)]}'
{"id":"openstack%2Fswift~990767","triplet_id":"openstack%2Fswift~stable%2F2026.1~I00e27a402466cb24c94b22e5bde6d707a05c3609","project":"openstack/swift","branch":"stable/2026.1","attention_set":{},"removed_from_attention_set":{"15343":{"account":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"last_update":"2026-06-01 16:37:27.000000000","reason":"\u003cGERRIT_ACCOUNT_15343\u003e replied on the change","reason_account":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"}}},"hashtags":[],"change_id":"I00e27a402466cb24c94b22e5bde6d707a05c3609","subject":"Harden pickle unmarshalling","status":"MERGED","created":"2026-05-29 23:16:27.000000000","updated":"2026-06-01 18:18:39.000000000","submitted":"2026-06-01 18:16:24.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":1,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"990767","meta_rev_id":"5e3a3856fbe96643bcbb93d3042a0c6cc65c7129","_number":990767,"virtual_id_number":990767,"owner":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"tag":"autogenerated:zuul:gate","value":2,"date":"2026-06-01 18:16:24.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"all":[{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":2,"date":"2026-06-01 16:37:27.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"all":[{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":1,"date":"2026-06-01 16:37:27.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-05-30 01:32:07.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"CC"},{"updated":"2026-05-30 01:53:59.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"}],"messages":[{"id":"ef94cba0f0efe5abf0a576c8c9b0cac00f2c0010","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"date":"2026-05-29 23:16:27.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"224ae0345ddd7d0e212e56abad33b43aed86877c","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"date":"2026-05-30 00:03:43.000000000","message":"Uploaded patch set 2: Patch Set 1 was rebased.","accounts_in_message":[],"_revision_number":2},{"id":"e14775704f3761599e42467d19751d211090b1e5","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"date":"2026-05-30 00:44:47.000000000","message":"Uploaded patch set 3: Patch Set 2 was rebased.","accounts_in_message":[],"_revision_number":3},{"id":"c19a882a67a777bb14c5bbd083e608f1269f4d1e","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-05-30 01:32:07.000000000","message":"Patch Set 3:\n\nBuild failed (ARM64 pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/3353f85f9ad740288799df9cff992aa5\n\n- swift-tox-py312-arm64 https://zuul.opendev.org/t/openstack/build/ab2dac810b9847f686ced79bbc765825 : FAILURE in 41m 31s","accounts_in_message":[],"_revision_number":3},{"id":"2defebfea2ea1beb6badaa68976239c84deea215","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-05-30 01:53:59.000000000","message":"Patch Set 3: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/bda096ad77b342be919d2f9a6596f436\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/7c7481b44cab425592017d7632a725f5 : SUCCESS in 9m 52s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/332b513debee44b2a32ba6ebf334d00e : SUCCESS in 6m 48s\n- grenade https://zuul.opendev.org/t/openstack/build/01a58ec870c04669b9fce7d7e70d5a53 : SUCCESS in 1h 02m 40s\n- grenade-skip-level-always https://zuul.opendev.org/t/openstack/build/025851fd3d9c44a68a12fe9cf47e7e0c : SUCCESS in 48m 47s\n- tempest-integrated-object-storage https://zuul.opendev.org/t/openstack/build/14dd4c7ce65d4b75b79d46806e59ece9 : SUCCESS in 32m 15s\n- openstacksdk-functional-devstack