)]}'
{"id":"openstack%2Fkeystone~990486","triplet_id":"openstack%2Fkeystone~master~I2fe6089886eebf3775930451b87771e40b5e179e","project":"openstack/keystone","branch":"master","topic":"review/990486","attention_set":{},"removed_from_attention_set":{"7973":{"account":{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},"last_update":"2026-06-01 11:08:04.000000000","reason":"Change was submitted"},"7414":{"account":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"last_update":"2026-06-01 11:08:04.000000000","reason":"Change was submitted"},"14250":{"account":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"last_update":"2026-06-01 08:15:56.000000000","reason":"\u003cGERRIT_ACCOUNT_14250\u003e replied on the change","reason_account":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"}},"27900":{"account":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"last_update":"2026-06-01 11:08:04.000000000","reason":"Change was submitted"}},"hashtags":["CVE-2026-42998"],"change_id":"I2fe6089886eebf3775930451b87771e40b5e179e","subject":"Fix user impersonation through application credentials (CVE-2026-42998)","status":"MERGED","created":"2026-05-28 15:05:16.000000000","updated":"2026-06-01 11:10:49.000000000","submitted":"2026-06-01 11:08:04.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":1,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"990486-review/990486","meta_rev_id":"c4342c5371cae85e904f545fbc230b76ef65609d","_number":990486,"virtual_id_number":990486,"owner":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"value":0,"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2026-06-01 11:08:04.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"all":[{"value":2,"date":"2026-06-01 08:15:56.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"value":2,"date":"2026-05-29 12:37:09.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"all":[{"value":1,"date":"2026-06-01 08:15:56.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"value":0,"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"}],"reviewers":{"CC":[{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"}],"REVIEWER":[{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-05-28 15:05:16.000000000","updated_by":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"reviewer":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"state":"REVIEWER"},{"updated":"2026-05-28 16:02:40.000000000","updated_by":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"reviewer":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"state":"CC"},{"updated":"2026-05-28 17:24:32.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2026-05-28 19:41:49.000000000","updated_by":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"reviewer":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"state":"REVIEWER"},{"updated":"2026-05-28 20:06:47.000000000","updated_by":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"reviewer":{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},"state":"REVIEWER"},{"updated":"2026-05-28 20:06:47.000000000","updated_by":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"reviewer":{"_account_id":7414,"name":"David Wilde","email":"dwilde@redhat.com","username":"d34dh0r53"},"state":"REVIEWER"},{"updated":"2026-05-29 09:59:48.000000000","updated_by":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"reviewer":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"state":"CC"}],"messages":[{"id":"ad9fce027006d87be6a6b3b1a5f64825f07d856c","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"date":"2026-05-28 15:05:16.