)]}'
{"id":"openstack%2Fironic~998021","triplet_id":"openstack%2Fironic~bugfix%2F33.0~I9d48a6827455d115e9e1176f3dee41c9e07251b8","project":"openstack/ironic","branch":"bugfix/33.0","attention_set":{},"removed_from_attention_set":{"11655":{"account":{"_account_id":11655,"name":"Julia Kreger","email":"juliaashleykreger@gmail.com","username":"jkreger","status":"Flying to the moon with a Jetpack!"},"last_update":"2026-07-29 15:20:10.000000000","reason":"Change was submitted"}},"hashtags":["ironic-week-prio"],"change_id":"I9d48a6827455d115e9e1176f3dee41c9e07251b8","subject":"security: Fix poisoning of the allowed origin list","status":"MERGED","created":"2026-07-20 16:11:53.000000000","updated":"2026-07-29 15:24:34.000000000","submitted":"2026-07-29 15:20:10.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"998021","cherry_pick_of_change":998020,"cherry_pick_of_patch_set":1,"meta_rev_id":"ac533e55f8c5a7483537bbe9250d6966a57efffd","_number":998021,"virtual_id_number":998021,"owner":{"_account_id":11655,"name":"Julia Kreger","email":"juliaashleykreger@gmail.com","username":"jkreger","status":"Flying to the moon with a Jetpack!"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":11655,"name":"Julia Kreger","email":"juliaashleykreger@gmail.com","username":"jkreger","status":"Flying to the moon with a Jetpack!"},{"value":0,"_account_id":23851,"name":"Riccardo Pittau","email":"elfosardo@gmail.com","username":"elfosardo"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2026-07-29 15:20:10.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":11655,"name":"Julia Kreger","email":"juliaashleykreger@gmail.com","username":"jkreger","status":"Flying to the moon with a Jetpack!"},"all":[{"value":2,"date":"2026-07-28 22:04:09.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":11655,"name":"Julia Kreger","email":"juliaashleykreger@gmail.com","username":"jkreger","status":"Flying to the moon with a Jetpack!"},{"value":2,"date":"2026-07-29 13:50:48.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":23851,"name":"Riccardo Pittau","email":"elfosardo@gmail.com","username":"elfosardo"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":23851,"name":"Riccardo Pittau","email":"elfosardo@gmail.com","username":"elfosardo"},"all":[{"value":0,"_account_id":11655,"name":"Julia Kreger","email":"juliaashleykreger@gmail.com","username":"jkreger","status":"Flying to the moon with a Jetpack!"},{"value":1,"date":"2026-07-29 13:50:48.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":23851,"name":"Riccardo Pittau","email":"elfosardo@gmail.com","username":"elfosardo"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true},"Backport-Candidate":{"all":[{"value":0,"_account_id":11655,"name":"Julia Kreger","email":"juliaashleykreger@gmail.com","username":"jkreger","status":"Flying to the moon with a Jetpack!"},{"value":0,"_account_id":23851,"name":"Riccardo Pittau","email":"elfosardo@gmail.com","username":"elfosardo"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Do Not Backport"," 0":"Backport Review Needed","+1":"Should Backport"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":11655,"name":"Julia Kreger","email":"juliaashleykreger@gmail.com","username":"jkreger","status":"Flying to the moon with a Jetpack!"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":23851,"name":"Riccardo Pittau","email":"elfosardo@gmail.com","username":"elfosardo"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-07-20 17:14:37.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2026-07-29 13:50:48.000000000","updated_by":{"_account_id":23851,"name":"Riccardo Pittau","email":"elfosardo@gmail.com","username":"elfosardo"},"reviewer":{"_account_id":23851,"name":"Riccardo Pittau","email":"elfosardo@gmail.com","username":"elfosardo"},"state":"REVIEWER"}],"messages":[{"id":"5835bf15189ab399fdcdb96b77aa271acf7a8f4e","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":11655,"name":"Julia Kreger","email":"juliaashleykreger@gmail.com","username":"jkreger","status":"Flying to the moon with a Jetpack!"},"date":"2026-07-20 16:11:53.000000000","message":"Patch Set 1: Cherry Picked from branch bugfix/34.0.","accounts_in_message":[],"_revision_number":1},{"id":"574c5a28f76b2f568996059df8fedb331330b084","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-07-20 17:14:37.