https://zuul.opendev.org/t/openstack/build/44c9dd3953204f4499de0cea17d56bc6 : SUCCESS in 47m 01s\n- swift-tox-func-py39-centos-9-stream-fips https://zuul.opendev.org/t/openstack/build/94ddab147bee400c8746b530601fb33e : SUCCESS in 10m 37s (non-voting)\n- swift-tox-func-encryption-py39-centos-9-stream-fips https://zuul.opendev.org/t/openstack/build/2f28c0ac0fc946c098253c18dab3f6d4 : SUCCESS in 19m 33s (non-voting)\n- swift-tox-func-ec-py39-centos-9-stream-fips https://zuul.opendev.org/t/openstack/build/6bbe3b0aebcf4c86bbc83684d499f6fb : SUCCESS in 19m 34s (non-voting)\n- swift-build-image https://zuul.opendev.org/t/openstack/build/a5a4863dd12e49c4ab75a4f68357cc53 : SUCCESS in 6m 01s (non-voting)\n- swift-tox-py37 https://zuul.opendev.org/t/openstack/build/4bfb9256f41845649bb15bc43b4937e6 : FAILURE in 24m 31s\n- swift-tox-py310 https://zuul.opendev.org/t/openstack/build/e280a716f6ed4898bf2cd61aa1701fc2 : FAILURE in 18m 09s\n- swift-tox-py313 https://zuul.opendev.org/t/openstack/build/066e656986eb4e72a5b443ad695cf576 : FAILURE in 14m 26s\n- swift-tox-py314 https://zuul.opendev.org/t/openstack/build/ce01d1fa2b274d0c805edcf3052b644c : FAILURE in 11m 44s\n- swift-tox-func-py312 https://zuul.opendev.org/t/openstack/build/9b35c8d2f7c3488d995c8b9b37626522 : SUCCESS in 9m 00s\n- swift-tox-func-encryption-py312 https://zuul.opendev.org/t/openstack/build/9f62a3c6d81e4c0287b369e10ba3d231 : SUCCESS in 9m 10s\n- swift-tox-func-ec-py312 https://zuul.opendev.org/t/openstack/build/12e106d26a464972be9ef0a81cd0299b : SUCCESS in 8m 11s\n- swift-func-cors https://zuul.opendev.org/t/openstack/build/47cc0e14f31d46e893e0e66621bcc2e3 : SUCCESS in 4m 34s\n- swift-tox-func-ceph-s3tests-tempauth https://zuul.opendev.org/t/openstack/build/7036e85c8bd8414d8d4758e0e4ff86b1 : SUCCESS in 8m 48s (non-voting)\n- swift-tox-func-s3api-compat-tests-tempauth https://zuul.opendev.org/t/openstack/build/ef43b200695e43c78d7452ac589a8a59 : SUCCESS in 4m 48s\n- swift-probetests-centos-9-stream https://zuul.opendev.org/t/openstack/build/0f50ec2a09034ae180701c3ba899beb5 : SUCCESS in 46m 59s\n- swift-dsvm-functional https://zuul.opendev.org/t/openstack/build/92b57e8c823243aa8fb862b8357099e4 : SUCCESS in 26m 09s\n- swift-dsvm-functional-ipv6 https://zuul.opendev.org/t/openstack/build/cc7a194ad91c4aebbbc7511c1573c697 : SUCCESS in 56m 55s\n- swift-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/d4f837e545994058bd848f82835331d5 : FAILURE in 26m 11s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/31114b598b3242bfae450dae6aa19479 : SUCCESS in 4m 37s\n- swift-multinode-rolling-upgrade https://zuul.opendev.org/t/openstack/build/92635bcfc1ad4354b08bbc6edbd77833 : SUCCESS in 10m 46s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/941ce4c20d2441ee9974294ff2cda6e7 : SUCCESS in 29m 50s","accounts_in_message":[],"_revision_number":3},{"id":"e2fdf592471a717fbff0b9203da322a3e9df9337","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"date":"2026-05-30 18:29:44.000000000","message":"Uploaded patch set 4: Patch Set 3 was rebased.\n\nOutdated Votes:\n* Verified-1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":4},{"id":"6638589dea1acad90737dfbf70eb12be719e0624","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"date":"2026-05-30 19:12:33.000000000","message":"Uploaded patch set 5: Patch Set 4 was rebased.","accounts_in_message":[],"_revision_number":5},{"id":"5442940867beb8d39ea8ea612812f29067f4a007","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-05-30 20:18:16.000000000","message":"Patch Set 5: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/0ff3e614b11147d0b09a86b7e4c0d4d6\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/59d926ff2e0b46068531c2979ecbc16d : SUCCESS in 9m 45s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/2e0f82a594704f82bef0be80eea9ae45 : SUCCESS in 8m 40s\n- grenade https://zuul.opendev.org/t/openstack/build/b1a39cb479ef4b809cc003cefd2df971 : SUCCESS in 1h 03m 15s\n- grenade-skip-level-always https://zuul.opendev.org/t/openstack/build/32b65b4e7a7744078e862801a3c60cd3 : SUCCESS in 31m 06s\n- tempest-integrated-object-storage https://zuul.opendev.org/t/openstack/build/788b1d65a6ad4bd2871b4a7386926515 : SUCCESS in 51m 31s\n- openstacksdk-functional-devstack https://zuul.opendev.org/t/openstack/build/1568c7ac69274f08b7ec12d9f660b682 : SUCCESS in 36m 29s\n- swift-tox-func-py39-centos-9-stream-fips https://zuul.opendev.org/t/openstack/build/46edab032e6441e89fdf06221681fc6d : SUCCESS in 19m 40s (non-voting)\n- swift-tox-func-encryption-py39-centos-9-stream-fips https://zuul.opendev.org/t/openstack/build/0d65d1a5b4b14e7baf2b52d8c1960fe0 : SUCCESS in 10m 15s (non-voting)\n- swift-tox-func-ec-py39-centos-9-stream-fips https://zuul.opendev.org/t/openstack/build/9a3409475c94498eba7e5008a46f2bc4 : SUCCESS in 15m 48s (non-voting)\n- swift-build-image https://zuul.opendev.org/t/openstack/build/bea0a93ffd7b4d409681f91f6dcf5d16 : SUCCESS in 6m 38s (non-voting)\n- swift-tox-py37 https://zuul.opendev.org/t/openstack/build/56160df680b240b2b22116469b9c9f1c : SUCCESS in 15m 55s\n- swift-tox-py310 https://zuul.opendev.org/t/openstack/build/f86b6cadea784455a838b5ab2b07801c : SUCCESS in 20m 03s\n- swift-tox-py313 https://zuul.opendev.org/t/openstack/build/353d5b26fedb4b769c3807e2e721076c : SUCCESS in 28m 05s\n- swift-tox-py314 https://zuul.opendev.org/t/openstack/build/b9259a46e6824f9391f20c8defe8a520 : SUCCESS in 10m 52s\n- swift-tox-func-py312 https://zuul.opendev.org/t/openstack/build/6b5613356c62488480e7aa86614f1eb1 : SUCCESS in 11m 53s\n- swift-tox-func-encryption-py312 https://zuul.opendev.org/t/openstack/build/52af00112c5e498f94c9155b1231da78 : SUCCESS in 14m 42s\n- swift-tox-func-ec-py312 https://zuul.opendev.org/t/openstack/build/60603c13765b4f11ac4032e01efadf24 : SUCCESS in 9m 11s\n- swift-func-cors https://zuul.opendev.org/t/openstack/build/a3e496e26a5a44a7bdf03420f30a455e : SUCCESS in 6m 35s\n- swift-tox-func-ceph-s3tests-tempauth https://zuul.opendev.org/t/openstack/build/34baab114e1c46c491a39087823c64fb : SUCCESS in 14m 03s (non-voting)\n- swift-tox-func-s3api-compat-tests-tempauth https://zuul.opendev.org/t/openstack/build/6f505d6d86d940358b8e11a443b9f53e : SUCCESS in 8m 11s\n- swift-probetests-centos-9-stream https://zuul.opendev.org/t/openstack/build/d578dd54a61f4d6aa08971635392342c : SUCCESS in 57m 36s\n- swift-dsvm-functional https://zuul.opendev.org/t/openstack/build/f4b7d7024dc542368379f2f4856d9aff : SUCCESS in 47m 16s\n- swift-dsvm-functional-ipv6 https://zuul.opendev.org/t/openstack/build/daf706dbe70e49f3a46526a947de7e51 : SUCCESS in 51m 08s\n- swift-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/e444651f8bb94a9c8d7cbcf1eebed4bb : SUCCESS in 27m 35s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/53f8216bcc4447e9ad4fe7f9cd55db5a : SUCCESS in 4m 02s\n- swift-multinode-rolling-upgrade https://zuul.opendev.org/t/openstack/build/969d9b147cc7418986495ce412ab3888 : SUCCESS in 18m 39s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/ec22ac7e44fb440895b0f1d4f571289c : SUCCESS in 59m 16s","accounts_in_message":[],"_revision_number":5},{"id":"cf74fd086ce86b98794027aa8ee3f744e1e2602a","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-05-30 20:38:12.000000000","message":"Patch Set 5:\n\nBuild succeeded (ARM64 pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/e276b089f45e4cc8aa5db18473a711ed\n\n- swift-tox-py312-arm64 https://zuul.opendev.org/t/openstack/build/9b5ae1ba741b4280b5ca32433679f7d0 : SUCCESS in 53m 25s","accounts_in_message":[],"_revision_number":5},{"id":"447f947a87432d6600df91b8470c42cf7fbf7315","author":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"date":"2026-06-01 16:37:27.000000000","message":"Patch Set 5: Code-Review+2 Workflow+1\n\n(1 comment)","accounts_in_message":[],"_revision_number":5},{"id":"79223782f42db28e5c3f22ef0a7010841f023388","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-01 16:38:14.000000000","message":"Patch Set 5: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":5},{"id":"ad5ae2cfb9b846885cd6506aff6788a349c9a6da","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-01 18:16:24.000000000","message":"Patch Set 5: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/07515f430549447ba59eee568efe23a4\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/1def65a8bd414c9d8b20b569b3273d2f : SUCCESS in 10m 09s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/6ccc0b05562249ad9dc0e65db640c094 : SUCCESS in 5m 43s\n- grenade https://zuul.opendev.org/t/openstack/build/e5dd6a650bb941d0aa4e0eb78c2dc594 : SUCCESS in 58m 13s\n- grenade-skip-level-always https://zuul.opendev.org/t/openstack/build/f1e63812f6fa4f399fb4edfdee101741 : SUCCESS in 43m 26s\n- tempest-integrated-object-storage https://zuul.opendev.org/t/openstack/build/a1700eb7da75402c80f6d6e259cdfc0c : SUCCESS in 38m 32s\n- openstacksdk-functional-devstack https://zuul.opendev.org/t/openstack/build/d623dcfeeb63432096162c1b08da9511 : SUCCESS in 34m 02s\n- swift-upload-image https://zuul.opendev.org/t/openstack/build/7c6161aeaff74eca9b861071ae050a05 : SUCCESS in 7m 24s (non-voting)\n- swift-tox-py37 https://zuul.opendev.org/t/openstack/build/40ff710e0b814f3cb3096fbd81249edc : SUCCESS in 25m 58s\n- swift-tox-py310 https://zuul.opendev.org/t/openstack/build/6ffed74005a242b38fd8f350313d1a95 : SUCCESS in 13m 52s\n- swift-tox-py313 https://zuul.opendev.org/t/openstack/build/94b81c814ab3416ea795744f7f165eaa : SUCCESS in 24m 14s\n- swift-tox-py314 https://zuul.opendev.org/t/openstack/build/35f8c4f6e3294ae7844cfad9f0bbb35a : SUCCESS in 11m 47s\n- swift-tox-func-py312 https://zuul.opendev.org/t/openstack/build/37a958dd6ece4a22acf5aa0ef6194dff : SUCCESS in 9m 44s\n- swift-tox-func-encryption-py312 https://zuul.opendev.org/t/openstack/build/74cb7f572dec4f7785e77d1b8d52197b : SUCCESS in 15m 29s\n- swift-tox-func-ec-py312 https://zuul.opendev.org/t/openstack/build/22cf3b5424eb445abec11b1339467554 : SUCCESS in 16m 26s\n- swift-func-cors https://zuul.opendev.org/t/openstack/build/ed7e1a74c8bd4ed8a206af3e037d7160 : SUCCESS in 6m 41s\n- swift-tox-func-s3api-compat-tests-tempauth https://zuul.opendev.org/t/openstack/build/39c42533ed2540d390510a305ceedc1a : SUCCESS in 8m 33s\n- swift-probetests-centos-9-stream https://zuul.opendev.org/t/openstack/build/af3daaccf5144dc597da695be9de5b28 : SUCCESS in 54m 43s\n- swift-dsvm-functional https://zuul.opendev.org/t/openstack/build/11828f7992ec4ea4b5968186487fe858 : SUCCESS in 57m 03s\n- swift-dsvm-functional-ipv6 https://zuul.opendev.org/t/openstack/build/ae7ded699ca14b069e93123a7a0563c9 : SUCCESS in 50m 24s\n- swift-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/cb25145df03746af9ec1fbdacea892df : SUCCESS in 11m 26s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/6b0b267c495044d4a19d720a02505a1d : SUCCESS in 5m 43s\n- swift-multinode-rolling-upgrade https://zuul.opendev.org/t/openstack/build/3f0c5593c57a465b86dc20bfefa75531 : SUCCESS in 18m 27s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/a862f726bd6944e1a6a38d11fe64fcca : SUCCESS in 32m 04s","accounts_in_message":[],"_revision_number":5},{"id":"e770474eee36ff664341d1152350534ae14fff96","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-01 18:16:24.