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"f31afdb36ec4bd6c498245569bdfd163a30ad0ab","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"date":"2026-05-28 16:02:40.000000000","message":"Uploaded patch set 2: Patch Set 1 was rebased.","accounts_in_message":[],"_revision_number":2},{"id":"1a3596dddbec5c9013847f03ee1bf7b2ec99f2a1","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-05-28 17:24:32.000000000","message":"Patch Set 2: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/608e5ffa44fc41be94fe9e84a8c5bcba\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/5b4a5d9f40fc428a952ef43661f63d67 : SUCCESS in 17m 09s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/96869a3920c846cdbf44d95189c16ad9 : FAILURE in 3m 13s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/2a299fe3e4d447339dd2bf43d6525c83 : SUCCESS in 7m 34s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/aa8e7c9f28334a9fa6377ba07ae88739 : SUCCESS in 7m 13s\n- openstack-tox-py314 https://zuul.opendev.org/t/openstack/build/4d9cddb376984d4eb3a716609b6d2527 : SUCCESS in 17m 12s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/c7645e88329a4dfca878f579c9d10d12 : SUCCESS in 15m 28s\n- grenade https://zuul.opendev.org/t/openstack/build/718161a417184cf8b5ebe202bfe0b72d : SUCCESS in 35m 57s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/0113e6cd59ec4d619736093b214eb963 : SUCCESS in 1h 20m 01s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/d861e6731b664a3f94b2616e69775bdf : SUCCESS in 7m 38s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/3f9f9c5613874f81a1ae59df2c88edbb : SUCCESS in 19m 01s (non-voting)\n- keystone-tempest https://zuul.opendev.org/t/openstack/build/41f4ad4466834b8e887192ab1c845cab : SUCCESS in 13m 55s\n- keystone-tempest-fips https://zuul.opendev.org/t/openstack/build/1a89007e77be4b439129fbdd566909f3 : FAILURE in 19m 57s (non-voting)\n- keystone-tempest-federation https://zuul.opendev.org/t/openstack/build/53cbcf13ec544f1a85cae7a2bf85543e : FAILURE in 30m 20s (non-voting)\n- keystone-tempest-federation-k2k https://zuul.opendev.org/t/openstack/build/b4779476f9b544eb9ef9fe13eaa59931 : SUCCESS in 22m 23s\n- keystone-tempest-oidc-federation https://zuul.opendev.org/t/openstack/build/fe1efb460baa4763947de8de0db501d8 : FAILURE in 34m 45s\n- keystone-tempest-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/67dad36c5c5047078b1cdcbf24462d8e : SUCCESS in 28m 37s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/fbd630fb184c4215a6ea83bbd49b2ec7 : SUCCESS in 34m 02s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/5ddd1d17267d47fea762892f3bba9033 : SUCCESS in 22m 03s\n- codegenerator-openapi-identity-tips-with-api-ref https://zuul.opendev.org/t/openstack/build/ad78c9582a834e5282b33fff0453888c : SUCCESS in 9m 16s (non-voting)","accounts_in_message":[],"_revision_number":2},{"id":"53357bd61da2ef823cc8ce9cafd4438cb9038be9","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-05-28 17:55:49.000000000","message":"Patch Set 2:\n\nBuild succeeded (ARM64 pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/5b75f64a51bc4a6b91ff32af42a88d2e\n\n- openstack-tox-py311-arm64 https://zuul.opendev.org/t/openstack/build/ea5558e126994812826062c7fb1b1f02 : NODE_FAILURE Node(set) request 4f421a5bc9ac469f97924266d13047d8 failed in 0s (non-voting)\n- openstack-tox-py313-arm64 https://zuul.opendev.org/t/openstack/build/8ef68bcc63834dbdb115f0500882717c : NODE_FAILURE Node(set) request 505d094d5ba04f3b9ddee6388f7b8e4c failed in 0s (non-voting)\n- openstack-tox-py314-arm64 https://zuul.opendev.org/t/openstack/build/557d9bfa852d44ad904d761150c6848c : NODE_FAILURE Node(set) request 37f5f24973a74aa09521f6a5dddeb593 failed in 0s (non-voting)","accounts_in_message":[],"_revision_number":2},{"id":"c83b9d63253304a1c3fb7bd8bba3a2e6c0254052","tag":"autogenerated:gerrit:newWipPatchSet","author":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"date":"2026-05-28 19:41:49.000000000","message":"Uploaded patch set 3: Patch Set 2 was rebased.