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/0e149965efe7458a9ee75535bb8d728f\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/c6321bbf36a14873b0007fd4c7da2d1c : SUCCESS in 16m 57s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/5bda8241c8b84fb5946e1ebbbe4c3b62 : SUCCESS in 22m 03s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/c53e1db9646a4f39ae1e1be6c33ee2e3 : SUCCESS in 9m 52s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/c953a61e23af42bb9ba1de5dc2820bea : SUCCESS in 9m 32s\n- ironic-tox-unit-mysql-migrations https://zuul.opendev.org/t/openstack/build/dfb3ce2d78bf4117ab5265f69f1cce76 : SUCCESS in 7m 13s\n- ironic-tox-unit-with-driver-libs https://zuul.opendev.org/t/openstack/build/302b789b84a643b7ba61b098f0882d95 : SUCCESS in 9m 25s\n- ironic-tempest-functional-python3 https://zuul.opendev.org/t/openstack/build/3eb70446e3f04b93a4ac92fa72a212d9 : SUCCESS in 25m 06s\n- ironic-tempest-bios-redfish-pxe https://zuul.opendev.org/t/openstack/build/806b394441164668b9e33b048e32f195 : SUCCESS in 48m 05s\n- ironic-tempest-uefi-redfish-vmedia https://zuul.opendev.org/t/openstack/build/7663a1d2a5db4401b055b0cf9d37cecb : SUCCESS in 49m 04s\n- ironic-tempest-uefi-redfish-https https://zuul.opendev.org/t/openstack/build/a3041a2d89ea459982693ff29d051798 : SUCCESS in 33m 31s\n- ironic-tempest-bios-ipmi-direct https://zuul.opendev.org/t/openstack/build/69f38958cf834f5aad15061cde91ad71 : SUCCESS in 52m 16s\n- ironic-tempest-bfv https://zuul.opendev.org/t/openstack/build/5490909b82b04574825341649e433b54 : SUCCESS in 44m 49s\n- ironic-tempest-ipa-partition-uefi-pxe-grub2 https://zuul.opendev.org/t/openstack/build/b27ab7ad7cf940479fd58fba80771c30 : SUCCESS in 53m 09s\n- ironic-tempest-uefi-redfish-vmedia-4k https://zuul.opendev.org/t/openstack/build/f936b285e31048c99b9a0a1a3d06b41b : SUCCESS in 50m 54s","accounts_in_message":[],"_revision_number":1},{"id":"1b8e806d910ca4e9df64a49caf772857ea8df762","tag":"autogenerated:gerrit:setHashtag","author":{"_account_id":11655,"name":"Julia Kreger","email":"juliaashleykreger@gmail.com","username":"jkreger","status":"Flying to the moon with a Jetpack!"},"date":"2026-07-28 19:31:17.000000000","message":"Hashtag added: ironic-week-prio","accounts_in_message":[],"_revision_number":1},{"id":"cb801471b811024d3ee4a3e18cc3eaca8e0b51e6","author":{"_account_id":11655,"name":"Julia Kreger","email":"juliaashleykreger@gmail.com","username":"jkreger","status":"Flying to the moon with a Jetpack!"},"date":"2026-07-28 22:04:09.000000000","message":"Patch Set 1: Code-Review+2","accounts_in_message":[],"_revision_number":1},{"id":"8972c00971e1542eae60f0f170f6ee8849280696","author":{"_account_id":23851,"name":"Riccardo Pittau","email":"elfosardo@gmail.com","username":"elfosardo"},"date":"2026-07-29 13:50:48.000000000","message":"Patch Set 1: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":1},{"id":"35768b63abb4ca978af8bd56f4bebe310eababae","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-07-29 13:51:33.000000000","message":"Patch Set 1: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":1},{"id":"0f03a33849e1bb951a0ac43e14e8a8bebeda2d1e","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-07-29 15:20:10.000000000","message":"Patch Set 1: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/a930a100c71645bf8c0223f4055932be\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/145d7263c80844679bde3beba8e1ea18 : SUCCESS in 19m 05s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/29e57f3cc44e44db922aa5ced25944af : SUCCESS in 28m 31s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/6b1e0c9b5b3141d8a71a68cc4d10ce3d : SUCCESS in 10m 21s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/3a73c5aaca7b42648adfc479e2a247b0 : SUCCESS in 9m 09s\n- ironic-tox-unit-mysql-migrations https://zuul.opendev.org/t/openstack/build/5da702cd191e4ece8bfce3ecb788de0e : SUCCESS in 6m 16s\n- ironic-tox-unit-with-driver-libs https://zuul.opendev.org/t/openstack/build/d880f86b8bcc418387bd1a34cca46be7 : SUCCESS in 10m 52s\n- ironic-tempest-functional-python3 https://zuul.opendev.org/t/openstack/build/86ae9cedf6554f2097706e403dbd57c6 : SUCCESS in 39m 50s\n- ironic-tempest-bios-redfish-pxe https://zuul.opendev.org/t/openstack/build/f9cb3d19b83642c492f4b26ff7841b56 : SUCCESS in 35m 25s\n- ironic-tempest-uefi-redfish-vmedia https://zuul.opendev.org/t/openstack/build/eff5db81df3d445aa01d66cdb7c6fb82 : SUCCESS in 52m 50s\n- ironic-tempest-uefi-redfish-https https://zuul.opendev.org/t/openstack/build/1afa4f13bb9b48699454f95783aa29ab : SUCCESS in 35m 52s\n- ironic-tempest-bios-ipmi-direct https://zuul.opendev.org/t/openstack/build/a06d64481dd249ed9ca10142f25f35ad : SUCCESS in 1h 22m 39s\n- ironic-tempest-bfv https://zuul.opendev.org/t/openstack/build/e3d916cf2e484903b3c108dd9eb142a3 : SUCCESS in 47m 37s\n- ironic-tempest-ipa-partition-uefi-pxe-grub2 https://zuul.opendev.org/t/openstack/build/61384769690d4650b7e3b9ee0512e29e : SUCCESS in 57m 07s\n- ironic-tempest-uefi-redfish-vmedia-4k https://zuul.opendev.org/t/openstack/build/9ae9eeb73fa143b79d37d07d7845606b : SUCCESS in 1h 22m 51s","accounts_in_message":[],"_revision_number":1},{"id":"eb7df4959c99bfe43f5322b7b820311b6a977530","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-07-29 15:20:10.