)]}'
{"id":"openstack%2Fkeystone~747001","triplet_id":"openstack%2Fkeystone~master~I1d3776f7f1feb6485feecb140703f23027ca3a6f","project":"openstack/keystone","branch":"master","hashtags":[],"change_id":"I1d3776f7f1feb6485feecb140703f23027ca3a6f","subject":"Bump pysaml2 requeriment to avoid CVE-2020-5390","status":"MERGED","created":"2020-08-19 17:19:23.000000000","updated":"2020-08-25 15:41:45.000000000","submitted":"2020-08-25 15:38:54.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":7,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"747001-1598369934428-9b0f7ed9","meta_rev_id":"3e944d1d217b9ec333b6d2772362a171a712bc73","_number":747001,"virtual_id_number":747001,"owner":{"_account_id":8866,"name":"Raildo Mascena de Sousa Filho","email":"rmascena@redhat.com","username":"raildo"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2020-08-25 15:38:54.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},{"value":0,"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},{"value":0,"_account_id":8866,"name":"Raildo Mascena de Sousa Filho","email":"rmascena@redhat.com","username":"raildo"}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"all":[{"value":2,"date":"2020-08-25 13:27:25.000000000","_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":2,"date":"2020-08-25 13:25:01.000000000","_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},{"value":0,"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},{"value":0,"_account_id":8866,"name":"Raildo Mascena de Sousa Filho","email":"rmascena@redhat.com","username":"raildo"}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"all":[{"value":1,"date":"2020-08-25 13:27:25.000000000","_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},{"value":0,"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},{"value":0,"_account_id":8866,"name":"Raildo Mascena de Sousa Filho","email":"rmascena@redhat.com","username":"raildo"}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},{"_account_id":8866,"name":"Raildo Mascena de Sousa Filho","email":"rmascena@redhat.com","username":"raildo"},{"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2020-08-21 13:36:24.000000000","updated_by":{"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},"reviewer":{"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},"state":"REVIEWER"},{"updated":"2020-08-25 13:25:01.000000000","updated_by":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"reviewer":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"state":"REVIEWER"},{"updated":"2020-08-25 13:27:25.000000000","updated_by":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"reviewer":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"state":"REVIEWER"},{"updated":"2020-08-25 15:38:54.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"}],"messages":[{"id":"90fb6f2c3f13519b963be8cca50dc8cabc05c26b","author":{"_account_id":8866,"name":"Raildo Mascena de Sousa Filho","email":"rmascena@redhat.com","username":"raildo"},"date":"2020-08-19 17:19:23.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"fe808d9b2b9377b36353435c040e52224928b3bf","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-08-19 19:55:28.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/c4d24bcb117243ecac09286248a84879 : SUCCESS in 20m 08s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/e76e3c1968f24221a6281d3bf3d6e124 : SUCCESS in 15m 06s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/caa4491610aa4bad983b89843090c004 : SUCCESS in 8m 35s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/afef7948584b4898aea356a07189fe96 : SUCCESS in 14m 32s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/9bc93910663148819205d7e5194e4714 : SUCCESS in 12m 13s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/38a35247520b4c0ca08ec7977aee3c39 : SUCCESS