)]}'
{"id":"openstack%2Fswift~870827","triplet_id":"openstack%2Fswift~stable%2Fxena~I84494123cfc85e234098c554ecd3e77981f8a096","project":"openstack/swift","branch":"stable/xena","topic":"bug/1998625","attention_set":{},"removed_from_attention_set":{"5263":{"account":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"last_update":"2023-01-21 04:39:33.000000000","reason":"Change was submitted"},"15343":{"account":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"last_update":"2023-01-20 05:33:54.000000000","reason":"\u003cGERRIT_ACCOUNT_15343\u003e replied on the change","reason_account":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"}}},"hashtags":[],"change_id":"I84494123cfc85e234098c554ecd3e77981f8a096","subject":"s3api: Prevent XXE injections","status":"MERGED","created":"2023-01-17 15:06:58.000000000","updated":"2023-01-21 04:40:46.000000000","submitted":"2023-01-21 04:39:33.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":3,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"870827-bug/1998625","meta_rev_id":"25f3e27a59bdc1bbd0b54d66aa5ee6c076af2e38","_number":870827,"virtual_id_number":870827,"owner":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"tag":"autogenerated:zuul:gate","value":2,"date":"2023-01-21 04:39:33.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"all":[{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":2,"date":"2023-01-20 19:46:02.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"all":[{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":1,"date":"2023-01-21 03:22:45.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"CC":[{"_account_id":32333,"name":"Aymeric Ducroquetz","email":"aymeric.ducroquetz@gmail.com","username":"AymericDu"}],"REVIEWER":[{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2023-01-17 15:06:58.000000000","updated_by":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"reviewer":{"_account_id":32333,"name":"Aymeric Ducroquetz","email":"aymeric.ducroquetz@gmail.com","username":"AymericDu"},"state":"CC"},{"updated":"2023-01-17 16:44:59.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2023-01-18 16:37:35.000000000","updated_by":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"reviewer":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"state":"CC"},{"updated":"2023-01-20 19:46:02.000000000","updated_by":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"reviewer":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"state":"REVIEWER"}],"messages":[{"id":"58d917210efecccdc0bb67c26fa9f361ff8edc74","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"date":"2023-01-17 15:06:58.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"cb070653900a0fa01cbe7358a4cc9b7d73c4b4fe","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2023-01-17 16:44:59.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\nhttps://zuul.opendev.org/t/openstack/buildset/6a5e2fba34d4450aad1830c74f6ac090\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/a0c34fdaa3cf4bbc9baf3e2d22eadc16 : FAILURE in 5m 10s\n- grenade https://zuul.opendev.org/t/openstack/build/edc7392672914d2dafb2c517da5d8ce1 : SUCCESS in 1h 10m 33s\n- tempest-integrated-object-storage https://zuul.opendev.org/t/openstack/build/cdc525be4e96470b930dcf913f0d2723 : SUCCESS in 43m 40s\n- openstacksdk-functional-devstack https://zuul.opendev.org/t/openstack/build/152f8d9a1953489d9bbb6f16b6a0ea21 : SUCCESS in 52m 33s\n- swift-tox-func-py36-centos-8-stream-fips https://zuul.opendev.org/t/openstack/build/7262f73425904d219f834787a02184af : SUCCESS in 19m 24s (non-voting)\n- swift-tox-func-encryption-py36-centos-8-stream-fips https://zuul.opendev.org/t/openstack/build/539cce1308c348f7be5e60bc29da3ded : SUCCESS in 24m 44s (non-voting)\n- swift-tox-func-ec-py36-centos-8-stream-fips https://zuul.opendev.org/t/openstack/build/78d5b87cd5c04d1db362a0fdd357cc62 : SUCCESS in 20m 50s (non-voting)\n- swift-build-image https://zuul.opendev.org/t/openstack/build/b8a1f354788843c3890e9b7d7beff284 : FAILURE in 4m 26s (non-voting)\n- swift-build-image-py3 https://zuul.opendev.org/t/openstack/build/b65a2fe34f3a4ea0813695a0fe4e5462 : FAILURE in 3m 25s (non-voting)\n- swift-tox-py27 https://zuul.opendev.org/t/openstack/build/6d69b48b720440af9bd84e74ea03d16d : SUCCESS in 14m 24s\n- swift-tox-py36 https://zuul.opendev.org/t/openstack/build/6017042eb2d94586adfee92e61a05522 : SUCCESS in 18m 33s\n- swift-tox-py37 https://zuul.opendev.org/t/openstack/build/b0122195081d4eaa885771334c2ea8ce : SUCCESS in 15m 36s\n- swift-tox-py38 https://zuul.opendev.org/t/openstack/build/c7fdb260dc66457caaa1d978d9946023 : SUCCESS in 14m 55s\n- swift-tox-py39 https://zuul.opendev.org/t/openstack/build/e815630862f549af873f93829ddb7ebf : SUCCESS in 16m 11s\n- swift-tox-func-py27 