Red Hat Product Errata RHSA-2026:11344 - Security Advisory Issued: 2026-04-28 Updated: 2026-04-28 RHSA-2026:11344 - Security Advisory Overview Updated Packages Synopsis Important: kea security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kea is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description DHCP implementation from Internet Systems Consortium, Inc. that features fully functional DHCPv4, DHCPv6 and Dynamic DNS servers. Both DHCP servers fully support server discovery, address assignment, renewal, rebinding and release. The DHCPv6 server supports prefix delegation. Both servers support DNS Update mechanism, using stand-alone DDNS daemon. Security Fix(es): Kea: Kea: Denial of Service via maliciously crafted message (CVE-2026-3608) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64 Fixes BZ - 2451139 - CVE-2026-3608 Kea: Kea: Denial of Service via maliciously crafted message CVEs CVE-2026-3608 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 SRPM kea-2.6.3-2.el10_0.3.src.rpm SHA-256: fcfe4e9a24ab71dad3e116a5288426bb621d8590df0fcd77e684aa29474a1dd5 x86_64 kea-2.6.3-2.el10_0.3.x86_64.rpm SHA-256: deadb15349e2b6c9b7d6a49cd474092615f2e82d6e95972b0437d4c38d955d05 kea-debuginfo-2.6.3-2.el10_0.3.x86_64.rpm SHA-256: 3325e2c9ca37b2b32b877b5a23a74339315926fa06994a23034cf8d7792b74a5 kea-debuginfo-2.6.3-2.el10_0.3.x86_64.rpm SHA-256: 3325e2c9ca37b2b32b877b5a23a74339315926fa06994a23034cf8d7792b74a5 kea-debugsource-2.6.3-2.el10_0.3.x86_64.rpm SHA-256: 426123870129789c995eb9fe4374963c132589697e304c6bcf1e520c128eb565 kea-debugsource-2.6.3-2.el10_0.3.x86_64.rpm SHA-256: 426123870129789c995eb9fe4374963c132589697e304c6bcf1e520c128eb565 kea-doc-2.6.3-2.el10_0.3.noarch.rpm SHA-256: 2e7678c33327bd1ef509d9c10b3c02f7b99fbf9322357d692bce3409f0837c8d kea-hooks-2.6.3-2.el10_0.3.x86_64.rpm SHA-256: 4994681df5e5f3b7f6e13a68649bee6a141f1370258bfd5f75f986f2de90749b kea-hooks-debuginfo-2.6.3-2.el10_0.3.x86_64.rpm SHA-256: 9fe3d0a36a5a2db78b8ffaa551bcf72a0d58ed555e3fa16e6cd61bd07e280a5d kea-hooks-debuginfo-2.6.3-2.el10_0.3.x86_64.rpm SHA-256: 9fe3d0a36a5a2db78b8ffaa551bcf72a0d58ed555e3fa16e6cd61bd07e280a5d kea-keama-debuginfo-2.6.3-2.el10_0.3.x86_64.rpm SHA-256: 9985c325a02520d53ca9703637d2fbf83114762c9716fe78b030bdbf2691dc1f kea-keama-debuginfo-2.6.3-2.el10_0.3.x86_64.rpm SHA-256: 9985c325a02520d53ca9703637d2fbf83114762c9716fe78b030bdbf2691dc1f kea-libs-2.6.3-2.el10_0.3.x86_64.rpm SHA-256: edf8e7c5a64405e97c8dac9b4c35917fc1e58dc10736ea4ec21639a7145eac19 kea-libs-debuginfo-2.6.3-2.el10_0.3.x86_64.rpm SHA-256: 570d2767a86cc259f956035ac0835220b1b9c4416e33114b245b17b2d78a6cd3 kea-libs-debuginfo-2.6.3-2.el10_0.3.x86_64.rpm SHA-256: 