\n\nOutdated Votes:\n* Verified-1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":3},{"id":"507dd5e8368a0a3b2aa8b8d0b9ccd3396fb70a77","author":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"date":"2026-05-28 20:06:47.000000000","message":"Patch Set 3:\n\nThis change is ready for review.","accounts_in_message":[],"_revision_number":3},{"id":"ee6065a6c7a37fc5a5a5f4529d0d0c89b2baddaa","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"date":"2026-05-28 21:33:17.000000000","message":"Uploaded patch set 4: Patch Set 3 was rebased.","accounts_in_message":[],"_revision_number":4},{"id":"0e3698da3f8969923a3ca2c9bb91b484a73d764b","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-05-28 22:47:19.000000000","message":"Patch Set 4: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/a5d40269351149ebbc9e772b21842213\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/8fccf23cf586429e833932ed112846f4 : SUCCESS in 17m 44s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/dd4a3418a32a41d0abfda29d7486da25 : SUCCESS in 3m 37s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/7a80780c425945fd84ec4e710e25b4c6 : SUCCESS in 15m 39s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/faec06548f89449c9a0a0e1960591aa0 : SUCCESS in 12m 04s\n- openstack-tox-py314 https://zuul.opendev.org/t/openstack/build/76f5d6e8d8194e71af1c432acabe6b32 : SUCCESS in 16m 16s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/2df01e9f470246cbb5f38d1d3955e7f4 : SUCCESS in 14m 00s\n- grenade https://zuul.opendev.org/t/openstack/build/468b77d665174259bae77690fb27b631 : SUCCESS in 35m 31s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/3d6f95ebe7684c1194403c38ffdb6c2b : SUCCESS in 1h 04m 59s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/966f37d7454344ab8cec6991eec96b58 : SUCCESS in 12m 15s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/256a2d8d4d4e485092e286e0b2c6971d : SUCCESS in 16m 45s (non-voting)\n- keystone-tempest https://zuul.opendev.org/t/openstack/build/f5fce76d109e4e188d348bdcf5a4c79d : SUCCESS in 32m 07s\n- keystone-tempest-fips https://zuul.opendev.org/t/openstack/build/c51f2af5a2134787808be50065de3ef5 : FAILURE in 17m 06s (non-voting)\n- keystone-tempest-federation https://zuul.opendev.org/t/openstack/build/4d70f6d039544d59930a0a149ab81a6f : FAILURE in 18m 40s (non-voting)\n- keystone-tempest-federation-k2k https://zuul.opendev.org/t/openstack/build/574d40dabedf4534a34d384598fcec5e : SUCCESS in 31m 26s\n- keystone-tempest-oidc-federation https://zuul.opendev.org/t/openstack/build/8ee13ef61d9940c698867ed138a3cac5 : FAILURE in 36m 38s\n- keystone-tempest-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/75cf8d6c00c14c13976c3db42a089b45 : SUCCESS in 38m 47s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/450e9aa8992643bb8c466c3828046f72 : SUCCESS in 1h 06m 38s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/c8dac68214cf435ea5a95cda380ecd86 : SUCCESS in 21m 34s\n- codegenerator-openapi-identity-tips-with-api-ref https://zuul.opendev.org/t/openstack/build/c8a8d49b8b564a18adbd2eefdd9fada2 : SUCCESS in 4m 11s (non-voting)","accounts_in_message":[],"_revision_number":4},{"id":"0e32359a275d28166553cd4b915af7fa5041a80e","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-05-28 23:24:25.000000000","message":"Patch Set 4:\n\nBuild succeeded (ARM64 pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/2598148d8dd745a6adde3a343363fc50\n\n- openstack-tox-py311-arm64 https://zuul.opendev.org/t/openstack/build/9827ff90f1e24b8aacfa6e78a0b49bb3 : SUCCESS in 21m 19s (non-voting)\n- openstack-tox-py313-arm64 https://zuul.opendev.org/t/openstack/build/6b4183b273274d58b04748fd759ccbd9 : SUCCESS in 20m 03s (non-voting)\n- openstack-tox-py314-arm64 https://zuul.opendev.org/t/openstack/build/2b01f6792b6e4031a2833eb50ec6a701 : SUCCESS in 28m 06s (non-voting)","accounts_in_message":[],"_revision_number":4},{"id":"cdace0e4b9571a6f7372402ce86ed56c7a3e0647","tag":"autogenerated:gerrit:setHashtag","author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"date":"2026-05-29 06:39:10.000000000","message":"Hashtag added: CVE-2026-42998","accounts_in_message":[],"_revision_number":4},{"id":"19ef25529b79804aac8cce170489c6a4a52dd129","author":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"date":"2026-05-29 09:59:48.000000000","message":"Patch Set 4:\n\n(1 comment)","accounts_in_message":[],"_revision_number":4},{"id":"67fa68f157da0d4c2a3f1b434bb782532e12d84a","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-05-29 11:07:35.000000000","message":"Patch Set 4: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/57fa0f708b2d42aba79dfb6f549514ae\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/127b6a20e0b341f6ac6643fac94bcf3b : SUCCESS in 15m 47s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/6980dc33de7340e9a87b2382cc8ee1f5 : SUCCESS in 5m 55s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/065636b1bf4441d58a83b788fd4322c9 : SUCCESS in 10m 36s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/6ad03c08dfb74d2ca59e3971a79c4810 : SUCCESS in 11m 31s\n- openstack-tox-py314 https://zuul.opendev.org/t/openstack/build/f86efe9d796246b4abd56f8f7739e9c2 : SUCCESS in 9m 05s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/8c5cbb10d1434c36995cf4b3c7f36e1b : SUCCESS in 14m 27s\n- grenade https://zuul.opendev.org/t/openstack/build/1d3f883d999b4e5bb89be1e0eef04653 : SUCCESS in 1h 01m 27s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/28f4af8691164142b612c89fcb3c0c8d : SUCCESS in 57m 05s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/226b81a40db34fbfbd62f3d21d31acf5 : SUCCESS in 12m 53s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/88107c18945c4e29b003a803b1778d7b : SUCCESS in 8m 42s (non-voting)\n- keystone-tempest https://zuul.opendev.org/t/openstack/build/729cb9d0269743af9f108983e98d027d : SUCCESS in 22m 52s\n- keystone-tempest-fips https://zuul.opendev.org/t/openstack/build/84826e2708c94640bcfe0567feb095e8 : FAILURE in 20m 03s (non-voting)\n- keystone-tempest-federation https://zuul.opendev.org/t/openstack/build/d65887f14faa47808e539b9b1d03369b : FAILURE in 19m 30s (non-voting)\n- keystone-tempest-federation-k2k https://zuul.opendev.org/t/openstack/build/f22c8332ff74477cb9932fe7832dcfe9 : SUCCESS in 16m 27s\n- keystone-tempest-oidc-federation https://zuul.opendev.org/t/openstack/build/4e95c19c6b764282a111b381a8e773dc : SUCCESS in 31m 33s\n- keystone-tempest-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/ee20e427e0dd46779859a007778aab10 : SUCCESS in 29m 14s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/1678fee709024f698439f81cfa804c64 : SUCCESS in 34m 05s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/649d6adf82544db0a5ea74a58fd4a029 : SUCCESS in 35m 00s\n- codegenerator-openapi-identity-tips-with-api-ref https://zuul.opendev.org/t/openstack/build/b79626a3a84a4ae8b1e586cc4ec4a45d : SUCCESS in 8m 32s (non-voting)","accounts_in_message":[],"_revision_number":4},{"id":"853ab5f4f22a16729f6d6836daec2568fcdb0ade","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-05-29 12:23:34.000000000","message":"Patch Set 4:\n\nBuild succeeded (ARM64 pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/999b73fe5dd24b1f91e2101bcf981f88\n\n- openstack-tox-py311-arm64 https://zuul.opendev.org/t/openstack/build/5d6d20f43cdf4fa5b56a584559ad33cb : SUCCESS in 22m 03s (non-voting)\n- openstack-tox-py313-arm64 https://zuul.opendev.org/t/openstack/build/0ff2b45dd716422093a583e9ffd69404 : SUCCESS in 20m 35s (non-voting)\n- openstack-tox-py314-arm64 https://zuul.opendev.org/t/openstack/build/846fd921257f47e69534cb3248d0be95 : SUCCESS in 29m 13s (non-voting)","accounts_in_message":[],"_revision_number":4},{"id":"c9a4301c20c112653d5990ec831830465b3e8f9d","author":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"date":"2026-05-29 12:37:09.000000000","message":"Patch Set 4: Code-Review+2","accounts_in_message":[],"_revision_number":4},{"id":"90a8e69ecf03b45d1b50f65a25cb09c3e188787b","author":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"date":"2026-06-01 08:15:56.000000000","message":"Patch Set 