Skip to content
OpenAdvisories
High ELSA-2025-21038 1 CVE

Important: kea security update (Oracle Linux 10)

Published Dec 2, 2025 · Updated Dec 2, 2025

Ecosystem: Oracle Linux

Summary

[3.0.1-2]
- Fixes CVE-2025-11232

[3.0.1-1]
- New version 3.0.1
- Fixes CVE-2025-40779

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 10 kea 0:3.0.1-2.el10_1
Oracle Linux · 10 kea-doc 0:3.0.1-2.el10_1
Oracle Linux · 10 kea-hooks 0:3.0.1-2.el10_1
Oracle Linux · 10 kea-keama 0:3.0.1-2.el10_1
Oracle Linux · 10 kea-libs 0:3.0.1-2.el10_1

Vulnerabilities 1

  • High 7.5
    CVE-2025-11232

    Invalid characters cause assert

    To trigger the issue, three configuration parameters must have specific settings: "hostname-char-set" must be left at the default setting, which is "[^A-Za-z0-9.-]"; "hostname-char-replacement" must be empty (the default); and "ddns-qualifying-suffix" must *N…

    ISC Kea