)]}'
{"id":"openstack%2Fossa~803640","triplet_id":"openstack%2Fossa~master~Ic9c5d7a45be8a083931b2600adbc76c9e292d0ab","project":"openstack/ossa","branch":"master","topic":"bug/1688137","hashtags":[],"change_id":"Ic9c5d7a45be8a083931b2600adbc76c9e292d0ab","subject":"Add OSSA-2021-003 (CVE-2021-38155)","status":"MERGED","created":"2021-08-05 18:28:21.000000000","updated":"2021-08-10 14:26:50.000000000","submitted":"2021-08-10 14:25:17.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":4,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"803640-bug/1688137","meta_rev_id":"953b4fe27eb27d9a96f9b0517e4649cd6ef05933","_number":803640,"virtual_id_number":803640,"owner":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"tag":"autogenerated:zuul:gate","value":2,"date":"2021-08-10 14:25:16.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},{"value":0,"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"all":[{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},{"value":2,"date":"2021-08-10 14:16:27.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"all":[{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},{"value":1,"date":"2021-08-10 14:16:27.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2021-08-05 18:33:59.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2021-08-05 21:21:24.000000000","updated_by":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"reviewer":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"state":"REVIEWER"}],"messages":[{"id":"dd1cbbbfb0f1cb5df93691356104de62b433ce93","tag":"autogenerated:gerrit:newWipPatchSet","author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"date":"2021-08-05 18:28:21.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"df98d00fc746219c9c9ecce3c8fa6d8fdcb454b1","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-08-05 18:33:59.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/26034d5ebd664254b289186a9bea511c : SUCCESS in 4m 07s","accounts_in_message":[],"_revision_number":1},{"id":"6e7c501cf3b2489c7d2305505e18289f7ef82e7e","author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"date":"2021-08-05 18:34:09.000000000","message":"Patch Set 1:\n\n(4 comments)\n\nThis is WIP, I\u0027ll refresh it once a CVE has been assigned. In the meantime, please review the rest of the content for accuracy. Thanks!","accounts_in_message":[],"_revision_number":1},{"id":"88e61b52b590c7ea422838683e48cc239d2ae0d2","tag":"autogenerated:gerrit:newWipPatchSet","author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"date":"2021-08-05 19:58:41.000000000","message":"Uploaded patch set 2.","accounts_in_message":[],"_revision_number":2},{"id":"4d26463952c90d4900d659e73bd5d107eb2cdc8d","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-08-05 20:04:36.000000000","message":"Patch Set 2: Verified+1\n\nBuild succeeded (check pipeline).\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/aca331b533524d0688a4f0cba86ef7cf : SUCCESS in 5m 04s","accounts_in_message":[],"_revision_number":2},{"id":"ee7497ea01cdfdf4e69dd2dfc5a852635e516dd9","author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"date":"2021-08-05 20:13:09.000000000","message":"Patch Set 2:\n\nRe-worded with revision #2 based on feedback from gagehugo in #openstack-security indicating the max tries setting needed to actually be in force for that state to be returned.","accounts_in_message":[],"_revision_number":2},{"id":"01f8ad9922a160b02608b68d9a9cd5e46b4b532d","author":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"date":"2021-08-05 21:21:24.000000000","message":"Patch Set 2: Code-Review+2\n\nLGTM","accounts_in_message":[],"_revision_number":2},{"id":"9ea6de797c5d18f5b89f2dfa6245058680076f9a","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"date":"2021-08-06 21:38:23.000000000","message":"Uploaded patch set 3.","accounts_in_message":[],"_revision_number":3},{"id":"7ff879c2f3989d8082f6dffde220b76e7c6a0fd9","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-08-06 21:43:10.000000000","message":"Patch Set 3: Verified+1\n\nBuild succeeded (check pipeline).\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/d7c8fd0429e84b8d947d6ab32e5ce3b6 : SUCCESS in 4m 24s","accounts_in_message":[],"_revision_number":3},{"id":"a6d29587247bac6d45352d24313cb12456a69a49","author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"date":"2021-08-10 14:16:27.000000000","message":"Patch Set 3: Code-Review+2 Workflow+1\n\nSelf-approving as I\u0027m getting ready to send this to mailing lists shortly. I\u0027m carrying over Gage\u0027s +2 from the previous patchset, since this revision merely added the CVE once I received the assignment for it.","accounts_in_message":[],"_revision_number":3},{"id":"0af9b841d33ddac950d2908fe4ce963dbce05ddc","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-08-10 14:16:47.000000000","message":"Patch Set 3: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":3},{"id":"5b4d0e8443a4a3e099af5ad49d9c2d74e6a7f903","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-08-10 14:25:16.000000000","message":"Patch Set 3: Verified+2\n\nBuild succeeded (gate pipeline).\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/2f98ef63bb2c49b5ae024d8dc3a77dcf : SUCCESS in 4m 33s","accounts_in_message":[],"_revision_number":3},{"id":"d89d044255e29442a6b2c8049766d1ccb15b0abf","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-08-10 14:25:17.000000000","message":"Change has been successfully merged by Zuul","accounts_in_message":[],"_revision_number":3},{"id":"953b4fe27eb27d9a96f9b0517e4649cd6ef05933","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-08-10 14:26:50.000000000","message":"Patch Set 3:\n\nBuild succeeded (promote pipeline).