Fix building with Boost 1.90 Beta 1

- Split off services into separate ones to allow more fine grained
  control for e.g. capabilities.
- Tighten access to state and log directories

kea-3.0.0.tar.xz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEECQoqB5I/kltXZ4A6QuXfeMgycdsFAmhbvsIACgkQQuXfeMgy
-cdtPVQ//WuPtFbsJ1jEPdjiwue23yo0zCWnc8CTLTs3sNSBuYHklihYZfhEvKzW6
-/NhACkJ96BP9x79/kASWTnACRAhqTGXLAmk2qJ1U1js6oJ6/sYigFpyx2SdZxo6V
-fY1wybDa4G4FqJ/nCzOPewD7zeJHrUyViz/YE+LyAn3XROlp0LFJygKCw7IqjaHz
-CeFpD3fh9X/oqxM8H1OjKt6hpxFlY7eRKB9bjvEbxQbmyh8m9dEMD7V8nVK6SrWZ
-icArFP3FhwTgRRjLylgXSRc9zsujAbWtiPmL9dYTew01w4dXs2xni8MuUHbr73X0
-xBNCMtu28bIrOcA6sds+ZCJ0/dclJdXJqI5UgxoRtt7ZrboR3uxtjoiYYN4oWD8E
-CmXFwjb2++MmCv1ZQQU0ZsoVoe+nKI0/9AFWQe4jjWt5WfwX8Hhxhp5cc43bSito
-MKOGnEijm9xaixxwKDeuIBo1LcS0adRV2iY60OWJcyT4ZRVzdu2jpl2AXwwaIwKA
-Zb3U3EizlUnM6r8Ih1MZmquV2FSCkhvhKcSarR8g76M5s1NadzwB/5+p7+fiSXXA
-x4ssHWf37uU3rI8v4cW54ZvmZK/MqvY50JF+HYRpDS2rXHf49Sq8u7YmtigYCqy/
-MMmQniZVnutF+d8akuLILIOCO30Pvwe0w0nD7y/ZFke3V+HiZFU=
-=6qEE
------END PGP SIGNATURE-----

kea-3.0.2.tar.xz.asc

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQIzBAABCgAdFiEE2mo1COZypJ3Tgq/ZW49NkbiO2QkFAmj4qUEACgkQW49NkbiO
+2QkHHw/8C8PLMJfc9JjLWskS8sgI0H8kT2Vs8qMx+oJUWAkOrIcnrVlkC0/PfWkk
+KnZ2UFST+etmZfNySjRgQ5BdSovYQPx570LMsB2Jv/p2npMTvS6zPwPFDjrO/67D
+e4izzzS2cx3fK7uTigq8CZCkMVf0slX6v0arWsa8WHo8OePh+5TF1x0LDfFZLJvJ
+clr0xTVcKLuQs4VjxGlkHZsA69h6/7nXVksFkuzWwkQqNWj5Bfq4mWYXcNF0MK32
+jECgxcsquvPYEw9D7JGXr7Ty8CyuWok+va4PrA/XOQTlxvKaJbl1ljpocplPQgyL
+de73QxmyNmviv6DMMkwo0R2NJnaHMOGzbZef0ps/4aPyuSISOujT/Mef9lb0ifM8
+WdgLWdusmHyYaWnu3MLau923e7tH07Hrofre0yMl9LkLJwPrj1nRsdXuuea5a4LN
+p6YrYECRfNE2JW3xp5aLIhcZe7ouofzkYgdx1DK1UKU7GWlUfWCxImNQ5ZpWdfhT
+kkpWf72/K9mqQFNwvJmcGWg2qlWlel/My0rKh9z/gG+f543WK14gEP34pvQySIJ/
+PZRZDeu8YFYUMujWysuzJ6hDsAX3Q4yAWR8dCb9opfv1wAV94WnUQMMuXjk3MrUQ
+bFcw2dPGSonKP4HPMrbMRpWcq/3W3FG4gpE0lKX8DkaPHtG1fiU=
+=v6zd
+-----END PGP SIGNATURE-----