in 12m 45s\n- requirements-check https://zuul.opendev.org/t/openstack/build/175925b064c342ad8c14fa8e38376fb9 : FAILURE in 2m 33s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/e9fbadb1b98245f5a3dec0e68b7ab0cb : SUCCESS in 30m 26s\n- keystone-dsvm-py3-functional-federation-ubuntu-focal https://zuul.opendev.org/t/openstack/build/41c7eda68fef46f5b209f01a8f678676 : SUCCESS in 34m 37s (non-voting)\n- keystone-dsvm-py3-functional-federation-ubuntu-focal-k2k https://zuul.opendev.org/t/openstack/build/67052754afe1479aa0b811a97a7b7d0a : SUCCESS in 34m 52s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/9caee9173b514fefa6bea37f917e1a63 : SUCCESS in 15m 30s (non-voting)\n- keystone-tox-protection https://zuul.opendev.org/t/openstack/build/5c19746177b5465eac05aebd2647202c : SUCCESS in 43m 12s","accounts_in_message":[],"_revision_number":1},{"id":"460c9d5786abe7196a108f2e9ae18748be428bb8","author":{"_account_id":8866,"name":"Raildo Mascena de Sousa Filho","email":"rmascena@redhat.com","username":"raildo"},"date":"2020-08-19 20:14:26.000000000","message":"Uploaded patch set 2.","accounts_in_message":[],"_revision_number":2},{"id":"a692d8a1cfca262d1760c1fdf709a05d9dadbb61","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-08-19 22:20:13.000000000","message":"Patch Set 2: Verified+1\n\nBuild succeeded (check pipeline).\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/8543e88bd20a4512b8390326bde8991d : SUCCESS in 28m 33s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/81569626b82c4962a1cec9c46288604e : SUCCESS in 25m 37s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/0b51aaf8afe34ec7b19e39c56b399461 : SUCCESS in 6m 32s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/c2721baec0bc47388d67174a4025c7e3 : SUCCESS in 13m 27s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/4af650aab13b400aa04476b4ee61c5a7 : SUCCESS in 12m 27s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/8b67f0befe53401eb87198ac574633ef : SUCCESS in 15m 16s\n- requirements-check https://zuul.opendev.org/t/openstack/build/9e6eeb6fcb5b4bf890ac3c554243f2dd : SUCCESS in 3m 47s\n- grenade https://zuul.opendev.org/t/openstack/build/769b514b80984bdebd36c3337a430493 : SUCCESS in 1h 02m 59s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/aa65f8d50fee4115879ed2deab7d2eaa : SUCCESS in 1h 34m 50s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/c8bc9c7cedd549fabc32716ec548a440 : SUCCESS in 32m 44s\n- keystone-dsvm-py3-functional-federation-ubuntu-focal https://zuul.opendev.org/t/openstack/build/6a3b358437f34ad298b63a7b1b316b84 : SUCCESS in 33m 23s (non-voting)\n- keystone-dsvm-py3-functional-federation-ubuntu-focal-k2k https://zuul.opendev.org/t/openstack/build/64c1a4477c794a2cb6f6ca8ef086353a : SUCCESS in 32m 19s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/5844044332ab45d590e4a68700a51383 : FAILURE in 16m 16s (non-voting)\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/b83bf76d19084f39920f0e76301d79c9 : SUCCESS in 43m 03s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/6969a38130224af7a7ceb28d3f35d552 : SUCCESS in 54m 39s\n- keystone-tox-protection https://zuul.opendev.org/t/openstack/build/2a5d6a581c514987a21a41b34e6d3654 : SUCCESS in 37m 28s","accounts_in_message":[],"_revision_number":2},{"id":"44af3393f74f41fdf15a61b752d2a71f292409ac","author":{"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},"date":"2020-08-21 13:36:24.000000000","message":"Patch Set 2: Code-Review+2","accounts_in_message":[],"_revision_number":2},{"id":"27225b616cae87bec7b641d9d6554ee5f98479a8","author":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"date":"2020-08-24 18:13:36.000000000","message":"Patch Set 2: Code-Review-1\n\n(3 comments)\n\nSmall issues on the commit