)]}'
{"id":"openstack%2Fswift~870828","triplet_id":"openstack%2Fswift~stable%2Fwallaby~I84494123cfc85e234098c554ecd3e77981f8a096","project":"openstack/swift","branch":"stable/wallaby","topic":"bug/1998625","attention_set":{},"removed_from_attention_set":{"15343":{"account":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"last_update":"2023-01-21 11:25:40.000000000","reason":"Change was submitted"},"5263":{"account":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"last_update":"2023-01-21 11:25:40.000000000","reason":"Change was submitted"}},"hashtags":[],"change_id":"I84494123cfc85e234098c554ecd3e77981f8a096","subject":"s3api: Prevent XXE injections","status":"MERGED","created":"2023-01-17 15:13:57.000000000","updated":"2023-01-21 11:26:44.000000000","submitted":"2023-01-21 11:25:40.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":2,"unresolved_comment_count":1,"has_review_started":true,"submission_id":"870828-bug/1998625","meta_rev_id":"0a06c96a003a5bc3f5a02decf2c2237109eeaf86","_number":870828,"virtual_id_number":870828,"owner":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"tag":"autogenerated:zuul:gate","value":2,"date":"2023-01-21 11:25:40.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"all":[{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":2,"date":"2023-01-20 19:51:49.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"all":[{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":1,"date":"2023-01-21 04:53:11.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"CC":[{"_account_id":6968,"name":"Christian Schwede","email":"cschwede@nvidia.com","username":"cschwede"},{"_account_id":32333,"name":"Aymeric Ducroquetz","email":"aymeric.ducroquetz@gmail.com","username":"AymericDu"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2023-01-17 15:13:57.000000000","updated_by":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"reviewer":{"_account_id":32333,"name":"Aymeric Ducroquetz","email":"aymeric.ducroquetz@gmail.com","username":"AymericDu"},"state":"CC"},{"updated":"2023-01-17 17:05:43.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2023-01-20 19:51:49.000000000","updated_by":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"reviewer":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"state":"REVIEWER"},{"updated":"2023-01-21 09:15:43.000000000","updated_by":{"_account_id":6968,"name":"Christian Schwede","email":"cschwede@nvidia.com","username":"cschwede"},"reviewer":{"_account_id":6968,"name":"Christian Schwede","email":"cschwede@nvidia.com","username":"cschwede"},"state":"CC"}],"messages":[{"id":"d0f64e4fd5001deb59ae982eaef5129cec293b86","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"date":"2023-01-17 15:13:57.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"7323716380378aabedbf61f7cebb5870f50b4461","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2023-01-17 17:05:43.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\nhttps://zuul.opendev.org/t/openstack/buildset/e681e2df88a84efe8e8cc93bf7362ce4\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/c9911a29132c4a5eb2d434a90a213a42 : FAILURE in 5m 38s\n- grenade https://zuul.opendev.org/t/openstack/build/238a5d55f0f543dab8d707932eb2f771 : SUCCESS in 55m 22s\n- tempest-integrated-object-storage https://zuul.opendev.org/t/openstack/build/75ba99cb886e48b9bbf04768b9ba2230 : SUCCESS in 41m 06s\n- openstacksdk-functional-devstack https://zuul.opendev.org/t/openstack/build/095c016f23e94bbabb119bd255e9486f : SUCCESS in 1h 03m 10s\n- swift-tox-func-py36-centos-8-stream-fips https://zuul.opendev.org/t/openstack/build/dbb514a1c0624501a2130f4bf47d6188 : FAILURE in 19m 37s (non-voting)\n- swift-tox-func-encryption-py36-centos-8-stream-fips https://zuul.opendev.org/t/openstack/build/e69527f910804c55be6ba689b0b38603 : FAILURE in 19m 21s (non-voting)\n- swift-tox-func-ec-py36-centos-8-stream-fips https://zuul.opendev.org/t/openstack/build/ea9a9b6b2c944fb886e1fca4e86a11ad : FAILURE in 22m 00s (non-voting)\n- swift-build-image https://zuul.opendev.org/t/openstack/build/7f833149f31946f6864342d5cff058c1 : FAILURE in 3m 29s (non-voting)\n- swift-build-image-py3 https://zuul.opendev.org/t/openstack/build/28a06bccd74b405f9d7b37bbe41ec7b6 : FAILURE in 3m 37s (non-voting)\n- swift-tox-py27 https://zuul.opendev.org/t/openstack/build/940bce682eec4aa49c6c598d6a1519eb : SUCCESS in 14m 20s\n- swift-tox-py36 https://zuul.opendev.org/t/openstack/build/c3caf942dc92489088ecb20a407cc8e7 : SUCCESS in 15m 03s\n- swift-tox-py37 https://zuul.opendev.org/t/openstack/build/9bc1e418e7054e22a7e9eb38522b2e57 : SUCCESS in 15m 36s\n- swift-tox-py38 https://zuul.opendev.org/t/openstack/build/0d3b172e2edc42a780cca94cba9d46e9 : SUCCESS in 13m 32s\n- swift-tox-py39 https://zuul.opendev.org/t/openstack/build/3661e3ff17224196be6c357cf1a0f30a : SUCCESS in 14m 03s\n- swift-tox-func-py27 https://zuul.opendev.org/t/openstack/build/e63b815b1fd74ce3ab1136686c014cb9 : FAILURE in 15m 45s\n- swift-tox-func-encryption-py27 https://zuul.opendev.org/t/openstack/build/4ab4621b2c3a4ac5bba92b2cb1ff2f75 : FAILURE in 17m 16s\n- swift-tox-func-ec-py27 https://zuul.opendev.org/t/openstack/build/c139266aeec548fcb63234a831af8cda : FAILURE in 19m 03s\n- swift-tox-func-py37 https://zuul.opendev.org/t/openstack/build/2ca7ef45079947f594e26fa36cd63889 : FAILURE in 18m 09s\n- swift-tox-func-encryption-py37 https://zuul.opendev.org/t/openstack/build/b69046ed5bf54fda8e9d08ae62473335 : FAILURE in 15m 54s\n- swift-tox-func-ec-py37 https://zuul.opendev.org/t/openstack/build/eefb11d4688f458981ec5b6f60146dc9 : FAILURE in 18m 11s\n- swift-func-cors https://zuul.opendev.org/t/openstack/build/0a796aa34634497f8140cf2afad90f80 : SUCCESS in 6m 30s\n- swift-tox-func-s3api-ceph-s3tests-tempauth https://zuul.opendev.org/t/openstack/build/6ab137caac96481ab3e20c6fe1cc210d : FAILURE in 6m 33s (non-voting)\n- swift-probetests-centos-7 https://zuul.opendev.org/t/openstack/build/cbab54471048463e9bb1ca78083571e4 : SUCCESS in 45m 09s\n- swift-probetests-centos-8-stream https://zuul.opendev.org/t/openstack/build/a40f1c63e6d043fbae53d7ea9def7b49 : SUCCESS in 52m 30s\n- swift-dsvm-functional https://zuul.opendev.org/t/openstack/build/692556a9f22949a198ba5c12d494bd47 : SUCCESS in 46m 50s\n- swift-dsvm-functional-ipv6 https://zuul.opendev.org/t/openstack/build/e327bdc1c5c344dd9e1297288bdd2978 : SUCCESS in 45m 09s\n- swift-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/448d25fa75df4908ab46219848d75156 : SUCCESS in 14m 17s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/e666e3fce37940b99dca7c3ee63b6bf0 : SUCCESS in 5m 14s\n- swift-multinode-rolling-upgrade https://zuul.opendev.org/t/openstack/build/fd596764aef44785866b3ab1f6f116ff : RETRY_LIMIT in 6m 25s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/eac378b0724b47f58a921993c846b120 : SUCCESS in 1h 09m 26s","accounts_in_message":[],"_revision_number":1},{"id":"fba5b8b62236ca94e1c3934d33b37b9ada6e1c41","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"date":"2023-01-20 00:23:41.000000000","message":"Uploaded patch set 2.","accounts_in_message":[],"_revision_number":2},{"id":"49ff494b1d2538d87b6bf3bddfcccec3e55bd6a2","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2023-01-20 01:51:22.000000000","message":"Patch Set 2: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\nhttps://zuul.opendev.org/t/openstack/buildset/a6050e32e27a4205913606bb1f08efad\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/88938dbaf1d8443a8036b4f54982ec61 : SUCCESS in 7m 41s\n- grenade https://zuul.opendev.org/t/openstack/build/39e97680dab743cdb69ee9ce3d9c9843 : SUCCESS in 1h 04m 38s\n- tempest-integrated-object-storage https://zuul.opendev.org/t/openstack/build/2659f8b068a64e40a75eff7c5a1c34ca : SUCCESS in 47m 19s\n- openstacksdk-functional-devstack https://zuul.opendev.org/t/openstack/build/0ee01119e6994f9481ffedeb66583a00 : SUCCESS in 1h 05m 30s\n- swift-tox-func-py36-centos-8-stream-fips https://zuul.opendev.org/t/openstack/build/029057ada815480899dddeb47b361efe : SUCCESS in 15m 23s (non-voting)\n- swift-tox-func-encryption-py36-centos-8-stream-fips https://zuul.opendev.org/t/openstack/build/f232e39990cc45f8b799fbf292755a27 : SUCCESS in 15m 31s (non-voting)\n- swift-tox-func-ec-py36-centos-8-stream-fips https://zuul.opendev.org/t/openstack/build/cd8b8993969f43fca4468d5da8155799 : SUCCESS in 24m 06s (non-voting)\n- swift-build-image https://zuul.opendev.org/t/openstack/build/57c069afb47d46e481982b7311a52d66 : FAILURE in 6m 47s (non-voting)\n- swift-build-image-py3 https://zuul.opendev.org/t/openstack/build/6b8ed0ee341d491cb0be9914472558d0 : FAILURE in 4m 27s (non-voting)\n- swift-tox-py27 https://zuul.opendev.org/t/openstack/build/ca941bdfe12b4fdda52f537cc792a097 : SUCCESS in 12m 41s\n- swift-tox-py36 https://zuul.opendev.org/t/openstack/build/019e99fef53d4454b2a14d69122f2ad9 : SUCCESS in 12m 48s\n- swift-tox-py37 https://zuul.opendev.org/t/openstack/build/006bf8358d4841598b344c6a8a381f6b : SUCCESS in 12m 53s\n- swift-tox-py38 https://zuul.opendev.org/t/openstack/build/c893e2584c4843ab8d1710f25b9ddf70 : SUCCESS in 13m 01s\n- swift-tox-py39 https://zuul.opendev.org/t/openstack/build/7ef43c9555454b09b2c0b4b36284b0af : SUCCESS in 13m 51s\n- swift-tox-func-py27 https://zuul.opendev.org/t/openstack/build/2649155596a24196aa27176050882daa : SUCCESS in 16m 10s\n- swift-tox-func-encryption-py27 https://zuul.opendev.org/t/openstack/build/65ac4f0010374bcbb558cbf06b94402f : SUCCESS in 17m 49s\n- swift-tox-func-ec-py27 https://zuul.opendev.org/t/openstack/build/b74efe36f325466393ae5440e506f17b : SUCCESS in 17m 11s\n- swift-tox-func-py37 https://zuul.opendev.org/t/openstack/build/ce4d8552f43a45158658292d7bc6aa22 : FAILURE in 16m 47s\n- swift-tox-func-encryption-py37 https://zuul.opendev.org/t/openstack/build/09a45b45319a4fff8acf75c9d1bcc236 : FAILURE in 18m 07s\n- swift-tox-func-ec-py37 https://zuul.opendev.org/t/openstack/build/dcb0d9c40f1e4483b0471440baa7664c : FAILURE in 17m 12s\n- swift-func-cors https://zuul.opendev.org/t/openstack/build/88d44854f86b4fa78c8618ab09584e1e : SUCCESS in 5m 56s\n- swift-tox-func-s3api-ceph-s3tests-tempauth https://zuul.opendev.org/t/openstack/build/9e7018b65c624dd4a3cb12c519a8b75c : FAILURE in 7m 01s (non-voting)\n- swift-probetests-centos-7 https://zuul.opendev.org/t/openstack/build/5776c1a7bc30432aa9284c1de2e1f497 : SUCCESS in 47m 33s\n- swift-probetests-centos-8-stream https://zuul.opendev.org/t/openstack/build/f9f8940045f34492b8fb06788322de7e : SUCCESS in 43m 27s\n- swift-dsvm-functional https://zuul.opendev.org/t/openstack/build/5a12289e16c44fbd8eee1a00fc2cbc40 : SUCCESS in 42m 36s\n- swift-dsvm-functional-ipv6 https://zuul.opendev.org/t/openstack/build/fdc6660b32134d0f984cfb653cdbce35 : SUCCESS in 40m 19s\n- swift-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/adb7211db8024da7b1dee66268b58562 : SUCCESS in 13m 00s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/04f47aa3caa545769c576f4d97816331 : SUCCESS in 5m 37s\n- swift-multinode-rolling-upgrade https://zuul.opendev.org/t/openstack/build/37524a6dc0374640b1bede4c0cfbd8cf : RETRY_LIMIT in 5m 53s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/2d6ce087c46e49b88439ca80c9c744c3 : SUCCESS in 44m 02s","accounts_in_message":[],"_revision_number":2},{"id":"e93813ebdadae49fe3805458aa9fd095ecf1c906","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"date":"2023-01-20 18:09:31.000000000","message":"Uploaded patch set 3.","accounts_in_message":[],"_revision_number":3},{"id":"2d25ebb7e147d7d9d309262093eb6c7b4bdf5283","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2023-01-20 19:25:51.000000000","message":"Patch Set 3: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/1bc470cc88884af2999b373728fb40c1\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/f808fe9eac9447d8aaeb3c4ec4edd48f : SUCCESS in 9m 01s\n- grenade https://zuul.opendev.org/t/openstack/build/300d887c6cf644fe931e9f283558a157 : SUCCESS in 1h 10m 45s\n- tempest-integrated-object-storage https://zuul.opendev.org/t/openstack/build/bf71d3c881694a2899bbda8eee48eb10 : SUCCESS in 59m 37s\n- openstacksdk-functional-devstack https://zuul.opendev.org/t/openstack/build/f285a815a0c242e78371a9373e489d61 : SUCCESS in 54m 49s\n- swift-tox-func-py36-centos-8-stream-fips https://zuul.opendev.org/t/openstack/build/d7d2bf80b7b249909566fc150338446a : SUCCESS in 21m 48s (non-voting)\n- swift-tox-func-encryption-py36-centos-8-stream-fips https://zuul.opendev.org/t/openstack/build/ddf6e52fde4649289e9fe894c73b03de : SUCCESS in 20m 24s (non-voting)\n- swift-tox-func-ec-py36-centos-8-stream-fips https://zuul.opendev.org/t/openstack/build/fc283c4a0cd44d50a0e9a3958dad613b : SUCCESS in 18m 12s (non-voting)\n- swift-build-image https://zuul.opendev.org/t/openstack/build/fd9e3c914b7144e688e2cd3927ebf812 : FAILURE in 3m 25s (non-voting)\n- swift-build-image-py3 https://zuul.opendev.org/t/openstack/build/07ad0368593c442597452703f1f3e2f6 : FAILURE in 3m 02s (non-voting)\n- swift-tox-py27 https://zuul.opendev.org/t/openstack/build/8e891751a4ac447c9455b2736b2744aa : SUCCESS in 13m 56s\n- swift-tox-py36 https://zuul.opendev.org/t/openstack/build/daea8d86247f4ccfb3dd4564d4b2f537 : SUCCESS in 12m 08s\n- swift-tox-py37 https://zuul.opendev.org/t/openstack/build/4d354cf91cce4960ab91fe3b9e1b427e : SUCCESS in 28m 42s\n- swift-tox-py38 https://zuul.opendev.org/t/openstack/build/573123163f3c4a2ea04779897a9acc27 : SUCCESS in 11m 32s\n- swift-tox-py39 