Reservations in MySQL. Kea is now able to store host
  reservations in both its configuration file and a MySQL
  database. While currently available only for DHCPv4, this
  functionality will be available for DHCPv6 in an upcoming release.

- Kea 1.0.0 is released under new license Mozilla Public License
  2.0. Earlier releases were licensed under the ISC license. The new
  license is slightly more restrictive than the original ISC license.

Security:	CVE-2015-8373
Security:	https://kb.isc.org/article/AA-01318/0/CVE-2015-8373-ISC-Kea%3A-unexpected-termination-while-handling-a-malformed-packet.html
8ac54f835f
Hiroki Sato (hrs) · 0.9.2
Fix typos in non-default options which prevented them from working.

Reported by:	Evgeny Dunaev
Pointy hat to:	hrs
86866d28a2
Hiroki Sato (hrs) · 0.9.2
- Temporarily disable -Werror to fix build on 11.x.  Boost < 1.59.0 has   a lot of unused local typedefs while the newer versions use   __attribulte__((unused)) to suppress the warning.

- Add patches to remove BOOST_PFTO_WRAPPER().  This macro is obsolete
  in the newer versions of Boost.
f9bf2f9c0f
Hiroki Sato (hrs) · 0.9.2
Add net/kea, a new open source DHCPv4/DHCPv6 server being developed by Internet Systems Consortium.
638dc28aad