We are pleased to announce the latest release of Krill, , our RPKI CA and publication server software, version 0.16.1 ‘No Small Wonder’.
This is a security release, and we urgently advise you to update.
This update of Krill fixes three security issues that allow one local Krill user to execute actions on behalf of the resources of another local Krill user, e.g. make ROAs on behalf of other users. These have been assigned CVE-2026-109140, CVE-2026-109141, CVE-2026-109142. Operationally there are no differences between v0.16.1 and v0.16.0.
For all details, please see the release notes.