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":5},{"id":"5e3a3856fbe96643bcbb93d3042a0c6cc65c7129","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-01 18:18:39.000000000","message":"Patch Set 5:\n\nBuild succeeded (promote pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/ccc63d22da5348f3a6c26eacbc5656cd\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/6fea6e5e065942e2a0eb8dc9972e6d26 : SUCCESS in 53s\n- swift-promote-image https://zuul.opendev.org/t/openstack/build/bbad4251dc0d47b2a80d4074bb0b7d64 : SUCCESS in 52s (non-voting)","accounts_in_message":[],"_revision_number":5}],"current_revision_number":5,"current_revision":"110eb050ad24730a1421258cc33279f337ef9343","revisions":{"9b009aa6d2b1005d697322a5b2c356a693693bdb":{"kind":"REWORK","_number":1,"created":"2026-05-29 23:16:27.000000000","uploader":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"ref":"refs/changes/67/990767/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/swift","ref":"refs/changes/67/990767/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/swift refs/changes/67/990767/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/swift refs/changes/67/990767/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/swift refs/changes/67/990767/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/swift refs/changes/67/990767/1"}}},"commit":{"parents":[{"commit":"7240fa04e3a7793270290cf6e1dfe6ff9cba1fdb","subject":"Merge \"s3api: Error on truncated aws-chunked input\" into stable/2026.1","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/swift/commit/7240fa04e3a7793270290cf6e1dfe6ff9cba1fdb"}]}],"author":{"name":"Tim Burke","email":"tim.burke@gmail.com","date":"2026-05-15 22:24:41.000000000","tz":-420},"committer":{"name":"Tim Burke","email":"tim.burke@gmail.com","date":"2026-05-29 23:15:57.000000000","tz":-420},"subject":"Harden pickle unmarshalling","message":"Harden pickle unmarshalling\n\nPreviously, if an attacker gained control of a node, there were many\nways that they could drop malicious pickles to gain further access.\nMost notably, the REPLICATE verb in the object server responds with\npickled hashes; an attacker could use that to make lateral movement\nwithin the object layer.\n\nNow, harden our pickle unmarshalling: only allow a subset of imports\nwhich should all be safe. Apply this to most places where we unpickle,\nnot just hashes. Ring builder files are the lone exception; both their\nsecurity boundaries and required-supported data types are radically\ndifferent from other pickle usage.\n\nPartial-Bug: #2152384\nCo-Authored-By: Christian Schwede \u003ccschwede@mailbox.org\u003e\nCo-Authored-By: Alistair Coles \u003calistairncoles@gmail.com\u003e\nCo-Authored-By: Matthew Oliver \u003cmatt@oliver.net.au\u003e\nAssisted-by: Claude:claude-4.7-opus\nChange-Id: I00e27a402466cb24c94b22e5bde6d707a05c3609\nSigned-off-by: Tim Burke \u003ctim.burke@gmail.com\u003e\n(cherry picked from commit b7fdd9743bf6697114526f972a3cd1618bb0f542)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/swift/commit/9b009aa6d2b1005d697322a5b2c356a693693bdb"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/swift/commit/9b009aa6d2b1005d697322a5b2c356a693693bdb"}]},"branch":"refs/heads/stable/2026.1"},"3db78d231b48f92c158bc30c73f706f6f04605a4":{"kind":"TRIVIAL_REBASE","_number":2,"created":"2026-05-30 