570d2767a86cc259f956035ac0835220b1b9c4416e33114b245b17b2d78a6cd3 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 SRPM kea-2.6.3-2.el10_0.3.src.rpm SHA-256: fcfe4e9a24ab71dad3e116a5288426bb621d8590df0fcd77e684aa29474a1dd5 s390x kea-2.6.3-2.el10_0.3.s390x.rpm SHA-256: 517c51f8f03d27d550025d29414e7ebe070bc69e3e7196bfda7363fbe19ef380 kea-debuginfo-2.6.3-2.el10_0.3.s390x.rpm SHA-256: bcd008fa2e34d191b58072714de7fa52d1c54dad2a41ea48cc73ad97db241f76 kea-debuginfo-2.6.3-2.el10_0.3.s390x.rpm SHA-256: bcd008fa2e34d191b58072714de7fa52d1c54dad2a41ea48cc73ad97db241f76 kea-debugsource-2.6.3-2.el10_0.3.s390x.rpm SHA-256: cfc53d396f1279d3e3bb6f9ec398ce9bbe596b6867bca91271e4677701bbafbf kea-debugsource-2.6.3-2.el10_0.3.s390x.rpm SHA-256: cfc53d396f1279d3e3bb6f9ec398ce9bbe596b6867bca91271e4677701bbafbf kea-doc-2.6.3-2.el10_0.3.noarch.rpm SHA-256: 2e7678c33327bd1ef509d9c10b3c02f7b99fbf9322357d692bce3409f0837c8d kea-hooks-2.6.3-2.el10_0.3.s390x.rpm SHA-256: 1292048805f052c2f24ba39dcfde1d8af6177173d690e6e4f4ce58cefd74a8c6 kea-hooks-debuginfo-2.6.3-2.el10_0.3.s390x.rpm SHA-256: 2a5ad867fe0b51eda4e42117a253ef8508924f12652cb3c2a550322e71fd1672 kea-hooks-debuginfo-2.6.3-2.el10_0.3.s390x.rpm SHA-256: 2a5ad867fe0b51eda4e42117a253ef8508924f12652cb3c2a550322e71fd1672 kea-keama-debuginfo-2.6.3-2.el10_0.3.s390x.rpm SHA-256: e0e873d8eefcd8cb9dbfe7d39941793c7c4df20a2831bc473087921539185d84 kea-keama-debuginfo-2.6.3-2.el10_0.3.s390x.rpm SHA-256: e0e873d8eefcd8cb9dbfe7d39941793c7c4df20a2831bc473087921539185d84 kea-libs-2.6.3-2.el10_0.3.s390x.rpm SHA-256: 76a09acdc1502b44bc0257b9bd654dde2b084ab552baccea3a23102c876cc02f kea-libs-debuginfo-2.6.3-2.el10_0.3.s390x.rpm SHA-256: a70de53e1937a12c41203198362d9441a553f64802b322bc3debb4068792ea6b kea-libs-debuginfo-2.6.3-2.el10_0.3.s390x.rpm SHA-256: a70de53e1937a12c41203198362d9441a553f64802b322bc3debb4068792ea6b Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 SRPM kea-2.6.3-2.el10_0.3.src.rpm SHA-256: fcfe4e9a24ab71dad3e116a5288426bb621d8590df0fcd77e684aa29474a1dd5 ppc64le kea-2.6.3-2.el10_0.3.ppc64le.rpm SHA-256: feed0abbeae95b145c455e0063f6bad5cbbefe17e6a083c7dd670adc95aa8fd7 kea-debuginfo-2.6.3-2.el10_0.3.ppc64le.rpm SHA-256: de7bce1ad157d6ccfec46e56a295d40471f889008cd4401c79a3e9c7e28325ca kea-debuginfo-2.6.3-2.el10_0.3.ppc64le.rpm SHA-256: de7bce1ad157d6ccfec46e56a295d40471f889008cd4401c79a3e9c7e28325ca kea-debugsource-2.6.3-2.el10_0.3.ppc64le.rpm SHA-256: 82e51a828016c835ab513fb381c16850225bfb56d96a8cae0447880ae97ce21b kea-debugsource-2.6.3-2.el10_0.3.ppc64le.rpm SHA-256: 82e51a828016c835ab513fb381c16850225bfb56d96a8cae0447880ae97ce21b kea-doc-2.6.3-2.el10_0.3.noarch.rpm SHA-256: 2e7678c33327bd1ef509d9c10b3c02f7b99fbf9322357d692bce3409f0837c8d