https://zuul.opendev.org/t/openstack/build/ff4fdb34e40343a1b1315ebd87eefb28 : SUCCESS in 16m 38s\n- swift-tox-func-encryption-py27 https://zuul.opendev.org/t/openstack/build/b48718265231475a81268b7a2321384a : SUCCESS in 17m 50s\n- swift-tox-func-ec-py27 https://zuul.opendev.org/t/openstack/build/dac89a0c43c345a2ad3fcbf83b272580 : SUCCESS in 17m 08s\n- swift-tox-func-py38 https://zuul.opendev.org/t/openstack/build/f2eafb91d1cb4534a8836266e9a5248b : SUCCESS in 14m 45s\n- swift-tox-func-encryption-py38 https://zuul.opendev.org/t/openstack/build/12b4ccb54c894241b5a08f8140f47910 : SUCCESS in 15m 55s\n- swift-tox-func-ec-py38 https://zuul.opendev.org/t/openstack/build/7b8db3da4bd846358ad992ec33cbe452 : SUCCESS in 15m 06s\n- swift-func-cors https://zuul.opendev.org/t/openstack/build/4489ffcd401e470598b7ff7feabf27b9 : SUCCESS in 5m 21s\n- swift-tox-func-s3api-ceph-s3tests-tempauth https://zuul.opendev.org/t/openstack/build/13133a2968044c3791e1c943dc6cad83 : FAILURE in 9m 25s (non-voting)\n- swift-probetests-centos-7 https://zuul.opendev.org/t/openstack/build/737a6643caf44a988081d08c20fe37f2 : SUCCESS in 49m 33s\n- swift-probetests-centos-8-stream https://zuul.opendev.org/t/openstack/build/7ec728644c86477aa45f49d6ddc2165a : SUCCESS in 47m 39s\n- swift-dsvm-functional https://zuul.opendev.org/t/openstack/build/96668b54673840c2a7b954dad5775219 : SUCCESS in 44m 48s\n- swift-dsvm-functional-ipv6 https://zuul.opendev.org/t/openstack/build/77895796a31f49f0a1344a17d2ffa8cd : SUCCESS in 44m 15s\n- swift-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/c03ece5f94ec43e6be794e4c785a1bcc : SUCCESS in 15m 50s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/af28c7049a1641aaa16763d00196d7da : SUCCESS in 5m 30s\n- swift-multinode-rolling-upgrade https://zuul.opendev.org/t/openstack/build/f75048324acf4a94b4fd00eb6d02675e : FAILURE in 7m 43s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/2b2c18e79a69441bbb45612c4ba1b88b : SUCCESS in 57m 07s","accounts_in_message":[],"_revision_number":1},{"id":"3c74862ba5bbcffdc7a540de291655ba375f794c","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2023-01-17 19:52:21.000000000","message":"Patch Set 1:\n\nBuild failed (ARM64 pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/d12ce5da9b634c51b511d7bdb1b0d4bd\n\n- swift-tox-py38-arm64 https://zuul.opendev.org/t/openstack/build/1e9392d5f11547d08148f872aa34676f : SUCCESS in 1h 23m 13s\n- swift-tox-py39-arm64 https://zuul.opendev.org/t/openstack/build/7ec37ae1097b49f59bd7f0acf1311b69 : SUCCESS in 59m 53s\n- swift-probetests-centos-8-stream-arm64 https://zuul.opendev.org/t/openstack/build/7167aacfad634c5888560f0f0d39f588 : TIMED_OUT in 2h 01m 06s\n- swift-tox-func-encryption-py38-arm64 https://zuul.opendev.org/t/openstack/build/d40ebe9a21394d648a53d5bad4aecb9a : SUCCESS in 1h 18m 16s\n- swift-tox-func-py38-arm64 https://zuul.opendev.org/t/openstack/build/67eb9acb6f41453fab384932151947ee : SUCCESS in 1h 04m 12s","accounts_in_message":[],"_revision_number":1},{"id":"3bd1066927d356f6b552ad415f7cf8350e13f188","author":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"date":"2023-01-18 16:37:35.000000000","message":"Patch Set 1:\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"96c9a8f78cda517152543eee019c16e0c4a0c744","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2023-01-18 17:41:17.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/d166fd1c19594a889538666b85acbb94\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/757bfb32300b44db9180bccf5a9ca6e0 : SUCCESS in 8m 56s\n- grenade https://zuul.opendev.org/t/openstack/build/9e59daf1911940cca44cbe5e52ebe2b6 : SUCCESS in 57m 49s\n- tempest-integrated-object-storage https://zuul.opendev.org/t/openstack/build/baf4a32cd34649f09c63325b967d4021 : SUCCESS in 54m 20s\n- openstacksdk-functional-devstack https://zuul.opendev.org/t/openstack/build/86ecd784459f40ea85103ecc5fd8c9ac : SUCCESS in 56m 43s\n- swift-tox-func-py36-centos-8-stream-fips https://zuul.opendev.org/t/openstack/build/43ad0833d0484085a596de93013fad77 : SUCCESS in 20m 31s (non-voting)\n- swift-tox-func-encryption-py36-centos-8-stream-fips https://zuul.opendev.org/t/openstack/build/9225ae096fa84ecda84447f9dd7ae548 : SUCCESS in 21m 30s (non-voting)\n- swift-tox-func-ec-py36-centos-8-stream-fips https://zuul.opendev.org/t/openstack/build/3ede215f30a042a0b0495a91829b7846 : SUCCESS in 23m 15s (non-voting)\n- swift-build-image https://zuul.opendev.org/t/openstack/build/b74ee421a5dc46cea1b147c785170947 : FAILURE in 3m 13s (non-voting)\n- swift-build-image-py3 https://zuul.opendev.org/t/openstack/build/1e1b2fe7d4a34f9f8ed594c2553d5686 : FAILURE in 2m 59s (non-voting)\n- swift-tox-py27 https://zuul.opendev.org/t/openstack/build/cad9439c3f8341549dd19bba4ba6350e : SUCCESS in 14m 29s\n- swift-tox-py36 