ELSA-2025-9178

ELSA-2025-9178 - kea security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2025-06-27

Description

[2.6.3-1]
- New version 2.6.3
- Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803
- kea.conf: Remove /tmp/ from socket-name for existing configurations
- kea.conf: Set pseudo-random password for default config to secure fresh
install and allow CA startup without user intervention
- kea.conf: Restrict directory permissions
- Sync service files with upstream
- Fix leases ownership when switching from root to kea user

[2.6.1-9]
- Update location of fmf plans

[2.6.1-8]
- Properly check valgrind arches

[2.6.1-7]
- Use autoreconf more (fixes riscv64 build)

Related CVEs

CVE-2025-32803

CVE-2025-32801

CVE-2025-32802

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	kea-2.6.3-1.el10_0.src.rpm	ffffd00dd96d233ba6a5039fd519e409e3123942147622dffd875a772c9d6155	-	ol10_aarch64_appstream
	kea-2.6.3-1.el10_0.src.rpm	ffffd00dd96d233ba6a5039fd519e409e3123942147622dffd875a772c9d6155	-	ol10_aarch64_baseos_latest
	kea-2.6.3-1.el10_0.src.rpm	ffffd00dd96d233ba6a5039fd519e409e3123942147622dffd875a772c9d6155	-	ol10_aarch64_codeready_builder
	kea-2.6.3-1.el10_0.src.rpm	ffffd00dd96d233ba6a5039fd519e409e3123942147622dffd875a772c9d6155	-	ol10_aarch64_u0_baseos_patch
	kea-2.6.3-1.el10_0.aarch64.rpm	33850e95651330f639affcad3da8930c6c82bcfaa50737cf125f0efe8cc430ae	-	ol10_aarch64_baseos_latest
	kea-2.6.3-1.el10_0.aarch64.rpm	33850e95651330f639affcad3da8930c6c82bcfaa50737cf125f0efe8cc430ae	-	ol10_aarch64_u0_baseos_patch
	kea-doc-2.6.3-1.el10_0.noarch.rpm	860442a2bb7ffabc5601ec77ad38526844256b776592f3f3964fba477be31b6b	-	ol10_aarch64_appstream
	kea-hooks-2.6.3-1.el10_0.aarch64.rpm	f302bb980d14550b3a0f3eba19702665665fefe42e44687dcdc67c5375175822	-	ol10_aarch64_appstream
	kea-keama-2.6.3-1.el10_0.aarch64.rpm	e0f7f79ce43e9b9a1c537458dcbb0c23919f6db50340c350a4943e1f73fa1904	-	ol10_aarch64_codeready_builder
	kea-libs-2.6.3-1.el10_0.aarch64.rpm	7ff33db686a4bf248e85222c1e5580fe80279463e9d4f21d0652c2c8524e34e1	-	ol10_aarch64_baseos_latest
	kea-libs-2.6.3-1.el10_0.aarch64.rpm	7ff33db686a4bf248e85222c1e5580fe80279463e9d4f21d0652c2c8524e34e1	-	ol10_aarch64_u0_baseos_patch
Oracle Linux 10 (x86_64)	kea-2.6.3-1.el10_0.src.rpm	ffffd00dd96d233ba6a5039fd519e409e3123942147622dffd875a772c9d6155	-	ol10_x86_64_appstream
	kea-2.6.3-1.el10_0.src.rpm	ffffd00dd96d233ba6a5039fd519e409e3123942147622dffd875a772c9d6155	-	ol10_x86_64_baseos_latest
	kea-2.6.3-1.el10_0.src.rpm	ffffd00dd96d233ba6a5039fd519e409e3123942147622dffd875a772c9d6155	-	ol10_x86_64_codeready_builder
	kea-2.6.3-1.el10_0.src.rpm	ffffd00dd96d233ba6a5039fd519e409e3123942147622dffd875a772c9d6155	-	ol10_x86_64_u0_baseos_patch
	kea-2.6.3-1.el10_0.x86_64.rpm	58c30af2336b2544e8943a85576eb04588aa27763641f92db0a6f77dd9dcaf58	-	ol10_x86_64_baseos_latest
	kea-2.6.3-1.el10_0.x86_64.rpm	58c30af2336b2544e8943a85576eb04588aa27763641f92db0a6f77dd9dcaf58	-	ol10_x86_64_u0_baseos_patch
	kea-doc-2.6.3-1.el10_0.noarch.rpm	860442a2bb7ffabc5601ec77ad38526844256b776592f3f3964fba477be31b6b	-	ol10_x86_64_appstream
	kea-hooks-2.6.3-1.el10_0.x86_64.rpm	c17ab5ce731c3cb8d710496de4a5263ba4f3befea23ba29a745ca2bebd251e19	-	ol10_x86_64_appstream
	kea-keama-2.6.3-1.el10_0.x86_64.rpm	8724a70967d506ac8ee55b304a98fdbece85859eff69e3b85f0666e52ce0f9e2	-	ol10_x86_64_codeready_builder
	kea-libs-2.6.3-1.el10_0.x86_64.rpm	4b69bb37da270472cba133231878572e6ef9341feeae7144e92a1fd5e0248c32	-	ol10_x86_64_baseos_latest
	kea-libs-2.6.3-1.el10_0.x86_64.rpm	4b69bb37da270472cba133231878572e6ef9341feeae7144e92a1fd5e0248c32	-	ol10_x86_64_u0_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team