CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

net/krill0.16.0_6

RPKI daemon, Certificate Authority and Publication Server

Maintainer
jaap@NLnetLabs.nl
Packages
krill 0.16.0_6
Upstream
up to date
CPE
none, CVEs only via VuXML
WWW
https://github.com/NLnetLabs/krill
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (1)

Show 1 fixed
VuXML entries whose affected range this version has left.

Commits (78)

Mikael Urankar (mikael) · 0.16.0_6
lang/rust: Bump revisions after 1.99.0

PR:		299016
9c878207a1
Mikael Urankar (mikael) · 0.16.0_5
lang/rust: Bump revisions after 1.98.1

PR:		298139
7316461925
Mikael Urankar (mikael) · 0.16.0_4
lang/rust: Bump revisions after 1.97.1

PR:		296645
9c892d2601
Mikael Urankar (mikael) · 0.16.0_3
lang/rust: Bump revisions after 1.96.0

PR:		295694
e29b5eeec3
Piotr Kubaj (pkubaj) · 0.16.0_2
net/krill: enable on powerpc64*
a8467bd505
Mikael Urankar (mikael) · 0.16.0_2
lang/rust: Bump revisions after 1.95.0

PR:		294615
17bf498fd2
Mikael Urankar (mikael) · 0.16.0_1
lang/rust: Bump revisions after 1.94.0

PR:		293615
43f5b4a72f
Yusuf Yaman (nxjoseph) · 0.16.0
net/krill: Update to 0.16.0

While here:
- do not install same program configuration twice.
- use .for loop instead for ${INSTALL_MAN}.

Changelog:
https://github.com/NLnetLabs/krill/releases/tag/v0.16.0

PR:		293598
Reported by:	Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
Approved by:	maintainer, vvd (mentor)
58725421b3
Yusuf Yaman (nxjoseph) · 0.15.1_1
Revert "net/krill: Update to 0.16.0"

This reverts commit 7b854e3d29be1f47e77fee755edb9a5dce7ba131.

This was pushed by accident. For now it must stay in bug #293598.
4e5e0bc915
Yusuf Yaman (nxjoseph) · 0.16.0
net/krill: Update to 0.16.0

While here:
- do not install same program configuration twice.
- reduce number of INSTALL_MAN calls using several entries.

PR:		293598
Reported by:	Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
Reviewed by:	?
Approved by:	?
Differential Revision: ?
7b854e3d29
Mikael Urankar (mikael) · 0.15.1_1
lang/rust: Bump revisions after 1.93.0

PR:		292360
3d631100e8
Hiroki Tagato (tagattie) · 0.15.1
net/krill: Update to 0.15.1

Version 0.15.1 'Contains Adult Language'

Bug fixes

* Fixed a bug introduced in 0.15.0 where CAs do to not clear fulfilled
  certification requests causing them to re-request a certificate every
  time they contact their parent. ([#1345])

Other changes

* Updated dependencies.

Release Announcement: https://nlnetlabs.nl/news/2026/Jan/19/krill-0.15.1-released/
Changelog: https://github.com/NLnetLabs/krill/releases/tag/v0.15.1

PR:		292605
Reported by:	Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
1482995eb0
Mikael Urankar (mikael) · 0.15.0_4
lang/rust: Bump revisions after 1.92.0

PR:		291582
5e496c7707
Mikael Urankar (mikael) · 0.15.0_3
lang/rust: Bump revisions after 1.91.1

PR:		290816
d6b6027df6
Mikael Urankar (mikael) · 0.15.0_2
lang/rust: Bump revisions after 1.90.0

PR:		289709
97b5de4ffc
Mikael Urankar (mikael) · 0.15.0_1
lang/rust: Bump revisions after 1.89.0

PR:		288923
b21956d7db
Hiroki Tagato (tagattie) · 0.15.0
net/krill: update to 0.15.0

Changelog: https://nlnetlabs.nl/news/2025/Aug/12/krill-0.15.0-released/

Breaking Changes
  * Refactored command line options processing for all binaries. As a result, options for both krillc and krillta have slightly changed. For
    krillc, the --server, --token, --format, and --api options are now before the first subcommand (since they affect all commands). For krillta,
    those options are now after krillta proxy but before the next subcommand, while --format is now after krillta signer. (#1228)
  * Removed support for RTA in krillc. Support is currently still present in the Krill server, though behind a (non-default) feature flag. (#1228)
  * Changed how authorization works with OpenID Connect and configuration files. Custom profiles have been replaced with a straightforward mapping
    from access permission to roles and assigning roles to users. For configuration file-based authentication, the file format has slightly changed
    but the current format is still accepted. If you are using OpenID Connect, you will have to update your configuration. Please, see the manual
    for details. (#1232)
  * Replaced downloading of RISwhois file for ROA analysis with calls to the Roto API. This can be controlled via new configuration settings
    bgp_api_enabled, bgp_api_uri, and bgp_api_cache_seconds. (#1233, #1266)