kea-boost1_89.patch

@@ -0,0 +1,39 @@
+From: Arjen de Korte <suse+build@de-korte.org>
+Date: 2025-10-28 20:05:15 +0100
+
+boost 1.89 does not have boost_system anymore.
+
+diff -purN a/meson.build b/meson.build
+--- a/meson.build	2025-08-20 10:14:44.000000000 +0200
++++ b/meson.build	2025-10-26 13:56:44.801656560 +0100
+@@ -189,7 +189,7 @@ message(f'Detected system "@SYSTEM@".')
+ 
+ #### Dependencies
+ 
+-boost_dep = dependency('boost', version: '>=1.66', modules: ['system'])
++boost_dep = dependency('boost', version: '>=1.66', modules: ['system'], required: false)
+ dl_dep = dependency('dl')
+ threads_dep = dependency('threads')
+ add_project_dependencies(boost_dep, dl_dep, threads_dep, language: ['cpp'])
+diff -purN a/src/lib/asiodns/io_fetch.h b/src/lib/asiodns/io_fetch.h
+--- a/src/lib/asiodns/io_fetch.h	2025-08-20 10:14:44.000000000 +0200
++++ b/src/lib/asiodns/io_fetch.h	2025-10-26 13:52:05.461445874 +0100
+@@ -16,6 +16,7 @@
+ #include <util/buffer.h>
+ 
+ #include <boost/asio/coroutine.hpp>
++#include <boost/asio/deadline_timer.hpp>
+ #include <boost/shared_array.hpp>
+ #include <boost/shared_ptr.hpp>
+ #include <boost/date_time/posix_time/posix_time_types.hpp>
+diff -purN a/src/lib/asiolink/interval_timer.h b/src/lib/asiolink/interval_timer.h
+--- a/src/lib/asiolink/interval_timer.h	2025-08-20 10:14:44.000000000 +0200
++++ b/src/lib/asiolink/interval_timer.h	2025-10-26 12:29:18.357562324 +0100
+@@ -7,6 +7,7 @@
+ #ifndef ASIOLINK_INTERVAL_TIMER_H
+ #define ASIOLINK_INTERVAL_TIMER_H 1
+ 
++#include <boost/asio/deadline_timer.hpp>
+ #include <boost/shared_ptr.hpp>
+ #include <functional>
+ 

kea-boost1_90.patch

@@ -0,0 +1,10 @@
+--- a/src/lib/log/logger_level_impl.cc.orig	2025-11-13 15:04:21.704582532 +0100
++++ b/src/lib/log/logger_level_impl.cc	2025-11-13 15:04:36.005019042 +0100
+@@ -10,6 +10,7 @@
+ #include <string.h>
+ #include <iostream>
+ #include <boost/lexical_cast.hpp>
++#include <boost/static_assert.hpp>
+ 
+ #include <log4cplus/logger.h>
+ 

kea.changes

@@ -1,3 +1,51 @@
+-------------------------------------------------------------------
+Thu Nov 13 15:16:39 CET 2025 - aschnell@suse.com
+
+- Fix building with Boost 1.90 Beta 1
+  (add 'kea-boost1_90.patch')
+
+-------------------------------------------------------------------
+Wed Oct 29 15:48:22 UTC 2025 - Jorik Cronenberg <jorik.cronenberg@suse.com>
+
+- Update to release 3.0.2
+  * Security Fixes:
+  * When a hostname or FQDN received from a client is reduced to an
+    empty string by hostname sanitizing, kea-dhcp4 and kea-dhcp6
+    will now drop the option.
+    [CVE-2025-11232, bsc#1252863]
+  * Bug fixes:
+  * Removed logging an error in ping check hook library if using
+    lease cache treshold.
+  * Fixed deadlock in ping-check hooks library.
+  * Fixed a data race in ping-check hooks library.
+
+-------------------------------------------------------------------
+Tue Oct 28 22:43:30 UTC 2025 - Jan Engelhardt <jengelh@inai.de>
+
+- New shorter version of kea-boost1_89.patch
+
+-------------------------------------------------------------------
+Sun Oct 26 13:08:05 UTC 2025 - Arjen de Korte <suse+build@de-korte.org>
+
+- Fix building with Boost >= 1.89
+  (add 'kea-boost1_89.patch')
+
+-------------------------------------------------------------------
+Thu Aug 28 09:03:21 UTC 2025 - Jorik Cronenberg <jorik.cronenberg@suse.com>
+
+- Update to release 3.0.1
+  Security Fixes:
+  * Corrected an issue in kea-dhcp4 that caused the server to abort
+    if a client sent a unicast request with a particular options,
+    and Kea failed to find an appropriate subnet for that client.
+    (CVE-2025-40779)
+    [bsc#1248801]
+
+  Changes:
+  * Moved Botan crypto backend support to version 3.
+  * Avoid adding the qualifying-suffix to fully qualified host
+    names specified in host reservations.
+
 -------------------------------------------------------------------
 Tue Jul 29 09:44:04 UTC 2025 - Jorik Cronenberg <jorik.cronenberg@suse.com>
 