https://zuul.opendev.org/t/openstack/build/4039cb2f6c3e46d999338e2734d91b08 : SUCCESS in 10m 53s\n- swift-tox-func-py27 https://zuul.opendev.org/t/openstack/build/2df6bef1415048ffb86965a67c5e41f7 : SUCCESS in 16m 00s\n- swift-tox-func-encryption-py27 https://zuul.opendev.org/t/openstack/build/019146ad2fc44933a8b58e6667875e6b : SUCCESS in 16m 46s\n- swift-tox-func-ec-py27 https://zuul.opendev.org/t/openstack/build/a818103b2ba84fb38c8c7d7b676a8591 : SUCCESS in 16m 27s\n- swift-tox-func-py37 https://zuul.opendev.org/t/openstack/build/be55c7d9d5334f54bce80d1cff3d92b1 : SUCCESS in 18m 59s\n- swift-tox-func-encryption-py37 https://zuul.opendev.org/t/openstack/build/97e1e973816e4fd29c48e41078ab1d7b : SUCCESS in 18m 23s\n- swift-tox-func-ec-py37 https://zuul.opendev.org/t/openstack/build/229056f6ce13477a97cf521b8cf9c8c7 : SUCCESS in 17m 53s\n- swift-func-cors https://zuul.opendev.org/t/openstack/build/98d16765df124b2385875ceac06c353c : SUCCESS in 5m 37s\n- swift-tox-func-s3api-ceph-s3tests-tempauth https://zuul.opendev.org/t/openstack/build/4de574deb096403c96b22051e89a3964 : FAILURE in 7m 21s (non-voting)\n- swift-probetests-centos-7 https://zuul.opendev.org/t/openstack/build/73f62f0658be4927a705cb44e0514143 : SUCCESS in 52m 10s\n- swift-probetests-centos-8-stream https://zuul.opendev.org/t/openstack/build/1d609ac7820c4371b806f4e860972360 : SUCCESS in 55m 10s\n- swift-dsvm-functional https://zuul.opendev.org/t/openstack/build/dd0eca030fb74406966d6871cc2bddc1 : SUCCESS in 36m 43s\n- swift-dsvm-functional-ipv6 https://zuul.opendev.org/t/openstack/build/2ca6156d88c949a1ba0156404f530035 : SUCCESS in 49m 47s\n- swift-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/0146cbe5e20a460d9f29b67b04e5b8a8 : SUCCESS in 12m 21s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/e93d1ddc5b5f4a6483dca1bf4b2d603e : SUCCESS in 4m 50s\n- swift-multinode-rolling-upgrade https://zuul.opendev.org/t/openstack/build/6f8fee4d17a340faa977ec71c668b8eb : RETRY_LIMIT in 5m 46s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/3363e62f36404a6f966dd3df41bfe649 : SUCCESS in 1h 02m 33s","accounts_in_message":[],"_revision_number":3},{"id":"8f7793e6f5d70d18dcbd3608f6cb4e021d73e231","author":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"date":"2023-01-20 19:51:49.000000000","message":"Patch Set 3: Code-Review+2 Workflow+1\n\n(1 comment)","accounts_in_message":[],"_revision_number":3},{"id":"80069f0e39a6a664f17e9b0962d12ffdbd52baa1","author":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"date":"2023-01-20 19:51:56.000000000","message":"Patch Set 3: -Workflow","accounts_in_message":[],"_revision_number":3},{"id":"26a365a615f257c302cc05ff93c94de95a3d406c","author":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"date":"2023-01-21 04:53:11.000000000","message":"Patch Set 3: Workflow+1","accounts_in_message":[],"_revision_number":3},{"id":"c878222f38f3c36ed5e364f6ac3e987b57b5f2bb","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2023-01-21 04:53:49.000000000","message":"Patch Set 3: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":3},{"id":"45bfb792c32ddff1bc71e00ec60f17874afdba3e","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2023-01-21 06:10:38.000000000","message":"Patch Set 3: Verified-2\n\nBuild failed (gate pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\nhttps://zuul.opendev.org/t/openstack/buildset/f3d6a78d50f142aaacc54d8f43bc966d\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/522bc7da24ec4675a85f8530e95eecd6 : SUCCESS in 7m 56s\n- grenade https://zuul.opendev.org/t/openstack/build/2b2e1ae229644d3c9cfaded6136ef7f5 : SUCCESS in 1h 08m 50s\n- tempest-integrated-object-storage https://zuul.opendev.org/t/openstack/build/c99c0ea07f21489e8f36e7b923c24f03 : SUCCESS in 35m 22s\n- openstacksdk-functional-devstack https://zuul.opendev.org/t/openstack/build/9d753b5f06424d1380b369425679c390 : SUCCESS in 1h 06m 05s\n- swift-upload-image https://zuul.opendev.org/t/openstack/build/1ac47acd61b34d5aa137b7b18caf41aa : POST_FAILURE in 7m 04s (non-voting)\n- swift-upload-image-py3 https://zuul.opendev.org/t/openstack/build/02032a352675499da9ea90740849228b : POST_FAILURE in 5m 19s (non-voting)\n- swift-tox-py27 https://zuul.opendev.org/t/openstack/build/78e50b5d134c4bc1bfcdd8a6d4535854 : SUCCESS in 14m 22s\n- swift-tox-py36 https://zuul.opendev.org/t/openstack/build/5f46c9778849467da5e4ee5df514bc4a : SUCCESS in 16m 10s\n- swift-tox-py37 https://zuul.opendev.org/t/openstack/build/cf95be5fdddc4d8a8422e459a6e99705 : SUCCESS in 16m 45s\n- swift-tox-py38 https://zuul.opendev.org/t/openstack/build/4b32839defc041b6b2cb3acd152c5317 : SUCCESS in 13m 11s\n- swift-tox-py39 https://zuul.opendev.org/t/openstack/build/64d80270b0ee4f07a99f66d59bda1b06 : SUCCESS in 13m 27s\n- swift-tox-func-py27 https://zuul.opendev.org/t/openstack/build/9e9176f7cb104faeaaebe36346ae0da6 : FAILURE in 17m 10s\n- swift-tox-func-encryption-py27 https://zuul.opendev.org/t/openstack/build/2f386a6fe411415ea9824aab73da1b20 : SUCCESS in 18m 50s\n- swift-tox-func-ec-py27 https://zuul.opendev.org/t/openstack/build/69be80f289b14a368344ba9938f00586 : SUCCESS in 17m 24s\n- swift-tox-func-py37 https://zuul.opendev.org/t/openstack/build/535b37044278476fa9a92a9f9522c1a7 : SUCCESS in 17m 46s\n- swift-tox-func-encryption-py37 https://zuul.opendev.org/t/openstack/build/e840f4bcc72147e6bc59353bb5a4a2c5 : SUCCESS in 17m 54s\n- swift-tox-func-ec-py37 https://zuul.opendev.org/t/openstack/build/eef64c4a7a3f48ea8f408010d1ff3dcf : SUCCESS in 17m 56s\n- swift-func-cors https://zuul.opendev.org/t/openstack/build/c621dc69b4374fe0b4af148dd0698836 : SUCCESS in 5m 35s\n- swift-probetests-centos-7 https://zuul.opendev.org/t/openstack/build/91083110c2574394a72b5759ee557f50 : SUCCESS in 51m 17s\n- swift-probetests-centos-8-stream https://zuul.opendev.org/t/openstack/build/31ff6ef5a3f048bb826efe92fb040263 : SUCCESS in 44m 50s\n- swift-dsvm-functional https://zuul.opendev.org/t/openstack/build/69c29e09d55540c09881bd1339eaa370 : SUCCESS in 24m 08s\n- swift-dsvm-functional-ipv6 https://zuul.opendev.org/t/openstack/build/6214d1ec983b4f6ca2165c3ef6dbf52f : SUCCESS in 37m 27s\n- swift-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/df3b4e126b28430c89221e7302a93d41 : SUCCESS in 15m 06s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/372baab285d34042954d788b8eb4dc70 : SUCCESS in 5m 10s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/1bbea587b5834677952c523a992250e8 : SUCCESS in 44m 12s","accounts_in_message":[],"_revision_number":3},{"id":"dc43e93579cf9046c982db55dd1d122514d674c2","author":{"_account_id":6968,"name":"Christian Schwede","email":"cschwede@nvidia.com","username":"cschwede"},"date":"2023-01-21 09:15:43.000000000","message":"Patch Set 3:\n\n(1 comment)","accounts_in_message":[],"_revision_number":3},{"id":"63413c321b74004367267e7fe0bb5e3544fa6c8c","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2023-01-21 10:33:42.000000000","message":"Patch Set 3: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/e72dd20a676a49afa54d4c35ce9bac15\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/336e0af8d424437196f608222c090a82 : SUCCESS in 10m 28s\n- grenade https://zuul.opendev.org/t/openstack/build/e0dfbbf379a34708bc35b34561d59bfe : SUCCESS in 58m 08s\n- tempest-integrated-object-storage https://zuul.opendev.org/t/openstack/build/d942b4509bb94785af6536a92ce0df9d : SUCCESS in 44m 50s\n- openstacksdk-functional-devstack https://zuul.opendev.org/t/openstack/build/263003b9de524413979906d0d13a81e4 : SUCCESS in 1h 12m 27s\n- swift-tox-func-py36-centos-8-stream-fips https://zuul.opendev.org/t/openstack/build/ec98c00245904972a11ea8fc718ff23b : SUCCESS in 17m 36s (non-voting)\n- swift-tox-func-encryption-py36-centos-8-stream-fips https://zuul.opendev.org/t/openstack/build/2c6a2909bfa84015b3da07ecf1fb513c : SUCCESS in 22m 16s (non-voting)\n- swift-tox-func-ec-py36-centos-8-stream-fips https://zuul.opendev.org/t/openstack/build/13b033d560c34a19a4a1d021c9546295 : SUCCESS in 19m 48s (non-voting)\n- swift-build-image https://zuul.opendev.org/t/openstack/build/f93524d2356144d58e12ece345801491 : FAILURE in 3m 51s (non-voting)\n- swift-build-image-py3 https://zuul.opendev.org/t/openstack/build/cce59e9977ab43ae83715643ba41ae76 : FAILURE in 6m 34s (non-voting)\n- swift-tox-py27 https://zuul.opendev.org/t/openstack/build/f625443d332b4287a523c8569ae49abb : SUCCESS in 13m 10s\n- swift-tox-py36 https://zuul.opendev.org/t/openstack/build/8e3390aa4c8845a08a022be8373451b4 : SUCCESS in 12m 07s\n- swift-tox-py37 https://zuul.opendev.org/t/openstack/build/212500d9287243e998759dc2d0d8b2ff : SUCCESS in 13m 42s\n- swift-tox-py38 https://zuul.opendev.org/t/openstack/build/30f51329d7034f6e9ae7392b44d7bf77 : SUCCESS in 10m 57s\n- swift-tox-py39 https://zuul.opendev.org/t/openstack/build/f1bc35a7491240b5b39b324147616c52 : SUCCESS in 13m 02s\n- swift-tox-func-py27 https://zuul.opendev.org/t/openstack/build/f5f165312afe447791e1bf997ea5a430 : SUCCESS in 15m 50s\n- swift-tox-func-encryption-py27 https://zuul.opendev.org/t/openstack/build/888994ce30d140e38aed82cb4ec5ab35 : SUCCESS in 19m 44s\n- swift-tox-func-ec-py27 https://zuul.opendev.org/t/openstack/build/ec1eb06149e8489fb9448e509474189c : SUCCESS in 16m 47s\n- swift-tox-func-py37 https://zuul.opendev.org/t/openstack/build/dd0cb9b03f024c6c83864f4b90ff7eda : SUCCESS in 16m 04s\n- swift-tox-func-encryption-py37 https://zuul.opendev.org/t/openstack/build/14c7b51753cf4e648052b9432ff125a9 : SUCCESS in 20m 07s\n- swift-tox-func-ec-py37 https://zuul.opendev.org/t/openstack/build/3f1ec04559044f79999f10f5bfaa9c1c : SUCCESS in 16m 49s\n- swift-func-cors https://zuul.opendev.org/t/openstack/build/5a9a23365cb049a781d0a0a0f94dbe2e : SUCCESS in 6m 01s\n- swift-tox-func-s3api-ceph-s3tests-tempauth https://zuul.opendev.org/t/openstack/build/7f0184990dc54bac8c596d19920e118d : FAILURE in 6m 09s (non-voting)\n- swift-probetests-centos-7 https://zuul.opendev.org/t/openstack/build/81d2a051549846fd8b218c36f4d19d71 : SUCCESS in 39m 49s\n- swift-probetests-centos-8-stream https://zuul.opendev.org/t/openstack/build/01f2c5d8a26e441db5af3b2b847082d6 : SUCCESS in 54m 50s\n- swift-dsvm-functional https://zuul.opendev.org/t/openstack/build/14a94d4fa83849e4973c0addc1c366a4 : SUCCESS in 28m 13s\n- swift-dsvm-functional-ipv6 https://zuul.opendev.org/t/openstack/build/72d091edc2e54d09b059445a67ef10d8 : SUCCESS in 25m 31s\n- swift-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/ad4a2eb5bb244ccb9711253dea4a970e : SUCCESS in 15m 10s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/97e2536ca29a480fb326cce8fe994879 : SUCCESS in 4m 47s\n- swift-multinode-rolling-upgrade https://zuul.opendev.org/t/openstack/build/a87b1a3a86dc416298789a101200d86d : RETRY_LIMIT in 7m 52s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/890dd9f6b8a544b3b1d1291458b578d7 : SUCCESS in 1h 07m 44s","accounts_in_message":[],"_revision_number":3},{"id":"8fdd039274a157c86167278206422ce1a6dedba8","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2023-01-21 10:34:13.000000000","message":"Patch Set 3: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":3},{"id":"8634e6b495c95ab1fec437ef717809818635657a","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2023-01-21 11:25:40.000000000","message":"Patch Set 3: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/56b62487d9964fb5a73f34e59788e9a7\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/fc632d6a111642ab9d28e7e19b12ef7d : SUCCESS in 8m 07s\n- grenade https://zuul.opendev.org/t/openstack/build/d9004999c8c942c4b96ccc98a5450438 : SUCCESS in 46m 29s\n- tempest-integrated-object-storage https://zuul.opendev.org/t/openstack/build/fdf0b0ee1d3a4852989b19bb7d158da6 : SUCCESS in 39m 12s\n- openstacksdk-functional-devstack https://zuul.opendev.org/t/openstack/build/2623127bf43b4c2eb193ba74799f01a7 : SUCCESS in 46m 27s\n- swift-upload-image https://zuul.opendev.org/t/openstack/build/6759cc2b792d4f758410efa508e25c91 : POST_FAILURE in 5m 01s (non-voting)\n- swift-upload-image-py3 https://zuul.opendev.org/t/openstack/build/444e61c1751c45ba8fcd9b48ac2bb777 : POST_FAILURE in 4m 56s (non-voting)\n- swift-tox-py27 https://zuul.opendev.org/t/openstack/build/b558177c6ce647b48574b81389ae395d : SUCCESS in 16m 27s\n- swift-tox-py36 https://zuul.opendev.org/t/openstack/build/1c40715d27b74063a34ed30b6aaa1804 : SUCCESS in 15m 29s\n- swift-tox-py37 https://zuul.opendev.org/t/openstack/build/45b684afdc1e40fdb5f9f9ba420fabb5 : SUCCESS in 15m 52s\n- swift-tox-py38 https://zuul.opendev.org/t/openstack/build/43e55984a63941919682e24754f761cc : SUCCESS in 15m 25s\n- swift-tox-py39 https://zuul.opendev.org/t/openstack/build/c5617bd1b7ec4de9aa152f076816c59d : SUCCESS in 15m 25s\n- swift-tox-func-py27 https://zuul.opendev.org/t/openstack/build/e9c7d87687ae43b38eab19324c4e7c02 : SUCCESS in 17m 53s\n- swift-tox-func-encryption-py27 https://zuul.opendev.org/t/openstack/build/065607aea9274fceb1e8a54a90bc6007 : SUCCESS in 19m 10s\n- swift-tox-func-ec-py27 https://zuul.opendev.org/t/openstack/build/e16454f8a13d4f9da2fc256454b4ddd4 : SUCCESS in 18m 38s\n- swift-tox-func-py37 https://zuul.opendev.org/t/openstack/build/6150bb15c61c42a8acd118e1e2671497 : SUCCESS in 19m 25s\n- swift-tox-func-encryption-py37 https://zuul.opendev.org/t/openstack/build/b3667e98087a4fc7a9517cb2044b15aa : SUCCESS in 20m 08s\n- swift-tox-func-ec-py37 https://zuul.opendev.org/t/openstack/build/f98420043c054136b90f512f02a3207e : SUCCESS