diff --git a/kea-3.0.0.tar.xz b/kea-3.0.0.tar.xz
deleted file mode 100644
index 325534c..0000000
--- a/kea-3.0.0.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:bf963d1e10951d8c570c6042afccf27c709d45e03813bd2639d7bb1cfc4fee76
-size 6631612
diff --git a/kea-3.0.0.tar.xz.asc b/kea-3.0.0.tar.xz.asc
deleted file mode 100644
index e5dbae5..0000000
--- a/kea-3.0.0.tar.xz.asc
+++ /dev/null
@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEECQoqB5I/kltXZ4A6QuXfeMgycdsFAmhbvsIACgkQQuXfeMgy
-cdtPVQ//WuPtFbsJ1jEPdjiwue23yo0zCWnc8CTLTs3sNSBuYHklihYZfhEvKzW6
-/NhACkJ96BP9x79/kASWTnACRAhqTGXLAmk2qJ1U1js6oJ6/sYigFpyx2SdZxo6V
-fY1wybDa4G4FqJ/nCzOPewD7zeJHrUyViz/YE+LyAn3XROlp0LFJygKCw7IqjaHz
-CeFpD3fh9X/oqxM8H1OjKt6hpxFlY7eRKB9bjvEbxQbmyh8m9dEMD7V8nVK6SrWZ
-icArFP3FhwTgRRjLylgXSRc9zsujAbWtiPmL9dYTew01w4dXs2xni8MuUHbr73X0
-xBNCMtu28bIrOcA6sds+ZCJ0/dclJdXJqI5UgxoRtt7ZrboR3uxtjoiYYN4oWD8E
-CmXFwjb2++MmCv1ZQQU0ZsoVoe+nKI0/9AFWQe4jjWt5WfwX8Hhxhp5cc43bSito
-MKOGnEijm9xaixxwKDeuIBo1LcS0adRV2iY60OWJcyT4ZRVzdu2jpl2AXwwaIwKA
-Zb3U3EizlUnM6r8Ih1MZmquV2FSCkhvhKcSarR8g76M5s1NadzwB/5+p7+fiSXXA
-x4ssHWf37uU3rI8v4cW54ZvmZK/MqvY50JF+HYRpDS2rXHf49Sq8u7YmtigYCqy/
-MMmQniZVnutF+d8akuLILIOCO30Pvwe0w0nD7y/ZFke3V+HiZFU=
-=6qEE
------END PGP SIGNATURE-----
diff --git a/kea-3.0.1.tar.xz b/kea-3.0.1.tar.xz
new file mode 100644
index 0000000..1013a51
--- /dev/null
+++ b/kea-3.0.1.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:ec84fec4bb7f6b9d15a82e755a571e9348eb4d6fbc62bb3f6f1296cd7a24c566
+size 6632284
diff --git a/kea-3.0.1.tar.xz.asc b/kea-3.0.1.tar.xz.asc
new file mode 100644
index 0000000..616d8cd
--- /dev/null
+++ b/kea-3.0.1.tar.xz.asc
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQIzBAABCgAdFiEEAlmjO19aOkRmzzRcel4ITKylGIQFAmil4+0ACgkQel4ITKyl
+GIRxlg//f+A5yEQ6RKl0DOJfQIKKPZ9SL/2a04q6Gcay2ghUl8LZOiiO98RYicyV
+PmrsY/5/nuJmLPRSPKt/pmosfgZUbWK9yuKOoBrfu0KZfQWMX+1ZJIfagY47PCvU
+RKtT50+iPOsYZAtuRw8faO8g/rdgl1vMreSIjCPZTG1R4qZkQXNnwhNRV7O3pzsr
+wSndDINLvjQoYYbklKpUszoBNppXzBCegzVFjcIjNOSta2U8xEPGQ7sv2JvKkaYf
+bVjzKuoEVn0YkkAdf7C7vLotl4UZESNo/w+DcRbrbq/FYpT1R8YWzVAJtqJCVNFI
+q0WqlK5/G2/4giAveSWzuX0dnk+OZ5kQrd323Ol6MlM/O4ymkHK7OJrcxLLrEyIC
+OnRNWQqVzJddmUTOntvoLk90wJ9yF1jrdM+S3xTpOJzhnfRoFuioZ7njjfGTyskR
+Nlt4DX3wGsg0quDQfQJAf1z1qk651/OIF27KThj5jNOPB5eWz4YjJBht9T+eHlcS
+kOsNwnKtdZe+KiGeFCsfWU7wOR65w4kQXoH1ruFqVa44ZZKUvzDi4fiJYYfJLedJ
+FfBx3c65B0COk+3kOWjAV1F+Zaf0PlrEnb75zbN0O4BrztPL12HhDtjF+CbAuOG2
+k4ZpogxZ0Q6MhiQjGFiFMs2PN2FlgiaL2zbKKG/KIjUzPnog60c=
+=1ZFT
+-----END PGP SIGNATURE-----
diff --git a/kea.changes b/kea.changes
index 3dce1f4..79ae9da 100644
--- a/kea.changes
+++ b/kea.changes
@@ -1,3 +1,19 @@
+-------------------------------------------------------------------
+Thu Aug 28 09:03:21 UTC 2025 - Jorik Cronenberg <jorik.cronenberg@suse.com>
+
+- Update to release 3.0.1
+  Security Fixes:
+  * Corrected an issue in kea-dhcp4 that caused the server to abort
+    if a client sent a unicast request with a particular options,
+    and Kea failed to find an appropriate subnet for that client.
+    (CVE-2025-40779)
+    [bsc#1248801]
+
+  Changes:
+  * Moved Botan crypto backend support to version 3.
+  * Avoid adding the qualifying-suffix to fully qualified host
+    names specified in host reservations.
+
 -------------------------------------------------------------------
 Tue Jul 29 09:44:04 UTC 2025 - Jorik Cronenberg <jorik.cronenberg@suse.com>
 
diff --git a/kea.spec b/kea.spec
index d30953f..a98473a 100644
--- a/kea.spec
+++ b/kea.spec
@@ -17,20 +17,20 @@
 
 
 %define asiodns_sover 62
-%define asiolink_sover 87
+%define asiolink_sover 88
 %define cc_sover 82
 %define cfgrpt_sover 3
 %define config_sover 83
-%define cryptolink_sover 63
+%define cryptolink_sover 64
 %define d2srv_sover 63
 %define database_sover 76
 %define dhcp_sover 109
 %define dhcp_ddns_sover 68
-%define dhcpsrv_sover 129
+%define dhcpsrv_sover 130
 %define dns_sover 71
 %define eval_sover 84
 %define exceptions_sover 45
-%define hooks_sover 118
+%define hooks_sover 119
 %define http_sover 87
 %define log_interprocess_sover 3
 %define log_sover 75
@@ -42,7 +42,7 @@
 %define util_io_sover 12
 %define util_sover 101
 Name:           kea
-Version:        3.0.0
+Version:        3.0.1
 Release:        0
 Summary:        Dynamic Host Configuration Protocol daemon
 License:        MPL-2.0