kea.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package kea
 #
-# Copyright (c) 2025 SUSE LLC
+# Copyright (c) 2025 SUSE LLC and contributors
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,20 +17,20 @@
 
 
 %define asiodns_sover 62
-%define asiolink_sover 87
+%define asiolink_sover 88
 %define cc_sover 82
 %define cfgrpt_sover 3
 %define config_sover 83
-%define cryptolink_sover 63
+%define cryptolink_sover 64
 %define d2srv_sover 63
 %define database_sover 76
 %define dhcp_sover 109
 %define dhcp_ddns_sover 68
-%define dhcpsrv_sover 129
+%define dhcpsrv_sover 131
 %define dns_sover 71
 %define eval_sover 84
 %define exceptions_sover 45
-%define hooks_sover 118
+%define hooks_sover 120
 %define http_sover 87
 %define log_interprocess_sover 3
 %define log_sover 75
@@ -42,7 +42,7 @@
 %define util_io_sover 12
 %define util_sover 101
 Name:           kea
-Version:        3.0.0
+Version:        3.0.2
 Release:        0
 Summary:        Dynamic Host Configuration Protocol daemon
 License:        MPL-2.0
@@ -58,12 +58,15 @@ Source4:        kea-dhcp4.service
 Source5:        kea-dhcp6.service
 Source6:        kea-dhcp-ddns.service
 Source7:        kea-ctrl-agent.service
-BuildRequires:  meson
+Patch1:         kea-boost1_89.patch
+Patch2:         kea-boost1_90.patch
+BuildRequires:  fdupes
 BuildRequires:  freeradius-server-devel
 BuildRequires:  gcc-c++
 BuildRequires:  libmysqlclient-devel
 BuildRequires:  libtool >= 2
 BuildRequires:  log4cplus-devel
+BuildRequires:  meson
 BuildRequires:  pkg-config >= 0.23
 BuildRequires:  postgresql-server-devel
 BuildRequires:  python-rpm-macros
@@ -73,14 +76,12 @@ BuildRequires:  python3-sphinx_rtd_theme
 BuildRequires:  sysuser-tools
 BuildRequires:  xz
 BuildRequires:  pkgconfig(libcrypto)
-BuildRequires:  fdupes
 %sysusers_requires
 Suggests:       %name-hooks = %version
 %if 0%{?suse_version} >= 1500
-BuildRequires:  libboost_system-devel
-%else
-BuildRequires:  boost-devel
+BuildRequires:  (libboost_system-devel if boost-devel < 1.89)
 %endif
+BuildRequires:  boost-devel
 BuildRequires:  systemd-rpm-macros
 
 %description
@@ -349,8 +350,8 @@ Requires:       libkea-eval%eval_sover = %version
 Requires:       libkea-exceptions%exceptions_sover = %version
 Requires:       libkea-hooks%hooks_sover = %version
 Requires:       libkea-http%http_sover = %version
-Requires:       libkea-log-interprocess%log_interprocess_sover = %version
 Requires:       libkea-log%log_sover = %version
+Requires:       libkea-log-interprocess%log_interprocess_sover = %version
 Requires:       libkea-mysql%mysql_sover = %version
 Requires:       libkea-pgsql%pgsql_sover = %version
 Requires:       libkea-process%process_sover = %version
@@ -366,6 +367,9 @@ Development files for the Kea DHCP server
 
 %prep
 %autosetup -p1 -n kea-%version
+%if 0%{?suse_version} < 1600
+%patch -R -P 1 -p1
+%endif
 
 %build
 export FREERADIUS_INCLUDE="%_includedir/freeradius"