4: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":4},{"id":"8d5b506d896e109224bc874bd6a1abe523e5f30a","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-01 08:16:27.000000000","message":"Patch Set 4: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":4},{"id":"d5a86965831afd4c864687416ce715e8aaff0ea7","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-01 11:08:04.000000000","message":"Patch Set 4: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/4ad63599600c4bcfa53defda6a17ae4e\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/a6812aaac5d24ffb8d0ffc334427cb25 : SUCCESS in 5m 44s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/433d14fd70a54af694ebe7d79196deaa : SUCCESS in 14m 07s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/d75601ba3c1b4940b2bff5e17f11b9a5 : SUCCESS in 11m 57s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/51926f75c04d4fce92bf72f834ffaea8 : SUCCESS in 13m 40s\n- grenade https://zuul.opendev.org/t/openstack/build/6c050e4639474b74b2dc19a554a5d030 : SUCCESS in 1h 03m 51s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/386218f6ab72477ca060d7c9c90a2737 : SUCCESS in 2h 04m 21s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/44637c7dedcd4d0b956ab978e16519bd : SUCCESS in 14m 16s\n- keystone-tempest https://zuul.opendev.org/t/openstack/build/5ef01a80d0304249b4f06a9c0ab997f6 : SUCCESS in 29m 58s\n- keystone-tempest-federation-k2k https://zuul.opendev.org/t/openstack/build/cf697da480054fb3998d1c31cbc36c19 : SUCCESS in 34m 50s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/6cf11fd9715d4bd682b66bf588180ef2 : SUCCESS in 58m 45s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/161118edad0b47fe8cb5a3e7b148881d : SUCCESS in 42m 53s","accounts_in_message":[],"_revision_number":4},{"id":"442dfc5bc4753afed21154c430218baf41e0fecf","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-01 11:08:04.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":4},{"id":"c4342c5371cae85e904f545fbc230b76ef65609d","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-01 11:10:49.000000000","message":"Patch Set 4:\n\nBuild succeeded (promote pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/61d6166f06fc481eb44a824ccbdbbab3\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/75a859a75c5540628c6a4846dffaeac7 : SUCCESS in 1m 24s","accounts_in_message":[],"_revision_number":4}],"current_revision_number":4,"current_revision":"b4f1eb1f13a7559f771b0f4d46c4c59917e82f01","revisions":{"80a45d2251677540d582b6c9e52d82a347bce3b3":{"kind":"REWORK","_number":1,"created":"2026-05-28 15:05:16.000000000","uploader":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"ref":"refs/changes/86/990486/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/86/990486/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/86/990486/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/86/990486/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/86/990486/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/86/990486/1"}}},"commit":{"parents":[{"commit":"780b0a4742a90da8eff2d6c33ab7d8435109ffb9","subject":"Enforce delegation project boundary for delegated tokens","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/780b0a4742a90da8eff2d6c33ab7d8435109ffb9"}]}],"author":{"name":"Grzegorz Grasza","email":"xek@redhat.com","date":"2026-05-12 07:22:34.000000000","tz":120},"committer":{"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","date":"2026-05-22 08:08:11.000000000","tz":120},"subject":"Fix user impersonation through application credentials (CVE-2026-42998)","message":"Fix user impersonation through application credentials (CVE-2026-42998)\n\nWhen authenticating by application credential ID, the caller can supply a\n\u0027user\u0027 field in the payload. AppCredInfo conditionally set the user from\nthe credential owner only when no user field was present. If present,\nBaseUserInfo resolved the caller-supplied user and attributed the resulting\ntoken to that user instead of the credential owner.