kea-hooks-2.6.3-2.el10_0.3.ppc64le.rpm SHA-256: 0eb69e08acd4476880c7bd23b6ebb32a3530c3a8e244f5330b9bed87a6c2948d kea-hooks-debuginfo-2.6.3-2.el10_0.3.ppc64le.rpm SHA-256: 753777b0dbbd003a728db145fcdc0421bc5abbb9b537b7fd8e9869379590a515 kea-hooks-debuginfo-2.6.3-2.el10_0.3.ppc64le.rpm SHA-256: 753777b0dbbd003a728db145fcdc0421bc5abbb9b537b7fd8e9869379590a515 kea-keama-debuginfo-2.6.3-2.el10_0.3.ppc64le.rpm SHA-256: daf123ab9532af1a7aaf970382dee63a319d1bb521137e4c16c24996021327e1 kea-keama-debuginfo-2.6.3-2.el10_0.3.ppc64le.rpm SHA-256: daf123ab9532af1a7aaf970382dee63a319d1bb521137e4c16c24996021327e1 kea-libs-2.6.3-2.el10_0.3.ppc64le.rpm SHA-256: 6ce4c5551776b728823f98a2726a88ec9db1a44928dda0fc72edcb3b3a43a6a4 kea-libs-debuginfo-2.6.3-2.el10_0.3.ppc64le.rpm SHA-256: c28f61aa3668a9ecef322145ab5dafb773222ee8e423973d6d9c40603a7927ca kea-libs-debuginfo-2.6.3-2.el10_0.3.ppc64le.rpm SHA-256: c28f61aa3668a9ecef322145ab5dafb773222ee8e423973d6d9c40603a7927ca Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 SRPM kea-2.6.3-2.el10_0.3.src.rpm SHA-256: fcfe4e9a24ab71dad3e116a5288426bb621d8590df0fcd77e684aa29474a1dd5 aarch64 kea-2.6.3-2.el10_0.3.aarch64.rpm SHA-256: 04ac1b359d0baacaa2d55680dc6653647fe1c823f8a76c809bd4f41c74398d22 kea-debuginfo-2.6.3-2.el10_0.3.aarch64.rpm SHA-256: a932994cd634ade2f29f2f098ee88093ea9f229dd7bd5d188dc1c72a4c7fc952 kea-debuginfo-2.6.3-2.el10_0.3.aarch64.rpm SHA-256: a932994cd634ade2f29f2f098ee88093ea9f229dd7bd5d188dc1c72a4c7fc952 kea-debugsource-2.6.3-2.el10_0.3.aarch64.rpm SHA-256: a5882e294f786fd0fa33020c0b0bdfc26f4db8a20f3ff69547d2442439b97286 kea-debugsource-2.6.3-2.el10_0.3.aarch64.rpm SHA-256: a5882e294f786fd0fa33020c0b0bdfc26f4db8a20f3ff69547d2442439b97286 kea-doc-2.6.3-2.el10_0.3.noarch.rpm SHA-256: 2e7678c33327bd1ef509d9c10b3c02f7b99fbf9322357d692bce3409f0837c8d kea-hooks-2.6.3-2.el10_0.3.aarch64.rpm SHA-256: e06ace97c80d57d3a2bd317d7ab7f34bf54cda8e49af9cb6696d3cf78def0828 kea-hooks-debuginfo-2.6.3-2.el10_0.3.aarch64.rpm SHA-256: 9a455c64017650791fbf93c09c355089ebea74a5cfa7814bf5edec2aa072646e kea-hooks-debuginfo-2.6.3-2.el10_0.3.aarch64.rpm SHA-256: 9a455c64017650791fbf93c09c355089ebea74a5cfa7814bf5edec2aa072646e kea-keama-debuginfo-2.6.3-2.el10_0.3.aarch64.rpm SHA-256: 882501594207b0abcf49a31e72e85388662d7f47d2d544763d04a4458ba6b94e kea-keama-debuginfo-2.6.3-2.el10_0.3.aarch64.rpm SHA-256: 882501594207b0abcf49a31e72e85388662d7f47d2d544763d04a4458ba6b94e kea-libs-2.6.3-2.el10_0.3.aarch64.rpm SHA-256: b186757cea6cb811bdfe2fd8d1a5644437123dd8fdab4a1ae130a1d874e25482 kea-libs-debuginfo-2.6.3-2.el10_0.3.aarch64.rpm SHA-256: 714e123e2ebacf683d1b124dd698cb13b3aedbc4510a11ef2502c7f61bb4fd70 kea-l