{"action":"closed","issue":{"url":"https://api.github.com/repos/edenhill/librdkafka/issues/2110","repository_url":"https://api.github.com/repos/edenhill/librdkafka","labels_url":"https://api.github.com/repos/edenhill/librdkafka/issues/2110/labels{/name}","comments_url":"https://api.github.com/repos/edenhill/librdkafka/issues/2110/comments","events_url":"https://api.github.com/repos/edenhill/librdkafka/issues/2110/events","html_url":"https://github.com/edenhill/librdkafka/issues/2110","id":381237576,"node_id":"MDU6SXNzdWUzODEyMzc1NzY=","number":2110,"title":"Kerberos authentication allows arbitrary process execution during system(kinit_string)","user":{"login":"cfinkenstadt","id":29575060,"node_id":"MDQ6VXNlcjI5NTc1MDYw","avatar_url":"https://avatars2.githubusercontent.com/u/29575060?v=4","gravatar_id":"","url":"https://api.github.com/users/cfinkenstadt","html_url":"https://github.com/cfinkenstadt","followers_url":"https://api.github.com/users/cfinkenstadt/followers","following_url":"https://api.github.com/users/cfinkenstadt/following{/other_user}","gists_url":"https://api.github.com/users/cfinkenstadt/gists{/gist_id}","starred_url":"https://api.github.com/users/cfinkenstadt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cfinkenstadt/subscriptions","organizations_url":"https://api.github.com/users/cfinkenstadt/orgs","repos_url":"https://api.github.com/users/cfinkenstadt/repos","events_url":"https://api.github.com/users/cfinkenstadt/events{/privacy}","received_events_url":"https://api.github.com/users/cfinkenstadt/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2018-11-15T16:23:19Z","updated_at":"2018-11-16T08:16:57Z","closed_at":"2018-11-16T08:16:57Z","author_association":"NONE","body":"Unrelated to #1303 \r\n\r\nDescription\r\n===========\r\nlibrdkafka allows arbitrary process execution in Kerberos authentication mode.\r\n\r\n\r\nHow to reproduce\r\n================\r\n```\r\nConfiguration { \r\n  \"sasl.kerberos.kinit.cmd\": \"/usr/games/startrek\"\r\n}\r\n```\r\n\r\nChecklist\r\n=========\r\n\r\n**IMPORTANT**: We will close issues where the checklist has not been completed.\r\n\r\nPlease provide the following information:\r\n\r\n - [x] librdkafka version (release number or git tag): 0.11.5\r\n - [x] Apache Kafka version: immaterial\r\n - [x] librdkafka client configuration: sasl.kerberos.kinit.cmd=/usr/games/startrek\r\n - [x] Operating system: Unix System III and following\r\n - [ ] Provide logs (with `debug=..` as necessary) from librdkafka\r\n - [ ] Provide broker log excerpts\r\n - [x] Critical issue\r\n\r\n"}}
{"actor":{"display_login":"edenhill"}}