in 20m 39s\n- swift-func-cors https://zuul.opendev.org/t/openstack/build/ef442304414548dd86ba57a4bba2b63b : SUCCESS in 5m 38s\n- swift-probetests-centos-7 https://zuul.opendev.org/t/openstack/build/c7fbdcea9b5442b58b681ca29265ec9d : SUCCESS in 46m 55s\n- swift-probetests-centos-8-stream https://zuul.opendev.org/t/openstack/build/e902742a6839424dbd30f79f0947add9 : SUCCESS in 51m 00s\n- swift-dsvm-functional https://zuul.opendev.org/t/openstack/build/363495c6dbbb4056bc61930875877bf2 : SUCCESS in 34m 29s\n- swift-dsvm-functional-ipv6 https://zuul.opendev.org/t/openstack/build/3e27bfeb88534b01aceb5af2829f1a03 : SUCCESS in 34m 18s\n- swift-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/64e87885e4a747c397b82feda8d3a816 : SUCCESS in 16m 27s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/e97df4e33d3b414baf1f4cca8a53f24e : SUCCESS in 5m 28s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/64476feef3d9400a9af6f704d0d8df17 : SUCCESS in 49m 58s","accounts_in_message":[],"_revision_number":3},{"id":"407e0884a00336ec828c955519ceb215ca9ee1d4","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2023-01-21 11:25:40.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":3},{"id":"0a06c96a003a5bc3f5a02decf2c2237109eeaf86","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2023-01-21 11:26:44.000000000","message":"Patch Set 3:\n\nBuild succeeded (promote pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/96e0d3a7b6544f7ebf388d52521a7af5\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/00c24c9e18d94344ada3f76fb8ed2384 : SUCCESS in 45s\n- swift-promote-image https://zuul.opendev.org/t/openstack/build/362a5c396a4547e7962731622fd04380 : FAILURE in 24s (non-voting)\n- swift-promote-image-py3 https://zuul.opendev.org/t/openstack/build/f9265043d7704badbc285d0fba9bab0d : FAILURE in 31s (non-voting)","accounts_in_message":[],"_revision_number":3}],"current_revision_number":3,"current_revision":"ead53ba0c89ee9721981fcfc3784b335b4aef0ad","revisions":{"5c5cc46bbaf87f583a55e81dbdea736c6a2d829c":{"kind":"REWORK","_number":1,"created":"2023-01-17 15:13:57.000000000","uploader":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"ref":"refs/changes/28/870828/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/swift","ref":"refs/changes/28/870828/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/swift refs/changes/28/870828/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/swift refs/changes/28/870828/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/swift refs/changes/28/870828/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/swift refs/changes/28/870828/1"}}},"commit":{"parents":[{"commit":"65b1e09d8cba5cdf0293738ff92571cc553871c6","subject":"Merge \"[stable-only] Pin tox\u003c4 for stable branches (\u003c\u003dstable/zed) testing\" into stable/wallaby","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/swift/commit/65b1e09d8cba5cdf0293738ff92571cc553871c6"}]}],"author":{"name":"Aymeric Ducroquetz","email":"aymeric.ducroquetz@ovhcloud.com","date":"2022-10-25 20:07:53.000000000","tz":120},"committer":{"name":"Jeremy Stanley","email":"fungi@yuggoth.org","date":"2023-01-17 15:13:50.000000000","tz":0},"subject":"s3api: Prevent XXE injections","message":"s3api: Prevent XXE injections\n\nPreviously, clients could use XML external entities (XXEs) to read\narbitrary files from proxy-servers and inject the content into the\nrequest. Since many S3 APIs reflect request content back to the user,\nthis could be used to extract any secrets that the swift user could\nread, such as tempauth credentials, keymaster secrets, etc.\n\nNow, disable entity resolution -- any unknown entities will be replaced\nwith an empty string. Without resolving the entities, the request is\nstill processed.\n\n[CVE-2022-47950]\n\nCloses-Bug: #1998625\nCo-Authored-By: Romain de Joux \u003cromain.de-joux@ovhcloud.com\u003e\nChange-Id: I84494123cfc85e234098c554ecd3e77981f8a096\n(cherry picked from commit b8467e190f6fc67fd8fb6a8c5e32b2aa6a10fd8e)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/swift/commit/5c5cc46bbaf87f583a55e81dbdea736c6a2d829c"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/swift/commit/5c5cc46bbaf87f583a55e81dbdea736c6a2d829c"}]},"branch":"refs/heads/stable/wallaby"},"dcabbdc7bc64ec3078c8ac8645458ab40b0b8da8":{"kind":"REWORK","_number":2,"created":"2023-01-20 