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":1},{"id":"ac533e55f8c5a7483537bbe9250d6966a57efffd","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-07-29 15:24:34.000000000","message":"Patch Set 1:\n\nBuild failed (promote pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\nhttps://zuul.opendev.org/t/openstack/buildset/b6bbef4c9bfb42fc9b3d6150614ba974\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/efea35ead7634f058f1d75484820fa0b : SUCCESS in 1m 13s\n- promote-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/5cd20f1fb31a4110bd972c4035a6f4e7 : FAILURE in 52s","accounts_in_message":[],"_revision_number":1}],"current_revision_number":1,"current_revision":"5487279c3a806ceb690e1abc274af8c4bdc64419","revisions":{"5487279c3a806ceb690e1abc274af8c4bdc64419":{"kind":"REWORK","_number":1,"created":"2026-07-20 16:11:53.000000000","uploader":{"_account_id":11655,"name":"Julia Kreger","email":"juliaashleykreger@gmail.com","username":"jkreger","status":"Flying to the moon with a Jetpack!"},"ref":"refs/changes/21/998021/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/ironic","ref":"refs/changes/21/998021/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/ironic refs/changes/21/998021/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/ironic refs/changes/21/998021/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/ironic refs/changes/21/998021/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/ironic refs/changes/21/998021/1"}}},"commit":{"parents":[{"commit":"8a34d6e128af9cf1440da529fc830765c4d99779","subject":"Merge \"CVE-2026-44918: Prevent rehoming resources to nodes with different owner\" into bugfix/33.0","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/ironic/commit/8a34d6e128af9cf1440da529fc830765c4d99779"}]}],"author":{"name":"Julia Kreger","email":"juliaashleykreger@gmail.com","date":"2026-07-13 18:14:07.000000000","tz":-420},"committer":{"name":"Julia Kreger","email":"juliaashleykreger@gmail.com","date":"2026-07-20 16:11:53.000000000","tz":0},"subject":"security: Fix poisoning of the allowed origin list","message":"security: Fix poisoning of the allowed origin list\n\nRecently a bug was identified in nova (bug 2158919) where it was possible\nto poison the origin list because of the way which oslo.config works along\nwith the resulting code pattern in the service. This could lead to memory\nexhaustion or other additional origins being added to the list in memory.\n\nIn any event, this issue was relatively trivial to fix and is being\ntreated as a hardening opportunity.\n\nRelated-Bug: 2160548\nAssisted-By: Claude Opus 4.6\nChange-Id: I9d48a6827455d115e9e1176f3dee41c9e07251b8\nSigned-off-by: Julia Kreger \u003cjuliaashleykreger@gmail.com\u003e\n(cherry picked from commit 762cde0a03e7f2aebb95a4934cc13249689ee2b7)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/ironic/commit/5487279c3a806ceb690e1abc274af8c4bdc64419"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/ironic/commit/5487279c3a806ceb690e1abc274af8c4bdc64419"}]},"branch":"refs/heads/bugfix/33.0","conflicts":{"base":"63ea0647664ccdbdf9a0d5f4717fcd2c922eea45","ours":"8a34d6e128af9cf1440da529fc830765c4d99779","theirs":"ae176160753955741c8b0722da84a3c6e041c4c1","merge_strategy":"recursive","contains_conflicts":false}}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":23851,"name":"Riccardo Pittau","email":"elfosardo@gmail.com","username":"elfosardo"}},{"label":"Workflow","status":"MAY","applied_by":{"_account_id":23851,"name":"Riccardo Pittau","email":"elfosardo@gmail.com","username":"elfosardo"}},{"label":"Backport-Candidate","status":"MAY"}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dMAX"],"failing_atoms":["label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Backport-Candidate","description":"Backport candidate status","status":"NOT_APPLICABLE","is_legacy":false,"applicability_expression_result":{"fulfilled":false,"status":"FAIL"},"submittability_expression_result":{"expression":"is:true","fulfilled":true,"status":"NOT_EVALUATED","passing_atoms":[],"failing_atoms":[],"atom_explanations":{}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dMAX"],"failing_atoms":["label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dMAX"],"failing_atoms":["label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}