https://zuul.opendev.org/t/openstack/build/1872291fadd24028a3345c96a676c09f : SUCCESS in 16m 00s\n- swift-tox-py37 https://zuul.opendev.org/t/openstack/build/58c6a9242d114ab09e803d51512545de : SUCCESS in 18m 23s\n- swift-tox-py38 https://zuul.opendev.org/t/openstack/build/69168c347b1846519bd43aeb174b526b : SUCCESS in 14m 33s\n- swift-tox-py39 https://zuul.opendev.org/t/openstack/build/aa97a94ae8c7409a8e76f34ffed66939 : SUCCESS in 14m 37s\n- swift-tox-func-py27 https://zuul.opendev.org/t/openstack/build/fff54fe505ec448e9470ec2b44b5d1db : SUCCESS in 27m 59s\n- swift-tox-func-encryption-py27 https://zuul.opendev.org/t/openstack/build/7c85ff73858447d4ad8ace2e9753e985 : SUCCESS in 27m 49s\n- swift-tox-func-ec-py27 https://zuul.opendev.org/t/openstack/build/526c155472de4b79949e89e4e7a3102e : SUCCESS in 31m 14s\n- swift-tox-func-py38 https://zuul.opendev.org/t/openstack/build/cb5aa0818b0e45bfa44ca404838c0946 : SUCCESS in 14m 24s\n- swift-tox-func-encryption-py38 https://zuul.opendev.org/t/openstack/build/df93e27c453042bb8ebcec2f50cab92d : SUCCESS in 15m 08s\n- swift-tox-func-ec-py38 https://zuul.opendev.org/t/openstack/build/9106edac5af74a8499a88b08c272570d : SUCCESS in 16m 03s\n- swift-func-cors https://zuul.opendev.org/t/openstack/build/6b8c466c10c845dab55e93da3b48123b : SUCCESS in 5m 34s\n- swift-tox-func-s3api-ceph-s3tests-tempauth https://zuul.opendev.org/t/openstack/build/ebc6174cc114426e97f87d09fc0b59a7 : FAILURE in 6m 29s (non-voting)\n- swift-probetests-centos-7 https://zuul.opendev.org/t/openstack/build/f6cc1fa446574ab093563e1a1d6797e9 : SUCCESS in 49m 15s\n- swift-probetests-centos-8-stream https://zuul.opendev.org/t/openstack/build/48ac6e0bef674399a83026cd6a13f374 : SUCCESS in 54m 00s\n- swift-dsvm-functional https://zuul.opendev.org/t/openstack/build/f546259b03034fdca4b4d672a027668f : SUCCESS in 38m 38s\n- swift-dsvm-functional-ipv6 https://zuul.opendev.org/t/openstack/build/5257d14f98bd471cbe61c35800e615d2 : SUCCESS in 45m 51s\n- swift-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/e4442239b12e4a84b1ee40d4b1157ca5 : SUCCESS in 16m 08s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/a64734ba0f334429bc66e464220c41d7 : SUCCESS in 4m 49s\n- swift-multinode-rolling-upgrade https://zuul.opendev.org/t/openstack/build/447068e794d34a1fba5ebcc96e83057f : FAILURE in 7m 50s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/e4627996021148da819073da2c922e60 : SUCCESS in 49m 14s","accounts_in_message":[],"_revision_number":1},{"id":"40f067b415ff8fad45fe37a139419758f8b00cc0","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2023-01-18 22:54:17.000000000","message":"Patch Set 1:\n\nBuild failed (ARM64 pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/f6f6501324264930bf5073a03652702a\n\n- swift-tox-py38-arm64 https://zuul.opendev.org/t/openstack/build/3a9c93326a54421fbcf240c9393c5228 : TIMED_OUT in 1h 30m 56s\n- swift-tox-py39-arm64 https://zuul.opendev.org/t/openstack/build/0517edb1fbb6484aa1c98967e37d1632 : TIMED_OUT in 1h 31m 17s\n- swift-probetests-centos-8-stream-arm64 https://zuul.opendev.org/t/openstack/build/77249221c1744f4a9118c7fbbc118ea2 : TIMED_OUT in 2h 01m 11s\n- swift-tox-func-encryption-py38-arm64 https://zuul.opendev.org/t/openstack/build/039c3d52f57e4889becf3df93eedebc9 : FAILURE in 1h 15m 39s\n- swift-tox-func-py38-arm64 https://zuul.opendev.org/t/openstack/build/6881006f5fc3460f91f9fde702b25395 : TIMED_OUT in 1h 30m 54s","accounts_in_message":[],"_revision_number":1},{"id":"0bbaaf32510d49cf391a5f5249724b45ba3c7f2b","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"date":"2023-01-19 22:28:10.000000000","message":"Uploaded patch set 2.","accounts_in_message":[],"_revision_number":2},{"id":"5f3ebb706326acd3750fb9ea22e862bc35a34451","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"date":"2023-01-19 22:36:37.000000000","message":"Uploaded patch set 3.","accounts_in_message":[],"_revision_number":3},{"id":"831090691f87505e73101e2cbe14e40f6cc1bcf4","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2023-01-19 23:53:39.000000000","message":"Patch Set 3: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\nhttps://zuul.opendev.org/t/openstack/buildset/b37c752bde5947d5ab1473ecf6106e6e\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/6860823f4dc6410eb9d7cc2b94be71bc : SUCCESS in 6m 56s\n- grenade https://zuul.opendev.org/t/openstack/build/61d38b51bdb7421eb164e3ca34538c59 : FAILURE in 13m 46s\n- tempest-integrated-object-storage https://zuul.opendev.org/t/openstack/build/6980a6d062794db1bcb9c9babdfaf24e : FAILURE in 11m 12s\n- openstacksdk-functional-devstack https://zuul.opendev.org/t/openstack/build/892ae1c75394473aa2e9ab520680f2a4 : SUCCESS in 58m 33s\n- swift-tox-func-py36-centos-8-stream-fips https://zuul.opendev.org/t/openstack/build/08cf62fca5fb4254ad049233c0bafa71 : SUCCESS in 22m 01s (non-voting)\n- swift-tox-func-encryption-py36-centos-8-stream-fips https://zuul.opendev.org/t/openstack/build/ce751ebc212442659787d69bda487552 : SUCCESS in 15m 52s (non-voting)\n- swift-tox-func-ec-py36-centos-8-stream-fips https://zuul.opendev.org/t/openstack/build/4c2f84e6b6e74e0c800a4c6af37bd070 : SUCCESS in 23m 46s (non-voting)\n- swift-build-image https://zuul.opendev.org/t/openstack/build/a5c8f6bcf90544b1b2a84c3932dd647a : FAILURE in 4m 03s (non-voting)\n- swift-build-image-py3 https://zuul.opendev.org/t/openstack/build/ecbb006fb2a54113a93c202b889d06d0 : FAILURE in 4m 38s (non-voting)\n- swift-tox-py27 https://zuul.opendev.org/t/openstack/build/feac72ffe39a43f5ba216ad337e4d072 : SUCCESS in 14m 54s\n- swift-tox-py36 https://zuul.opendev.org/t/openstack/build/a1d22160424e4c4da2bca3e11104ad5e : SUCCESS in 16m 10s\n- swift-tox-py37 https://zuul.opendev.org/t/openstack/build/18cbc3efee4b4b668c5ff834e8c29cf8 : SUCCESS in 15m 59s\n- swift-tox-py38 https://zuul.opendev.org/t/openstack/build/d0329f999f504474b2fe57d037a94a77 : SUCCESS in 14m 04s\n- swift-tox-py39 https://zuul.opendev.org/t/openstack/build/e1281b90b42f4745a11b81106a084516 : SUCCESS in 17m 05s\n- swift-tox-func-py27 https://zuul.opendev.org/t/openstack/build/4e77d28e41e642389844537c66b4bad3 : SUCCESS in 16m 23s\n- swift-tox-func-encryption-py27 https://zuul.opendev.org/t/openstack/build/314766f9485440a18a73bba64a4dbf06 : SUCCESS in 16m 18s\n- swift-tox-func-ec-py27 https://zuul.opendev.org/t/openstack/build/48ea9cd8ef6e4f8dbe69ae1804961315 : SUCCESS in 14m 22s\n- swift-tox-func-py38 https://zuul.opendev.org/t/openstack/build/b41ecca1564f49cf8070007d18359d17 : FAILURE in 15m 20s\n- swift-tox-func-encryption-py38 https://zuul.opendev.org/t/openstack/build/a8562bed255e4272a88d30900268d9e8 : FAILURE in 17m 57s\n- swift-tox-func-ec-py38 https://zuul.opendev.org/t/openstack/build/e702fcb09cd0403282fde13a5c9c1036 : FAILURE in 18m 15s\n- swift-func-cors https://zuul.opendev.org/t/openstack/build/9d83efbae1604d45bd6e6f897d9e4227 : SUCCESS in 7m 06s\n- swift-tox-func-s3api-ceph-s3tests-tempauth https://zuul.opendev.org/t/openstack/build/1c1db12385a1465c9e4e63479cfad6dd : FAILURE in 6m 41s (non-voting)\n- swift-probetests-centos-7 https://zuul.opendev.org/t/openstack/build/645c9936a42f45dca83f3fce24334444 : SUCCESS in 53m 32s\n- swift-probetests-centos-8-stream https://zuul.opendev.org/t/openstack/build/6863f03df8e643219ffd8dba68495908 : SUCCESS in 57m 17s\n- swift-dsvm-functional https://zuul.opendev.org/t/openstack/build/5a8c45cfd5134468a690e3ea8f795fd5 : SUCCESS in 37m 57s\n- swift-dsvm-functional-ipv6 https://zuul.opendev.org/t/openstack/build/769cf38b457e4388a37fa3618a522561 : SUCCESS in 46m 56s\n- swift-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/c24e738a491c4d79a0e63406fe576fff : SUCCESS in 17m 01s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/cc7e6391d6354dd6a4f81d4b6f9a25e6 : SUCCESS in 5m 20s\n- swift-multinode-rolling-upgrade https://zuul.opendev.org/t/openstack/build/e433dae334f84f8fa72ece7de86971f5 : FAILURE in 7m 35s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/ac0becec9214437f98c66c7523bcd38a : SUCCESS in 51m 10s","accounts_in_message":[],"_revision_number":3},{"id":"a556369ba677392ae8f4b87c864916776c5c66c8","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2023-01-20 00:40:16.000000000","message":"Patch Set 3:\n\nBuild failed (ARM64 pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/d8ae5c8640b44cf09d08db01d9622888\n\n- swift-tox-py38-arm64 https://zuul.opendev.org/t/openstack/build/18f169eba3184227ac7538b5e65b152e : SUCCESS in 48m 39s\n- swift-tox-py39-arm64 https://zuul.opendev.org/t/openstack/build/e781c75223944f2aa4ac4269350953c9 : SUCCESS in 56m 38s\n- swift-probetests-centos-8-stream-arm64 https://zuul.opendev.org/t/openstack/build/c7bb2a70de094b24baded06dfa04762b : TIMED_OUT in 2h 01m 08s\n- swift-tox-func-encryption-py38-arm64 https://zuul.opendev.org/t/openstack/build/e604ca83f67d43139b176401e9a6b43e : FAILURE in 1h 27m 57s\n- swift-tox-func-py38-arm64 https://zuul.opendev.org/t/openstack/build/abccc8e7a6c747cd8f7257d465b8bb75 : FAILURE in 54m 38s","accounts_in_message":[],"_revision_number":3},{"id":"1d40695b7da4c56e1c3e1bd12118d547acb5a141","author":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"date":"2023-01-20 05:33:54.000000000","message":"Patch Set 3:\n\n(1 comment)","accounts_in_message":[],"_revision_number":3},{"id":"34e720f34b259d703aa64a59ed57a01be3f59431","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"date":"2023-01-20 18:07:33.000000000","message":"Uploaded patch set 4.","accounts_in_message":[],"_revision_number":4},{"id":"75b1348384220bed9062bb80a5af00e3742efa18","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2023-01-20 