\n\nFix: always set auth_payload[\u0027user\u0027] from the credential\u0027s stored user_id,\nignoring any caller-supplied value.\n\nCloses-Bug: #2148477\nAssisted-by: Claude Sonnet 4.6 \u003cnoreply@anthropic.com\u003e\nCo-authored-by: Boris Bobrov \u003cb.bobrov@sap.com\u003e\nChange-Id: I2fe6089886eebf3775930451b87771e40b5e179e\nSigned-off-by: Grzegorz Grasza \u003cxek@redhat.com\u003e\nSigned-off-by: Artem Goncharov \u003cartem.goncharov@gmail.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/80a45d2251677540d582b6c9e52d82a347bce3b3"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/80a45d2251677540d582b6c9e52d82a347bce3b3"}]},"branch":"refs/heads/master"},"2930d92840b62f5a5953ba48df3fe14a4f950826":{"kind":"TRIVIAL_REBASE","_number":2,"created":"2026-05-28 16:02:40.000000000","uploader":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"ref":"refs/changes/86/990486/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/86/990486/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/86/990486/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/86/990486/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/86/990486/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/86/990486/2"}}},"commit":{"parents":[{"commit":"bd5082acf6a961774177d54ecb53c3868dc48f39","subject":"Enforce delegation project boundary for delegated tokens","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/bd5082acf6a961774177d54ecb53c3868dc48f39"}]}],"author":{"name":"Grzegorz Grasza","email":"xek@redhat.com","date":"2026-05-12 07:22:34.000000000","tz":120},"committer":{"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","date":"2026-05-28 16:02:09.000000000","tz":120},"subject":"Fix user impersonation through application credentials (CVE-2026-42998)","message":"Fix user impersonation through application credentials (CVE-2026-42998)\n\nWhen authenticating by application credential ID, the caller can supply a\n\u0027user\u0027 field in the payload. AppCredInfo conditionally set the user from\nthe credential owner only when no user field was present. If present,\nBaseUserInfo resolved the caller-supplied user and attributed the resulting\ntoken to that user instead of the credential owner.\n\nFix: always set auth_payload[\u0027user\u0027] from the credential\u0027s stored user_id,\nignoring any caller-supplied value.\n\nCloses-Bug: #2148477\nAssisted-by: Claude Sonnet 4.6 \u003cnoreply@anthropic.com\u003e\nCo-authored-by: Boris Bobrov \u003cb.bobrov@sap.com\u003e\nChange-Id: I2fe6089886eebf3775930451b87771e40b5e179e\nSigned-off-by: Grzegorz Grasza \u003cxek@redhat.com\u003e\nSigned-off-by: Artem Goncharov \u003cartem.goncharov@gmail.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/2930d92840b62f5a5953ba48df3fe14a4f950826"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/2930d92840b62f5a5953ba48df3fe14a4f950826"}]},"branch":"refs/heads/master"},"db9331272d0a93c632fa130991523bc4c3ea70b1":{"kind":"TRIVIAL_REBASE","_number":3,"created":"2026-05-28 19:41:49.000000000","uploader":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"ref":"refs/changes/86/990486/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/86/990486/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/86/990486/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/86/990486/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/86/990486/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/86/990486/3"}}},"commit":{"parents":[{"commit":"609fe2e3bc95dd2e43469f3a5f4cd9bf2b2da663","subject":"Enforce delegation project boundary for delegated tokens","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/609fe2e3bc95dd2e43469f3a5f4cd9bf2b2da663"}]}],"author":{"name":"Grzegorz Grasza","email":"xek@redhat.com","date":"2026-05-12 07:22:34.000000000","tz":120},"committer":{"name":"Grzegorz Grasza","email":"xek@redhat.com","date":"2026-05-28 19:40:18.000000000","tz":120},"subject":"Fix user impersonation through application credentials (CVE-2026-42998)","message":"Fix user impersonation through application credentials (CVE-2026-42998)\n\nWhen authenticating by application credential ID, the caller can supply a\n\u0027user\u0027 field in the payload. AppCredInfo conditionally set the user from\nthe credential owner only when no user field was present. If present,\nBaseUserInfo resolved the caller-supplied user and attributed the resulting\ntoken to that user instead of the credential owner.