MIT Kerberos using invalid in-memory credential cache

Greg Hudson ghudson at
Wed Dec 30 12:13:49 EST 2020

On 12/29/20 7:21 AM, Vipul Mehta wrote:
> I see that some fix has been done in newer version :
> Will it help ? How to debug this issue further in our service ?

It might.  One of the bugs fixed in that commit is that two simultaneous
references to the same memory cache would cause one of the references to
become a dangling pointer when the other is destroyed.  I'm not sure how
upgrading curl would lead to that scenario, though.

If you choose to backport this commit, note that it contained a bug,
described here:

More information about the krbdev mailing list