19:35:31.000000000","message":"Patch Set 4: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/15a0ab811a0d4e2b91308d9a5e989413\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/1dc1bb9a5e1849ada717acfe13deb9d1 : SUCCESS in 8m 34s\n- grenade https://zuul.opendev.org/t/openstack/build/3c6be7b1ba91473a9933d191f5282121 : SUCCESS in 1h 10m 06s\n- tempest-integrated-object-storage https://zuul.opendev.org/t/openstack/build/fdfd3e3189a446139703c9462870ffa9 : SUCCESS in 50m 20s\n- openstacksdk-functional-devstack https://zuul.opendev.org/t/openstack/build/99c219c5e04944248839025149d963bf : SUCCESS in 41m 44s\n- swift-tox-func-py36-centos-8-stream-fips https://zuul.opendev.org/t/openstack/build/43d77ccf2a53422fb929ab2f7a930bbe : SUCCESS in 19m 57s (non-voting)\n- swift-tox-func-encryption-py36-centos-8-stream-fips https://zuul.opendev.org/t/openstack/build/f9cffcdf97094fc6bd56bd80267dd423 : SUCCESS in 22m 17s (non-voting)\n- swift-tox-func-ec-py36-centos-8-stream-fips https://zuul.opendev.org/t/openstack/build/3d1489f1a1ad45cea8123dc058135cc7 : SUCCESS in 20m 33s (non-voting)\n- swift-build-image https://zuul.opendev.org/t/openstack/build/097c09b963b1414180a0de607deabac2 : FAILURE in 3m 08s (non-voting)\n- swift-build-image-py3 https://zuul.opendev.org/t/openstack/build/4d5abaffda424314bc7ae374dd573be7 : FAILURE in 3m 25s (non-voting)\n- swift-tox-py27 https://zuul.opendev.org/t/openstack/build/30947837f1cc472d858f55b59821452c : SUCCESS in 12m 14s\n- swift-tox-py36 https://zuul.opendev.org/t/openstack/build/b58c4333c217467c97c64d5eb48f5611 : SUCCESS in 18m 37s\n- swift-tox-py37 https://zuul.opendev.org/t/openstack/build/7115d7cd158e4c13b2d5d49c83d9cffa : SUCCESS in 17m 58s\n- swift-tox-py38 https://zuul.opendev.org/t/openstack/build/0df832493dee4d7b8c3caf5fef40e6e6 : SUCCESS in 16m 22s\n- swift-tox-py39 https://zuul.opendev.org/t/openstack/build/0a41b121313048dc83a780d640475f58 : SUCCESS in 14m 00s\n- swift-tox-func-py27 https://zuul.opendev.org/t/openstack/build/444b50979a724254974d75d1225d4670 : SUCCESS in 17m 48s\n- swift-tox-func-encryption-py27 https://zuul.opendev.org/t/openstack/build/56bc2ca7d0e048d2a6f63fa154cdc171 : SUCCESS in 16m 09s\n- swift-tox-func-ec-py27 https://zuul.opendev.org/t/openstack/build/385c75f6a99b4045b7f04c818aeac6a2 : SUCCESS in 17m 37s\n- swift-tox-func-py38 https://zuul.opendev.org/t/openstack/build/023eab50717a49c1be21216323b76ac5 : SUCCESS in 15m 54s\n- swift-tox-func-encryption-py38 https://zuul.opendev.org/t/openstack/build/a11833e74ed24c6faeed858862b01feb : SUCCESS in 16m 03s\n- swift-tox-func-ec-py38 https://zuul.opendev.org/t/openstack/build/dc399bad37aa4c9fa6227e3e6a2275c8 : SUCCESS in 17m 51s\n- swift-func-cors https://zuul.opendev.org/t/openstack/build/96c3a4bb1b984fb2bf706d93abae0abb : SUCCESS in 6m 05s\n- swift-tox-func-s3api-ceph-s3tests-tempauth https://zuul.opendev.org/t/openstack/build/b96370d4dc8649179f380946b04f6a8b : FAILURE in 7m 12s (non-voting)\n- swift-probetests-centos-7 https://zuul.opendev.org/t/openstack/build/b1a3045ba8b44409bb7a03d09651d482 : SUCCESS in 49m 33s\n- swift-probetests-centos-8-stream https://zuul.opendev.org/t/openstack/build/44480a3465e34175b5f9be2b30ff4867 : SUCCESS in 51m 05s\n- swift-dsvm-functional https://zuul.opendev.org/t/openstack/build/029eedc6c93347edbf5c8492e215ff70 : SUCCESS in 50m 29s\n- swift-dsvm-functional-ipv6 https://zuul.opendev.org/t/openstack/build/eb94d57883224542af812eb13a271ee8 : SUCCESS in 49m 44s\n- swift-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/031a7469372a41d298bfbde6f894fa64 : SUCCESS in 14m 05s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/461d6ec286194131841f44a8c2563c04 : SUCCESS in 4m 27s\n- swift-multinode-rolling-upgrade https://zuul.opendev.org/t/openstack/build/7050bb11a5204800a0b94aa7cfd25399 : FAILURE in 7m 18s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/6d16c6e0175149d0b35cbe83f01eef70 : SUCCESS in 49m 24s","accounts_in_message":[],"_revision_number":4},{"id":"63ada57fab4325df0f8e99b0be8ac73602dfabbe","author":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"date":"2023-01-20 19:46:02.000000000","message":"Patch Set 4: Code-Review+2\n\n(1 comment)","accounts_in_message":[],"_revision_number":4},{"id":"8bb818820d6119c341b1d081140d353bf9489504","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2023-01-20 21:21:28.000000000","message":"Patch Set 4:\n\nBuild failed (ARM64 pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/4bb3e22837884339beb230028c8e0955\n\n- swift-tox-py38-arm64 https://zuul.opendev.org/t/openstack/build/7bb076eb071e4265977416ba3f3d17e1 : SUCCESS in 1h 22m 45s\n- swift-tox-py39-arm64 https://zuul.opendev.org/t/openstack/build/7e53d4571bef4c2e9b2e9bf520f6700c : SUCCESS in 1h 06m 