\n\n- promote-security https://zuul.opendev.org/t/openstack/build/428e92dac6a74a8abac78ea43d83ec24 : SUCCESS in 1m 13s","accounts_in_message":[],"_revision_number":3}],"current_revision_number":3,"current_revision":"cf49e91bb4a6a663b960d65f87841f9ba589a8e4","revisions":{"07d48cf32e8bc6754f13cc52b23eba4dde78803f":{"kind":"REWORK","_number":1,"created":"2021-08-05 18:28:21.000000000","uploader":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"ref":"refs/changes/40/803640/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/ossa","ref":"refs/changes/40/803640/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/ossa refs/changes/40/803640/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/ossa refs/changes/40/803640/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/ossa refs/changes/40/803640/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/ossa refs/changes/40/803640/1"}}},"commit":{"parents":[{"commit":"08f2c78ccf3688ad2ed44d0c2239742ea1693cdb","subject":"Add OSSA-2021-002 (CVE-2021-3654)","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/ossa/commit/08f2c78ccf3688ad2ed44d0c2239742ea1693cdb"}]}],"author":{"name":"Jeremy Stanley","email":"fungi@yuggoth.org","date":"2021-08-05 18:25:32.000000000","tz":0},"committer":{"name":"Jeremy Stanley","email":"fungi@yuggoth.org","date":"2021-08-05 18:26:44.000000000","tz":0},"subject":"Add OSSA-2021-002 (TBD)","message":"Add OSSA-2021-002 (TBD)\n\nChange-Id: Ic9c5d7a45be8a083931b2600adbc76c9e292d0ab\nCloses-Bug: #1688137\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/ossa/commit/07d48cf32e8bc6754f13cc52b23eba4dde78803f"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/ossa/commit/07d48cf32e8bc6754f13cc52b23eba4dde78803f"}]},"branch":"refs/heads/master"},"f12aaae8829abd3a0ae4c28ecf05849947a50631":{"kind":"REWORK","_number":2,"created":"2021-08-05 19:58:41.000000000","uploader":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"ref":"refs/changes/40/803640/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/ossa","ref":"refs/changes/40/803640/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/ossa refs/changes/40/803640/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/ossa refs/changes/40/803640/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/ossa refs/changes/40/803640/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/ossa refs/changes/40/803640/2"}}},"commit":{"parents":[{"commit":"08f2c78ccf3688ad2ed44d0c2239742ea1693cdb","subject":"Add OSSA-2021-002 (CVE-2021-3654)","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/ossa/commit/08f2c78ccf3688ad2ed44d0c2239742ea1693cdb"}]}],"author":{"name":"Jeremy Stanley","email":"fungi@yuggoth.org","date":"2021-08-05 18:25:32.000000000","tz":0},"committer":{"name":"Jeremy Stanley","email":"fungi@yuggoth.org","date":"2021-08-05 19:58:32.000000000","tz":0},"subject":"Add OSSA-2021-003 (TBD)","message":"Add OSSA-2021-003 (TBD)\n\nChange-Id: Ic9c5d7a45be8a083931b2600adbc76c9e292d0ab\nCloses-Bug: #1688137\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/ossa/commit/f12aaae8829abd3a0ae4c28ecf05849947a50631"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/ossa/commit/f12aaae8829abd3a0ae4c28ecf05849947a50631"}]},"branch":"refs/heads/master"},"cf49e91bb4a6a663b960d65f87841f9ba589a8e4":{"kind":"REWORK","_number":3,"created":"2021-08-06 21:38:23.000000000","uploader":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"ref":"refs/changes/40/803640/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/ossa","ref":"refs/changes/40/803640/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/ossa refs/changes/40/803640/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/ossa refs/changes/40/803640/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/ossa refs/changes/40/803640/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/ossa refs/changes/40/803640/3"}}},"commit":{"parents":[{"commit":"08f2c78ccf3688ad2ed44d0c2239742ea1693cdb","subject":"Add OSSA-2021-002 (CVE-2021-3654)","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/ossa/commit/08f2c78ccf3688ad2ed44d0c2239742ea1693cdb"}]}],"author":{"name":"Jeremy Stanley","email":"fungi@yuggoth.org","date":"2021-08-05 18:25:32.000000000","tz":0},"committer":{"name":"Jeremy Stanley","email":"fungi@yuggoth.org","date":"2021-08-06 21:38:08.000000000","tz":0},"subject":"Add OSSA-2021-003 (CVE-2021-38155)","message":"Add OSSA-2021-003 (CVE-2021-38155)\n\nChange-Id: Ic9c5d7a45be8a083931b2600adbc76c9e292d0ab\nCloses-Bug: #1688137\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/ossa/commit/cf49e91bb4a6a663b960d65f87841f9ba589a8e4"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/ossa/commit/cf49e91bb4a6a663b960d65f87841f9ba589a8e4"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[{"status":"CLOSED","labels":[{"label":"Verified","status":"OK","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"OK","applied_by":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"}},{"label":"Workflow","status":"OK","applied_by":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"}}]}],"submit_requirements":[{"name":"Verified","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Verified\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}},{"name":"Workflow","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Workflow\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}},{"name":"Code-Review","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Code-Review\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}}]}