\n\nFix: always set auth_payload[\u0027user\u0027] from the credential\u0027s stored user_id,\nignoring any caller-supplied value.\n\nCloses-Bug: #2148477\nAssisted-by: Claude Sonnet 4.6 \u003cnoreply@anthropic.com\u003e\nCo-authored-by: Boris Bobrov \u003cb.bobrov@sap.com\u003e\nChange-Id: I2fe6089886eebf3775930451b87771e40b5e179e\nSigned-off-by: Grzegorz Grasza \u003cxek@redhat.com\u003e\nSigned-off-by: Artem Goncharov \u003cartem.goncharov@gmail.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/db9331272d0a93c632fa130991523bc4c3ea70b1"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/db9331272d0a93c632fa130991523bc4c3ea70b1"}]},"branch":"refs/heads/master"},"b4f1eb1f13a7559f771b0f4d46c4c59917e82f01":{"kind":"TRIVIAL_REBASE","_number":4,"created":"2026-05-28 21:33:17.000000000","uploader":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"ref":"refs/changes/86/990486/4","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/86/990486/4","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/86/990486/4 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/86/990486/4 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/86/990486/4 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/86/990486/4"}}},"commit":{"parents":[{"commit":"f82b093507495227c648df6a9b20cbc18f0cb474","subject":"Enforce delegation project boundary for delegated tokens","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/f82b093507495227c648df6a9b20cbc18f0cb474"}]}],"author":{"name":"Grzegorz Grasza","email":"xek@redhat.com","date":"2026-05-12 07:22:34.000000000","tz":120},"committer":{"name":"Grzegorz Grasza","email":"xek@redhat.com","date":"2026-05-28 21:32:50.000000000","tz":120},"subject":"Fix user impersonation through application credentials (CVE-2026-42998)","message":"Fix user impersonation through application credentials (CVE-2026-42998)\n\nWhen authenticating by application credential ID, the caller can supply a\n\u0027user\u0027 field in the payload. AppCredInfo conditionally set the user from\nthe credential owner only when no user field was present. If present,\nBaseUserInfo resolved the caller-supplied user and attributed the resulting\ntoken to that user instead of the credential owner.\n\nFix: always set auth_payload[\u0027user\u0027] from the credential\u0027s stored user_id,\nignoring any caller-supplied value.\n\nCloses-Bug: #2148477\nAssisted-by: Claude Sonnet 4.6 \u003cnoreply@anthropic.com\u003e\nCo-authored-by: Boris Bobrov \u003cb.bobrov@sap.com\u003e\nChange-Id: I2fe6089886eebf3775930451b87771e40b5e179e\nSigned-off-by: Grzegorz Grasza \u003cxek@redhat.com\u003e\nSigned-off-by: Artem Goncharov \u003cartem.goncharov@gmail.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/b4f1eb1f13a7559f771b0f4d46c4c59917e82f01"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/b4f1eb1f13a7559f771b0f4d46c4c59917e82f01"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"}},{"label":"Workflow","status":"MAY","applied_by":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"}}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dMAX"],"failing_atoms":["label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dMAX"],"failing_atoms":["label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dMAX"],"failing_atoms":["label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}