28s\n- swift-probetests-centos-8-stream-arm64 https://zuul.opendev.org/t/openstack/build/a869c95c3c9d47108fc8298f1cbff5ca : TIMED_OUT in 2h 01m 10s\n- swift-tox-func-encryption-py38-arm64 https://zuul.opendev.org/t/openstack/build/cfc1159073054c38b26b1d34d9ce4115 : TIMED_OUT in 1h 31m 02s\n- swift-tox-func-py38-arm64 https://zuul.opendev.org/t/openstack/build/b57e7a7a161e4b87886d6b598d95131f : SUCCESS in 1h 24m 24s","accounts_in_message":[],"_revision_number":4},{"id":"7affeb03cc86acf8c19d720553d7cf1f7fa436bf","author":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"date":"2023-01-21 03:22:45.000000000","message":"Patch Set 4: Workflow+1","accounts_in_message":[],"_revision_number":4},{"id":"f259734f953dd02e769f43822ae98785300729b6","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2023-01-21 03:23:20.000000000","message":"Patch Set 4: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":4},{"id":"1f768349777e556d7c5a6be410adcde4e164e950","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2023-01-21 04:39:33.000000000","message":"Patch Set 4: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/bf446feebaec4d71a2309b0cca7fa4a8\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/d5c7f241f35245d891ba6fab50e82ab4 : SUCCESS in 8m 05s\n- grenade https://zuul.opendev.org/t/openstack/build/7969d6f425514c7b86e6a1665cf22de5 : SUCCESS in 1h 09m 31s\n- tempest-integrated-object-storage https://zuul.opendev.org/t/openstack/build/01ea91d68296421ba83e75959dd7a361 : SUCCESS in 46m 15s\n- openstacksdk-functional-devstack https://zuul.opendev.org/t/openstack/build/7e53539e043b4643b3cd39856a0bb12d : SUCCESS in 39m 52s\n- swift-upload-image https://zuul.opendev.org/t/openstack/build/8bb55ae501214e9b82bc4404f662be5d : POST_FAILURE in 4m 52s (non-voting)\n- swift-upload-image-py3 https://zuul.opendev.org/t/openstack/build/66bb73e171c0490d8b8ebfbbcd119219 : POST_FAILURE in 6m 20s (non-voting)\n- swift-tox-py27 https://zuul.opendev.org/t/openstack/build/564e1a7a7b8748cdb8081933d7f718cd : SUCCESS in 15m 36s\n- swift-tox-py36 https://zuul.opendev.org/t/openstack/build/d60297c7b4004523ae87c4fe61a9f779 : SUCCESS in 17m 10s\n- swift-tox-py37 https://zuul.opendev.org/t/openstack/build/903653df0b304b1492b1cab0406e50fb : SUCCESS in 15m 36s\n- swift-tox-py38 https://zuul.opendev.org/t/openstack/build/fba994c06fed47609b8db686d3a6bfd1 : SUCCESS in 16m 22s\n- swift-tox-py39 https://zuul.opendev.org/t/openstack/build/17ceb742381047539a65a9604845e1a2 : SUCCESS in 14m 17s\n- swift-tox-func-py27 https://zuul.opendev.org/t/openstack/build/5deb18ca06934b0db3caccab8aa76734 : SUCCESS in 17m 26s\n- swift-tox-func-encryption-py27 https://zuul.opendev.org/t/openstack/build/39231999bc534166b84d3538cc74e89c : SUCCESS in 15m 32s\n- swift-tox-func-ec-py27 https://zuul.opendev.org/t/openstack/build/1b90d20f15ba42c3906f260453c0218f : SUCCESS in 16m 43s\n- swift-tox-func-py38 https://zuul.opendev.org/t/openstack/build/589b51a0ac1e4437a278eef4d7fae4f4 : SUCCESS in 15m 47s\n- swift-tox-func-encryption-py38 https://zuul.opendev.org/t/openstack/build/1b6c491fe91646c9931bd8d1d74bc312 : SUCCESS in 16m 36s\n- swift-tox-func-ec-py38 https://zuul.opendev.org/t/openstack/build/d1280d5ae61d4fc7bafa6fb2d8e42942 : SUCCESS in 14m 55s\n- swift-func-cors https://zuul.opendev.org/t/openstack/build/e0cfae87e7064b668f7a8044a54fcd0f : SUCCESS in 5m 38s\n- swift-probetests-centos-7 https://zuul.opendev.org/t/openstack/build/2b1c8e487890471cb7c91889303c8e3c : SUCCESS in 46m 53s\n- swift-probetests-centos-8-stream https://zuul.opendev.org/t/openstack/build/459ed2cd853b4526a60c516a10c78763 : SUCCESS in 56m 17s\n- swift-dsvm-functional https://zuul.opendev.org/t/openstack/build/17b2420d256e404fb4bdcc5310d659c5 : SUCCESS in 32m 04s\n- swift-dsvm-functional-ipv6 https://zuul.opendev.org/t/openstack/build/c2a1ed229dac4c84a6ebc9076aed8362 : SUCCESS in 44m 03s\n- swift-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/82392b6e7db1440e9db79e710414ceed : SUCCESS in 16m 50s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/f661607757fb4c9ba27bcf9c5fce0bb7 : SUCCESS in 4m 49s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/7935a495c0b74619824b94c68d841cbb : SUCCESS in 44m 09s","accounts_in_message":[],"_revision_number":4},{"id":"b0f2fc44deed79aca63c193b922ba003974d03b7","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2023-01-21 04:39:33.