message.","accounts_in_message":[],"_revision_number":2},{"id":"585f2b5396c15a20503da3ac4bf75b85bc8e0c64","author":{"_account_id":8866,"name":"Raildo Mascena de Sousa Filho","email":"rmascena@redhat.com","username":"raildo"},"date":"2020-08-24 18:33:06.000000000","message":"Patch Set 2:\n\n(3 comments)","accounts_in_message":[],"_revision_number":2},{"id":"b5c983fbfac2f660837bba963e9d55ced7e949e3","author":{"_account_id":8866,"name":"Raildo Mascena de Sousa Filho","email":"rmascena@redhat.com","username":"raildo"},"date":"2020-08-24 18:33:26.000000000","message":"Uploaded patch set 3: Commit message was updated.","accounts_in_message":[],"_revision_number":3},{"id":"fa664eea2a8ec735c7cebc8a0197d1b0c6e77581","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-08-24 20:34:56.000000000","message":"Patch Set 3: Verified+1\n\nBuild succeeded (check pipeline).\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/95343b52c22246c4804cebcb1f45f6c6 : SUCCESS in 14m 46s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/60cac2986ec74c399fb0099e70514994 : SUCCESS in 16m 05s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/47ec1b1b79c64746855b72d4f564809b : SUCCESS in 13m 13s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/09b33186fdd0449989d3be9ee9cadb20 : SUCCESS in 37m 25s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/9d47ea6d706b4022b85abb239a3170e1 : SUCCESS in 20m 09s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/9937b8be6c544762b3a99f6824af4df6 : SUCCESS in 12m 38s\n- requirements-check https://zuul.opendev.org/t/openstack/build/26d78e84fabf420293ee50c4230cdd78 : SUCCESS in 4m 18s\n- grenade https://zuul.opendev.org/t/openstack/build/0c2e4d47c5e04891834bb47304e9d7f0 : SUCCESS in 1h 04m 48s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/f6852a386be349da80cf96d650dfc7bc : SUCCESS in 1h 06m 15s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/0546fca63cb94bb19dcb6540258ce53c : SUCCESS in 40m 07s\n- keystone-dsvm-py3-functional-federation-ubuntu-focal https://zuul.opendev.org/t/openstack/build/a313b86e72cf423f957eecb2dc6a7a3a : SUCCESS in 28m 46s (non-voting)\n- keystone-dsvm-py3-functional-federation-ubuntu-focal-k2k https://zuul.opendev.org/t/openstack/build/82752833bd7042d39984f4ef2f3fb230 : SUCCESS in 25m 47s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/d7edeeb6f00845cb987596e17a6a64a1 : SUCCESS in 10m 29s (non-voting)\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/9558ba3274b74ae497c64a480f152926 : SUCCESS in 36m 47s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/a947085f685641c69f8f8228cd960d30 : SUCCESS in 53m 34s\n- keystone-tox-protection https://zuul.opendev.org/t/openstack/build/d860d50aeb9942d380a24638305d8fa2 : SUCCESS in 34m 34s","accounts_in_message":[],"_revision_number":3},{"id":"afafeab70680edb3c661ac7ed8e80e7399c33433","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2020-08-25 13:25:01.000000000","message":"Patch Set 3: Code-Review+2","accounts_in_message":[],"_revision_number":3},{"id":"d260e3de2a56fa089d31cbb26e3ab238972e85fe","author":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"date":"2020-08-25 13:27:25.000000000","message":"Patch Set 3: Code-Review+2 Workflow+1\n\n(1 comment)","accounts_in_message":[],"_revision_number":3},{"id":"f6c3eb16f0a8e565ca5a0feb94bf97d7d38e4429","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-08-25 13:27:43.000000000","message":"Patch Set 3: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":3},{"id":"578830916d27b10cf02653f7e0b5ef6c1e000494","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-08-25 15:38:54.000000000","message":"Patch Set 3: Verified+2\n\nBuild succeeded (gate pipeline).