New
  * Added a command to re-initialize the trust anchor signer with different timing values or TAL URLs. (#1255)
  * Disables the protection against early re-issuance for CA certificates that have the full resource set, typically TA certificates. (#1281)

Bug Fixes
  * Fixed a potential infinite recursion in PKCS11 error handling. (#1215)
  * Open ID connect: Re-initialize the connection after 60s to pick up configuration changes at the provider. (#1226)
  * Fixed the naming of the trust anchor timing configuration. It was expected to be timing_config for the config used by Krill and ta_timing if
    used by the Krill TA signer. It is now ta_timing in both cases while timing_config is accepted as an alias in both cases. (#1241)
  * Improve performance by using buffered reading and writing in the store. (#1300, #1301)

Other changes
  * Refactored Prometheus metrics generation which resulted in a slightly different formatting but should still be syntactically correct. (#1249)
  * Upgraded the bundled Krill UI to release 0.9.0. (#1295)
  * Added packaging support for Ubuntu Noble, RHEL 10, Debian Trixie; removed packaging support for Ubuntu Xenial and Bionic, and Debian Stretch.
    (#1239, #1297, #1308)
  * The minimum supported Rust version is now 1.85. (#1288)

PR:		288837
Reported by:	Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
333c57ca78
Mikael Urankar (mikael) · 0.14.6_2
lang/rust: Bump revisions after 1.88.0

PR:		287766
f3f7e555b0
Mikael Urankar (mikael) · 0.14.6_1
lang/rust: Bump revisions after 1.87.0

PR:		286829
3ed29b8185
Fernando Apesteguía (fernape) · 0.14.6
net/krill: Update to version 0.14.6

Fixed the naming of the trust anchor timing configuration. It was
expected to be timing_config for the config used by Krill and
ta_timing if used by the Krill TA signer. It is now ta_timing in
both cases while timing_config is accepted as an alias in both cases.

Other changes

PR:		286007
Reported by:	jaap@NLnetLabs.nl (maintainer)
a30ef34b54
Mikael Urankar (mikael) · 0.14.5_7
lang/rust: Bump revisions after 1.86.0

PR:		285840
2a5976aebe
Mikael Urankar (mikael) · 0.14.5_6
lang/rust: Bump revisions after 1.85.0

PR:		284884
cf7c4b037d
Mikael Urankar (mikael) · 0.14.5_5
lang/rust: Bump revisions after 1.84.0

PR:		283962
fccaa1b326
Mikael Urankar (mikael) · 0.14.5_4
lang/rust: Bump revisions after 1.83.0

PR:		283000
1d1fd15a3e
Mikael Urankar (mikael) · 0.14.5_3
lang/rust: Bump revisions after 1.82.0

PR:		282516
ca048c2884
Mikael Urankar (mikael) · 0.14.5_2
lang/rust: Bump revisions after 1.81.0

PR:		281300
89ab81d0e2
Mikael Urankar (mikael) · 0.14.5_1
*/*: remove STRIP_CMD calls in rust based ports

This is not needed after bc4fedc1fec0d359365c04d43be9e32bf101a50e

PR:		246993
Differential Revision:	https://reviews.freebsd.org/D46503
c0d07f1127
Mikael Urankar (mikael) · 0.14.5_1
lang/rust: Bump revisions after 1.80.1

PR:		280490
7a55f95425
Fernando Apesteguía (fernape) · 0.14.5
net/krill: Update to version 0.14.5

ChangeLog: https://nlnetlabs.nl/news/2024/Jun/27/krill-0.13.2-0.14.5-released/

Not merging to quarterly since the branching of the ports tree is very near.

PR:		280035
Reported by:	jaap@NLnetLabs.nl (maintainer)
e658a38096
Mikael Urankar (mikael) · 0.14.4_6
lang/rust: Bump revisions after 1.79.0

PR:		279707
21476ca8a9
Mikael Urankar (mikael) · 0.14.4_5
lang/rust: Bump revisions after 1.78.0

PR:		278834
2322b66100
Mikael Urankar (mikael) · 0.14.4_4
lang/rust: Bump revisions after 1.77.0

PR:		277786
d632fbe55e
Muhammad Moinur Rahman (bofh) · 0.14.4_3
net/krill: Moved man to share/man

Approved by:    portmgr (blanket)
1762f45b54
Mikael Urankar (mikael) · 0.14.4_2
lang/rust: Bump revisions after 1.76.0

PR:		276920
7f5a7b0e52
Mikael Urankar (mikael) · 0.14.4_1
lang/rust: Bump revisions after 1.75.0