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":4},{"id":"25f3e27a59bdc1bbd0b54d66aa5ee6c076af2e38","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2023-01-21 04:40:46.000000000","message":"Patch Set 4:\n\nBuild succeeded (promote pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/feed438e7a0a493aaa70d865c631e3d7\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/9b6248b1fb384e79bcd8e1e72077f5c8 : SUCCESS in 54s\n- swift-promote-image https://zuul.opendev.org/t/openstack/build/d42555a06db14ec18f2a0fc3d316ac11 : FAILURE in 26s (non-voting)\n- swift-promote-image-py3 https://zuul.opendev.org/t/openstack/build/43de1456bb5046aaa3680a22c658dad9 : FAILURE in 32s (non-voting)","accounts_in_message":[],"_revision_number":4}],"current_revision_number":4,"current_revision":"7d13d1a82e1f5d01205a13184907501b4fcbe2b0","revisions":{"49362e0b054204075b5e9d10737a1bbb284fcf6d":{"kind":"REWORK","_number":1,"created":"2023-01-17 15:06:58.000000000","uploader":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"ref":"refs/changes/27/870827/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/swift","ref":"refs/changes/27/870827/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/swift refs/changes/27/870827/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/swift refs/changes/27/870827/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/swift refs/changes/27/870827/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/swift refs/changes/27/870827/1"}}},"commit":{"parents":[{"commit":"8dcb7d5c91db1e7df3fb1a37139088fcfd5b3f9c","subject":"Merge \"[stable-only] Pin tox\u003c4 for stable branches (\u003c\u003dstable/zed) testing\" into stable/xena","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/swift/commit/8dcb7d5c91db1e7df3fb1a37139088fcfd5b3f9c"}]}],"author":{"name":"Aymeric Ducroquetz","email":"aymeric.ducroquetz@ovhcloud.com","date":"2022-10-25 20:07:53.000000000","tz":120},"committer":{"name":"Jeremy Stanley","email":"fungi@yuggoth.org","date":"2023-01-17 15:06:47.000000000","tz":0},"subject":"s3api: Prevent XXE injections","message":"s3api: Prevent XXE injections\n\nPreviously, clients could use XML external entities (XXEs) to read\narbitrary files from proxy-servers and inject the content into the\nrequest. Since many S3 APIs reflect request content back to the user,\nthis could be used to extract any secrets that the swift user could\nread, such as tempauth credentials, keymaster secrets, etc.\n\nNow, disable entity resolution -- any unknown entities will be replaced\nwith an empty string. Without resolving the entities, the request is\nstill processed.\n\n[CVE-2022-47950]\n\nCloses-Bug: #1998625\nCo-Authored-By: Romain de Joux \u003cromain.de-joux@ovhcloud.com\u003e\nChange-Id: I84494123cfc85e234098c554ecd3e77981f8a096\n(cherry picked from commit b8467e190f6fc67fd8fb6a8c5e32b2aa6a10fd8e)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/swift/commit/49362e0b054204075b5e9d10737a1bbb284fcf6d"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/swift/commit/49362e0b054204075b5e9d10737a1bbb284fcf6d"}]},"branch":"refs/heads/stable/xena"},"dbedba601077cfeb0c9b271891b9af23fd6e6498":{"kind":"REWORK","_number":2,"created":"2023-01-19 22:28:10.000000000","uploader":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"ref":"refs/changes/27/870827/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/swift","ref":"refs/changes/27/870827/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/swift refs/changes/27/870827/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/swift refs/changes/27/870827/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/swift refs/changes/27/870827/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/swift refs/changes/27/870827/2"}}},"commit":{"parents":[{"commit":"29f10ecfff7b8bf2ad3900d774e3511eccd3286d","subject":"Fix docs build","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/swift/commit/29f10ecfff7b8bf2ad3900d774e3511eccd3286d"}]}],"author":{"name":"Aymeric Ducroquetz","email":"aymeric.ducroquetz@ovhcloud.com","date":"2022-10-25 20:07:53.000000000","tz":120},"committer":{"name":"Tim Burke","email":"tim.burke@gmail.com","date":"2023-01-19 22:28:02.000000000","tz":-480},"subject":"s3api: Prevent XXE injections","message":"s3api: Prevent XXE injections\n\nPreviously, clients could use XML external entities (XXEs) to read\narbitrary files from proxy-servers and inject the content into the\nrequest. Since many S3 APIs reflect request content back to the user,\nthis could be used to extract any secrets that the swift user could\nread, such as tempauth credentials, keymaster secrets, etc.\n\nNow, disable entity resolution -- any unknown entities will be replaced\nwith an empty string. Without resolving the entities, the request is\nstill processed.