00:23:41.000000000","uploader":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"ref":"refs/changes/28/870828/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/swift","ref":"refs/changes/28/870828/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/swift refs/changes/28/870828/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/swift refs/changes/28/870828/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/swift refs/changes/28/870828/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/swift refs/changes/28/870828/2"}}},"commit":{"parents":[{"commit":"63131e21486ac94b9c589dede5412625eca0c13d","subject":"Fix docs build","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/swift/commit/63131e21486ac94b9c589dede5412625eca0c13d"}]}],"author":{"name":"Aymeric Ducroquetz","email":"aymeric.ducroquetz@ovhcloud.com","date":"2022-10-25 20:07:53.000000000","tz":120},"committer":{"name":"Tim Burke","email":"tim.burke@gmail.com","date":"2023-01-20 00:23:30.000000000","tz":-480},"subject":"s3api: Prevent XXE injections","message":"s3api: Prevent XXE injections\n\nPreviously, clients could use XML external entities (XXEs) to read\narbitrary files from proxy-servers and inject the content into the\nrequest. Since many S3 APIs reflect request content back to the user,\nthis could be used to extract any secrets that the swift user could\nread, such as tempauth credentials, keymaster secrets, etc.\n\nNow, disable entity resolution -- any unknown entities will be replaced\nwith an empty string. Without resolving the entities, the request is\nstill processed.\n\n[CVE-2022-47950]\n\nCloses-Bug: #1998625\nCo-Authored-By: Romain de Joux \u003cromain.de-joux@ovhcloud.com\u003e\nChange-Id: I84494123cfc85e234098c554ecd3e77981f8a096\n(cherry picked from commit b8467e190f6fc67fd8fb6a8c5e32b2aa6a10fd8e)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/swift/commit/dcabbdc7bc64ec3078c8ac8645458ab40b0b8da8"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/swift/commit/dcabbdc7bc64ec3078c8ac8645458ab40b0b8da8"}]},"branch":"refs/heads/stable/wallaby"},"ead53ba0c89ee9721981fcfc3784b335b4aef0ad":{"kind":"REWORK","_number":3,"created":"2023-01-20 18:09:31.000000000","uploader":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"ref":"refs/changes/28/870828/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/swift","ref":"refs/changes/28/870828/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/swift refs/changes/28/870828/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/swift refs/changes/28/870828/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/swift refs/changes/28/870828/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/swift refs/changes/28/870828/3"}}},"commit":{"parents":[{"commit":"63131e21486ac94b9c589dede5412625eca0c13d","subject":"Fix docs build","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/swift/commit/63131e21486ac94b9c589dede5412625eca0c13d"}]}],"author":{"name":"Aymeric Ducroquetz","email":"aymeric.ducroquetz@ovhcloud.com","date":"2022-10-25 20:07:53.000000000","tz":120},"committer":{"name":"Tim Burke","email":"tim.burke@gmail.com","date":"2023-01-20 18:08:40.000000000","tz":-480},"subject":"s3api: Prevent XXE injections","message":"s3api: Prevent XXE injections\n\nPreviously, clients could use XML external entities (XXEs) to read\narbitrary files from proxy-servers and inject the content into the\nrequest. Since many S3 APIs reflect request content back to the user,\nthis could be used to extract any secrets that the swift user could\nread, such as tempauth credentials, keymaster secrets, etc.\n\nNow, disable entity resolution -- any unknown entities will be replaced\nwith an empty string. Without resolving the entities, the request is\nstill processed.\n\n[CVE-2022-47950]\n\nCloses-Bug: #1998625\nCo-Authored-By: Romain de Joux \u003cromain.de-joux@ovhcloud.com\u003e\nChange-Id: I84494123cfc85e234098c554ecd3e77981f8a096\n(cherry picked from commit b8467e190f6fc67fd8fb6a8c5e32b2aa6a10fd8e)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/swift/commit/ead53ba0c89ee9721981fcfc3784b335b4aef0ad"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/swift/commit/ead53ba0c89ee9721981fcfc3784b335b4aef0ad"}]},"branch":"refs/heads/stable/wallaby"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"OK","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"OK","applied_by":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"}},{"label":"Workflow","status":"OK","applied_by":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"}}]}],"submit_requirements":[]}