[#3830] Added ChangeLog entry file

new file:   3830-CVE-2025-32801-Allow-loading-hook--ibraries-only-from-default-path

diff --git a/changelog_unreleased/3830-CVE-2025-32801-Allow-loading-hook--ibraries-only-from-default-path b/changelog_unreleased/3830-CVE-2025-32801-Allow-loading-hook--ibraries-only-from-default-path
new file mode 100644 (file)
index 0000000..d351825
--- /dev/null
+++ b/changelog_unreleased/3830-CVE-2025-32801-Allow-loading-hook--ibraries-only-from-default-path
@@ -0,0 +1,10 @@
+[sec]*         tmark
+    kea-dhcp4, kea-dhcp6, and kea-dhcp-ddns will now only load
+       hook libraries from default installation directory.  If a path
+    other than this is specified Kea will not load the hook library.
+    For ease of use, the path may be omitted.
+    CVE:2025-32801
+       (Gitlab #3830)
+
+
+