\n\n[CVE-2022-47950]\n\nCloses-Bug: #1998625\nCo-Authored-By: Romain de Joux \u003cromain.de-joux@ovhcloud.com\u003e\nChange-Id: I84494123cfc85e234098c554ecd3e77981f8a096\n(cherry picked from commit b8467e190f6fc67fd8fb6a8c5e32b2aa6a10fd8e)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/swift/commit/dbedba601077cfeb0c9b271891b9af23fd6e6498"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/swift/commit/dbedba601077cfeb0c9b271891b9af23fd6e6498"}]},"branch":"refs/heads/stable/xena"},"0a331c9e00241049e9e5c6f653ef87c45b002edf":{"kind":"REWORK","_number":3,"created":"2023-01-19 22:36:37.000000000","uploader":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"ref":"refs/changes/27/870827/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/swift","ref":"refs/changes/27/870827/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/swift refs/changes/27/870827/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/swift refs/changes/27/870827/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/swift refs/changes/27/870827/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/swift refs/changes/27/870827/3"}}},"commit":{"parents":[{"commit":"29f10ecfff7b8bf2ad3900d774e3511eccd3286d","subject":"Fix docs build","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/swift/commit/29f10ecfff7b8bf2ad3900d774e3511eccd3286d"}]}],"author":{"name":"Aymeric Ducroquetz","email":"aymeric.ducroquetz@ovhcloud.com","date":"2022-10-25 20:07:53.000000000","tz":120},"committer":{"name":"Tim Burke","email":"tim.burke@gmail.com","date":"2023-01-19 22:36:30.000000000","tz":-480},"subject":"s3api: Prevent XXE injections","message":"s3api: Prevent XXE injections\n\nPreviously, clients could use XML external entities (XXEs) to read\narbitrary files from proxy-servers and inject the content into the\nrequest. Since many S3 APIs reflect request content back to the user,\nthis could be used to extract any secrets that the swift user could\nread, such as tempauth credentials, keymaster secrets, etc.\n\nNow, disable entity resolution -- any unknown entities will be replaced\nwith an empty string. Without resolving the entities, the request is\nstill processed.\n\n[CVE-2022-47950]\n\nCloses-Bug: #1998625\nCo-Authored-By: Romain de Joux \u003cromain.de-joux@ovhcloud.com\u003e\nChange-Id: I84494123cfc85e234098c554ecd3e77981f8a096\n(cherry picked from commit b8467e190f6fc67fd8fb6a8c5e32b2aa6a10fd8e)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/swift/commit/0a331c9e00241049e9e5c6f653ef87c45b002edf"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/swift/commit/0a331c9e00241049e9e5c6f653ef87c45b002edf"}]},"branch":"refs/heads/stable/xena"},"7d13d1a82e1f5d01205a13184907501b4fcbe2b0":{"kind":"REWORK","_number":4,"created":"2023-01-20 18:07:33.000000000","uploader":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"ref":"refs/changes/27/870827/4","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/swift","ref":"refs/changes/27/870827/4","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/swift refs/changes/27/870827/4 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/swift refs/changes/27/870827/4 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/swift refs/changes/27/870827/4 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/swift refs/changes/27/870827/4"}}},"commit":{"parents":[{"commit":"29f10ecfff7b8bf2ad3900d774e3511eccd3286d","subject":"Fix docs build","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/swift/commit/29f10ecfff7b8bf2ad3900d774e3511eccd3286d"}]}],"author":{"name":"Aymeric Ducroquetz","email":"aymeric.ducroquetz@ovhcloud.com","date":"2022-10-25 20:07:53.000000000","tz":120},"committer":{"name":"Tim Burke","email":"tim.burke@gmail.com","date":"2023-01-20 18:07:03.000000000","tz":-480},"subject":"s3api: Prevent XXE injections","message":"s3api: Prevent XXE injections\n\nPreviously, clients could use XML external entities (XXEs) to read\narbitrary files from proxy-servers and inject the content into the\nrequest. Since many S3 APIs reflect request content back to the user,\nthis could be used to extract any secrets that the swift user could\nread, such as tempauth credentials, keymaster secrets, etc.\n\nNow, disable entity resolution -- any unknown entities will be replaced\nwith an empty string. Without resolving the entities, the request is\nstill processed.\n\n[CVE-2022-47950]\n\nCloses-Bug: #1998625\nCo-Authored-By: Romain de Joux \u003cromain.de-joux@ovhcloud.com\u003e\nChange-Id: I84494123cfc85e234098c554ecd3e77981f8a096\n(cherry picked from commit b8467e190f6fc67fd8fb6a8c5e32b2aa6a10fd8e)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/swift/commit/7d13d1a82e1f5d01205a13184907501b4fcbe2b0"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/swift/commit/7d13d1a82e1f5d01205a13184907501b4fcbe2b0"}]},"branch":"refs/heads/stable/xena"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"OK","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"OK","applied_by":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"}},{"label":"Workflow","status":"OK","applied_by":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"}}]}],"submit_requirements":[]}