\n\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/112d7c8815394fdaa1bae317375e1e26 : SUCCESS in 25m 03s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/1c227852a6e743ef8df7cae4f9ae6dc5 : SUCCESS in 6m 37s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/24eb3c6df4224100aa267a98024ba4e7 : SUCCESS in 24m 54s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/94448e8ecff84b2692b4ab3c7d597661 : SUCCESS in 25m 12s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/23875296c1d946a3abfd27d78d64b324 : SUCCESS in 14m 01s\n- requirements-check https://zuul.opendev.org/t/openstack/build/e2d57e2620d64d75994c5ca5458ffb85 : SUCCESS in 3m 12s\n- grenade https://zuul.opendev.org/t/openstack/build/8e06bf719df3425281e9f8acb2268422 : SUCCESS in 1h 01m 47s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/ae3d6013c32d478b897eafe023ffd5ee : SUCCESS in 1h 22m 51s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/4c9f4ac1800c404b90018148a8833060 : SUCCESS in 39m 32s\n- keystone-dsvm-py3-functional-federation-ubuntu-focal-k2k https://zuul.opendev.org/t/openstack/build/23bf62c7c09642b0b4ab5b31580d171d : SUCCESS in 24m 15s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/8257d059a1aa4209b9f747615a2c99d5 : SUCCESS in 1h 11m 40s\n- keystone-tox-protection https://zuul.opendev.org/t/openstack/build/ecf660fb07c4491a9714d9b49fcacbf2 : SUCCESS in 43m 06s","accounts_in_message":[],"_revision_number":3},{"id":"8b99f1830ff654b4c81f8c1a4a59ea23cbf244af","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-08-25 15:38:54.000000000","message":"Change has been successfully merged by Zuul","accounts_in_message":[],"_revision_number":3},{"id":"3e944d1d217b9ec333b6d2772362a171a712bc73","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-08-25 15:41:45.000000000","message":"Patch Set 3:\n\nBuild succeeded (promote pipeline).\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/0d7c3cee7a2f425aa402df2e956e2c37 : SUCCESS in 1m 55s","accounts_in_message":[],"_revision_number":3}],"current_revision_number":3,"current_revision":"c0d63cecd8c082fbde9843b3ebc2d465ad341d35","revisions":{"2a02f1c67084b5b14f797949688ab09be498a83c":{"kind":"REWORK","_number":1,"created":"2020-08-19 17:19:23.000000000","uploader":{"_account_id":8866,"name":"Raildo Mascena de Sousa Filho","email":"rmascena@redhat.com","username":"raildo"},"ref":"refs/changes/01/747001/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/01/747001/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/01/747001/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/01/747001/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/01/747001/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/01/747001/1"}}},"commit":{"parents":[{"commit":"7d6c71ba26694c21110280e741b9ffe2d36a94ca","subject":"Support format for msgpack \u003c 1.0 in token formatter","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/7d6c71ba26694c21110280e741b9ffe2d36a94ca"}]}],"author":{"name":"Raildo Mascena","email":"rmascena@localhost.localdomain","date":"2020-08-19 17:05:31.000000000","tz":-180},"committer":{"name":"Raildo Mascena","email":"rmascena@redhat.com","date":"2020-08-19 17:18:58.000000000","tz":-180},"subject":"Bump pysaml2 requeriment to avoid CVE-2020-5390[0]","message":"Bump pysaml2 requeriment to avoid CVE-2020-5390[0]\n\nAlthout, Keystone doesn\u0027t use the pysaml2 signtarue on [1]\nWould be nice to bump the pysaml2 version for, at least, 5.0.0[2] in order to have the the CVE fix\nincluded.