WebAuth 4.3.2 Announcement
The ITS WebAuth team is pleased to announce Stanford WebAuth 4.3.2. This is a bug-fix release correcting a memory pool management error in mod_webauth. All users of mod_webauth from WebAuth 4.3.0 or later should upgrade to this release.
For documentation and downloads of WebAuth 4.3.2, see:
New Debian packages built against Apache 2.4 have been uploaded to Debian experimental.
The user-visible changes in this release are:
Fix a pool management bug when mod_webauth requested a service token from the WebKDC. A premature release of an APR memory pool could result in a corrupted Kerberos authenticator, resulting in an inability to obtain new service tokens.