Bug 290660 - net/kea*: update to fix CVE-2025-11232
Summary: net/kea*: update to fix CVE-2025-11232
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Many People
Assignee: freebsd-ports-bugs (Nobody)
URL: https://kb.isc.org/docs/cve-2025-11232
Keywords:
Depends on:
Blocks:
 
Reported: 2025-10-29 16:00 UTC by R. Christian McDonald
Modified: 2025-10-29 19:58 UTC (History)
1 user (show)

See Also:


Attachments
net/kea patch (1.46 KB, patch)
2025-10-29 16:00 UTC, R. Christian McDonald
no flags Details | Diff
net/kea-devel patch (3.64 KB, patch)
2025-10-29 16:00 UTC, R. Christian McDonald
no flags Details | Diff
net/kea update to 3.0.2 (3.18 KB, patch)
2025-10-29 16:33 UTC, Andrey Pevnev
apevnev: maintainer-approval+
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description R. Christian McDonald freebsd_committer freebsd_triage 2025-10-29 16:00:14 UTC
Created attachment 264998 [details]
net/kea patch
Comment 1 R. Christian McDonald freebsd_committer freebsd_triage 2025-10-29 16:00:36 UTC
Created attachment 264999 [details]
net/kea-devel patch
Comment 2 Andrey Pevnev 2025-10-29 16:33:08 UTC
I was about to submit a patch but discovered your PR, thanks. There is mine with a vulxml entry
Comment 3 Andrey Pevnev 2025-10-29 16:33:46 UTC
Created attachment 265001 [details]
net/kea update to 3.0.2
Comment 4 commit-hook freebsd_committer freebsd_triage 2025-10-29 16:36:13 UTC
A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=372e31f0afa33304eaae7a2d4553d6dbc9372e65

commit 372e31f0afa33304eaae7a2d4553d6dbc9372e65
Author:     R. Christian McDonald <rcm@FreeBSD.org>
AuthorDate: 2025-10-29 16:21:17 +0000
Commit:     R. Christian McDonald <rcm@FreeBSD.org>
CommitDate: 2025-10-29 16:35:33 +0000

    net/kea*: update to fix CVE-2025-11232

    News:
    https://kb.isc.org/docs/cve-2025-11232

    PR:             290660
    Reviewed by:    brd
    MFH:            2025Q4
    Security:       CVE-2025-11232
    Sponsored by:   Rubicon Communications, LLC ("Netgate")

 net/kea-devel/Makefile  |  3 +--
 net/kea-devel/distinfo  |  6 +++---
 net/kea-devel/pkg-plist | 57 +++++++++++++++++++++++++------------------------
 net/kea/Makefile        |  3 +--
 net/kea/distinfo        |  6 +++---
 net/kea/pkg-plist       |  8 +++----
 6 files changed, 41 insertions(+), 42 deletions(-)
Comment 5 commit-hook freebsd_committer freebsd_triage 2025-10-29 18:21:25 UTC
A commit in branch 2025Q4 references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=252c744f6848824ba87dc84cb0abf0345e490b24

commit 252c744f6848824ba87dc84cb0abf0345e490b24
Author:     R. Christian McDonald <rcm@FreeBSD.org>
AuthorDate: 2025-10-29 16:21:17 +0000
Commit:     R. Christian McDonald <rcm@FreeBSD.org>
CommitDate: 2025-10-29 18:20:50 +0000

    net/kea*: update to fix CVE-2025-11232

    News:
    https://kb.isc.org/docs/cve-2025-11232

    PR:             290660
    Reviewed by:    brd
    MFH:            2025Q4
    Security:       CVE-2025-11232
    Sponsored by:   Rubicon Communications, LLC ("Netgate")

    (cherry picked from commit 372e31f0afa33304eaae7a2d4553d6dbc9372e65)

 net/kea-devel/Makefile  |  2 +-
 net/kea-devel/distinfo  |  6 +++---
 net/kea-devel/pkg-plist | 57 +++++++++++++++++++++++++------------------------
 net/kea/Makefile        |  3 +--
 net/kea/distinfo        |  6 +++---
 net/kea/pkg-plist       |  8 +++----
 6 files changed, 41 insertions(+), 41 deletions(-)
Comment 6 commit-hook freebsd_committer freebsd_triage 2025-10-29 19:57:49 UTC
A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=4147c5d0592e6d0b549888ab314610e92a699d64

commit 4147c5d0592e6d0b549888ab314610e92a699d64
Author:     R. Christian McDonald <rcm@FreeBSD.org>
AuthorDate: 2025-10-29 19:52:09 +0000
Commit:     R. Christian McDonald <rcm@FreeBSD.org>
CommitDate: 2025-10-29 19:52:09 +0000

    security/vuxml: add kea vulnerability

    * CVE-2025-11232

    PR:             290660
    Reviewed by:    brd
    Sponsored by:   Rubicon Communications, LLC ("Netgate")

 security/vuxml/vuln/2025.xml | 38 ++++++++++++++++++++++++++++++++++++++
 1 file changed, 38 insertions(+)
Comment 7 R. Christian McDonald freebsd_committer freebsd_triage 2025-10-29 19:58:40 UTC
Thanks!