PR:		276033
109c3d4629
Muhammad Moinur Rahman (bofh) · 0.14.4
net/krill: Update version 0.14.3=>0.14.4

Changelog: https://github.com/NLnetLabs/krill/releases

PR:		275779
Approved by:	submitter is maintainer
751740a176
Muhammad Moinur Rahman (bofh) · 0.14.3
net/krill: Update version 0.14.2=>0.14.3

Changelog: https://github.com/NLnetLabs/krill/releases/tag/v0.14.3

PR:		275633
Approved by:	submitter is maintainer
759aafff62
Mikael Urankar (mikael) · 0.14.2_1
lang/rust: Bump revisions after 1.74.1

PR:		275243
b2afd89fb2
Robert Clausecker (fuz) · 0.14.2
net/krill: Update to Version 0.14.2

Changelog: https://github.com/NLnetLabs/krill/releases/tag/v0.14.1
Changelog: https://github.com/NLnetLabs/krill/releases/tag/v0.14.2

PR:		274907
f72b97af8e
Mikael Urankar (mikael) · 0.13.1_4
lang/rust: Bump revisions after 1.73.0

PR:		274499
dd10dc88a7
Mikael Urankar (mikael) · 0.13.1_3
lang/rust: Bump revisions after 1.72.0

PR:		273331
aba8da2be1
Mikael Urankar (mikael) · 0.13.1_2
lang/rust: Bump revisions after 1.71.0

PR:		272449
cdf28617b4
Mikael Urankar (mikael) · 0.13.1_1
lang/rust: Bump revisions after 1.70.0

PR:		271797
e1d1045bc7
Robert Clausecker (fuz) · 0.13.1
net/krill: Update to Version 0.13.1

The Krill UI includes a CA selection dropdown in case you have multiple CAs.
This dropdown used to have a scrollbar, which accidentally got lost
in the UI overhaul we did in version 0.13.0. This is now fixed (#1071)

Changelog: https://github.com/NLnetLabs/krill/releases/tag/v0.13.1

PR:		271822
5de5895130
Robert Clausecker (fuz) · 0.13.0
net/krill: Upgrade to Version 0.13

This update to 0.13.0 includes Krill 0.12.3 'Sakura'.

This release contains a feature that enables Publication Server
operators to remove unwanted, surplus, files from their repository.
This feature was cherry-picked from the upcoming major release
branch so that Publication Server operators can use this without
delay.

Note that if you do not use Krill to operate a Publication Server,
then there is no need to upgrade to this version now.

From the announcement for Krill 0.13.0 'DRY'.

This release contains an important fix for an issue affecting v0.12.x
Publication Servers (see PR #1023). It is recommended that affected
installations are upgraded as soon as possible.

The user interface was completely re-implemented in this release
resulting in a smaller browser footprint. Functionality is mostly
unchanged, except that users can now have an optional comment with
each of their ROA configurations. These comments are not part of
published ROA objects - they are meant for local bookkeeping only.

ASPA objects are now supported through the CLI by default. We hope
to add UI support later this year. You can read more about ASPA
support here: https://krill.docs.nlnetlabs.nl/en/0.13.0/manage-aspas.html

Krill can now be used as a full RPKI Trust Anchor, using a detached
(possibly offline) signer for Trust Anchor key operations.

Changelog: https://github.com/NLnetLabs/krill/releases/tag/v0.13.0

PR:		271672
MFH:		2023Q2
09123c95d4
Mikael Urankar (mikael) · 0.12.1_3
lang/rust: Bump revisions after 1.69.0

PR:		270953
3db55c4e97
Mikael Urankar (mikael) · 0.12.1_2
lang/rust: Bump revisions after 1.68.0

PR:		270080
ebf29acc6c
Mikael Urankar (mikael) · 0.12.1_1
lang/rust: Bump revisions after 1.67.1

PR:		269336
109e35fd59
Fernando Apesteguía (fernape) · 0.12.1
net/krill: Update to 0.12.1

ChangeLog: https://www.nlnetlabs.nl/news/2023/Jan/17/krill.0.12.1-released/

Firstly, this release fixes
[CVE-2023-0158](https://nlnetlabs.nl/downloads/routinator/CVE-2023-0158.txt)

Secondly, locking was added in this release to ensure that updates
to the repository content are always applied sequentially. This
fixes a concurrency issue introduced in Krill 0.12.0 that could
result in rejecting an update from a publishing CA.

PR:		269050
Reported by:	jaap@NLnetLabs.nl (maintainer)
MFH:		2023Q1 (security fix)
Security:	CVE-2023-0158
bb104a8ee1
Daniel Engberg (diizzy) · 0.12.0_3
*/*: Bump rust (cargo) ports to reflect on WITH_LTO

Bump ports in tree so they get rebuilt with new default settings
for cargo ports
12f1c627d4