\n\n[0] https://github.com/advisories/GHSA-qf7v-8hj3-4xw7\n[1] https://opendev.org/openstack/keystone/src/branch/stable/queens/keystone/federation/idp.py#L385-L459\n[2] https://github.com/IdentityPython/pysaml2/releases/tag/v5.0.0\n\nChange-Id: I1d3776f7f1feb6485feecb140703f23027ca3a6f\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/2a02f1c67084b5b14f797949688ab09be498a83c"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/2a02f1c67084b5b14f797949688ab09be498a83c"}]},"branch":"refs/heads/master"},"6623a6974df1d7fb91cda4ddb854b1885eac1828":{"kind":"REWORK","_number":2,"created":"2020-08-19 20:14:26.000000000","uploader":{"_account_id":8866,"name":"Raildo Mascena de Sousa Filho","email":"rmascena@redhat.com","username":"raildo"},"ref":"refs/changes/01/747001/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/01/747001/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/01/747001/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/01/747001/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/01/747001/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/01/747001/2"}}},"commit":{"parents":[{"commit":"7d6c71ba26694c21110280e741b9ffe2d36a94ca","subject":"Support format for msgpack \u003c 1.0 in token formatter","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/7d6c71ba26694c21110280e741b9ffe2d36a94ca"}]}],"author":{"name":"Raildo Mascena","email":"rmascena@localhost.localdomain","date":"2020-08-19 17:05:31.000000000","tz":-180},"committer":{"name":"Raildo Mascena","email":"rmascena@redhat.com","date":"2020-08-19 20:12:27.000000000","tz":-180},"subject":"Bump pysaml2 requeriment to avoid CVE-2020-5390","message":"Bump pysaml2 requeriment to avoid CVE-2020-5390\n\nAlthout, Keystone doesn\u0027t use the pysaml2 signtarue on [0]\nWould be nice to bump the pysaml2 version for, at least, 5.0.0[1] in order to have the the CVE fix\nincluded[2].\n\n[0]https://opendev.org/openstack/keystone/src/branch/master/keystone/federation/idp.py#L440-L521\n[1] https://github.com/IdentityPython/pysaml2/releases/tag/v5.0.0\n[2] https://github.com/advisories/GHSA-qf7v-8hj3-4xw7\n\nChange-Id: I1d3776f7f1feb6485feecb140703f23027ca3a6f\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/6623a6974df1d7fb91cda4ddb854b1885eac1828"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/6623a6974df1d7fb91cda4ddb854b1885eac1828"}]},"branch":"refs/heads/master"},"c0d63cecd8c082fbde9843b3ebc2d465ad341d35":{"kind":"NO_CODE_CHANGE","_number":3,"created":"2020-08-24 18:33:26.000000000","uploader":{"_account_id":8866,"name":"Raildo Mascena de Sousa Filho","email":"rmascena@redhat.com","username":"raildo"},"ref":"refs/changes/01/747001/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/01/747001/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/01/747001/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/01/747001/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/01/747001/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/01/747001/3"}}},"commit":{"parents":[{"commit":"7d6c71ba26694c21110280e741b9ffe2d36a94ca","subject":"Support format for msgpack \u003c 1.0 in token formatter","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/7d6c71ba26694c21110280e741b9ffe2d36a94ca"}]}],"author":{"name":"Raildo Mascena","email":"rmascena@localhost.localdomain","date":"2020-08-19 17:05:31.000000000","tz":-180},"committer":{"name":"Raildo Mascena","email":"rmascena@redhat.com","date":"2020-08-24 18:31:55.000000000","tz":-180},"subject":"Bump pysaml2 requeriment to avoid CVE-2020-5390","message":"Bump pysaml2 requeriment to avoid CVE-2020-5390\n\nAlthough, Keystone doesn\u0027t use the pysaml2 signature on [0]\nWould be nice to bump the pysaml2 version for, at least, 5.0.0[1] in\norder to have the the CVE fix included[2].\n\n[0]https://opendev.org/openstack/keystone/src/branch/master/keystone/federation/idp.py#L440-L521\n[1] https://github.com/IdentityPython/pysaml2/releases/tag/v5.0.0\n[2] https://github.com/advisories/GHSA-qf7v-8hj3-4xw7\n\nChange-Id: I1d3776f7f1feb6485feecb140703f23027ca3a6f\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/c0d63cecd8c082fbde9843b3ebc2d465ad341d35"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/c0d63cecd8c082fbde9843b3ebc2d465ad341d35"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[],"submit_requirements":[]}
