From: Thomas Markwalder <tmark@isc.org>
Date: Wed, 30 Apr 2025 19:39:08 +0000 (-0400)
Subject: [#3838] Added ChangeLog fixed version in ARM
X-Git-Tag: Kea-2.6.3~21
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=05331209757e7238bcdb4b750a9cb8dbaf128fe1;p=thirdparty%2Fkea.git

[#3838] Added ChangeLog fixed version in ARM

modified:   ChangeLog
modified:   doc/sphinx/arm/hooks.rst
---

diff --git a/ChangeLog b/ChangeLog
index abbf7897e6..77f8b4e824 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,12 @@
+2264.	[sec]*		tmark
+	kea-dhcp4, kea-dhcp6, kea-dhcp-ddns, and kea-ctrl-agent will
+	now only load hook libraries from the default installation
+	directory.  If a path other than this is specified Kea will
+	not load the hook library.  For ease of use, the path may be
+	omitted.
+	CVE:2025-32801
+	(Gitlab #3838, #3830)
+
 2263.	[build]		fdupont, q66
 	Kea can now build with Boost 1.87. The minimum supported Boost
 	version has been bumped up from 1.57 to 1.66. Thanks to q66
@@ -11,6 +20,7 @@
 	removed as of libc++ 19.
 	(Gitlab #3823, #3532)
 
+
 Kea 2.6.2 (stable) released on March 26, 2025
 
 2261.	[build]		mgodzina
diff --git a/doc/sphinx/arm/hooks.rst b/doc/sphinx/arm/hooks.rst
index 18c757fc25..8d037a5735 100644
--- a/doc/sphinx/arm/hooks.rst
+++ b/doc/sphinx/arm/hooks.rst
@@ -213,7 +213,7 @@ configuration would be:
    because the parameters specified for the library (or the files those
    parameters point to) may have changed.
 
-As of Kea 2.6.2, hook libraries may only be loaded from the default installation
+As of Kea 2.6.3, hook libraries may only be loaded from the default installation
 directory determined during compilation and shown in the config report as
 "Hooks directory".  This value may be overridden at startup by setting the
 environment variable ``KEA_HOOKS_PATH`` to the desired path.  If a path other