00:03:43.000000000","uploader":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"ref":"refs/changes/67/990767/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/swift","ref":"refs/changes/67/990767/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/swift refs/changes/67/990767/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/swift refs/changes/67/990767/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/swift refs/changes/67/990767/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/swift refs/changes/67/990767/2"}}},"commit":{"parents":[{"commit":"aae52ca477b68309701768c7ae8765fac23c8d05","subject":"test_sharder.py: pass timestamp strings to put_object","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/swift/commit/aae52ca477b68309701768c7ae8765fac23c8d05"}]}],"author":{"name":"Tim Burke","email":"tim.burke@gmail.com","date":"2026-05-15 22:24:41.000000000","tz":-420},"committer":{"name":"Tim Burke","email":"tim.burke@gmail.com","date":"2026-05-30 00:03:32.000000000","tz":-420},"subject":"Harden pickle unmarshalling","message":"Harden pickle unmarshalling\n\nPreviously, if an attacker gained control of a node, there were many\nways that they could drop malicious pickles to gain further access.\nMost notably, the REPLICATE verb in the object server responds with\npickled hashes; an attacker could use that to make lateral movement\nwithin the object layer.\n\nNow, harden our pickle unmarshalling: only allow a subset of imports\nwhich should all be safe. Apply this to most places where we unpickle,\nnot just hashes. Ring builder files are the lone exception; both their\nsecurity boundaries and required-supported data types are radically\ndifferent from other pickle usage.\n\nPartial-Bug: #2152384\nCo-Authored-By: Christian Schwede \u003ccschwede@mailbox.org\u003e\nCo-Authored-By: Alistair Coles \u003calistairncoles@gmail.com\u003e\nCo-Authored-By: Matthew Oliver \u003cmatt@oliver.net.au\u003e\nAssisted-by: Claude:claude-4.7-opus\nChange-Id: I00e27a402466cb24c94b22e5bde6d707a05c3609\nSigned-off-by: Tim Burke \u003ctim.burke@gmail.com\u003e\n(cherry picked from commit b7fdd9743bf6697114526f972a3cd1618bb0f542)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/swift/commit/3db78d231b48f92c158bc30c73f706f6f04605a4"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/swift/commit/3db78d231b48f92c158bc30c73f706f6f04605a4"}]},"branch":"refs/heads/stable/2026.1"},"fefd09dd127e6cf4bbb7b3310f4dc0336b1b7377":{"kind":"TRIVIAL_REBASE","_number":3,"created":"2026-05-30 00:44:47.000000000","uploader":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"ref":"refs/changes/67/990767/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/swift","ref":"refs/changes/67/990767/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/swift refs/changes/67/990767/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/swift refs/changes/67/990767/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/swift refs/changes/67/990767/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/swift refs/changes/67/990767/3"}}},"commit":{"parents":[{"commit":"c20d70c38810a34da802baed9e328f34386d288a","subject":"test_sharder.py: pass timestamp strings to put_object","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/swift/commit/c20d70c38810a34da802baed9e328f34386d288a"}]}],"author":{"name":"Tim Burke","email":"tim.burke@gmail.com","date":"2026-05-15 22:24:41.000000000","tz":-420},"committer":{"name":"Tim Burke","email":"tim.burke@gmail.com","date":"2026-05-30 00:44:33.000000000","tz":-420},"subject":"Harden pickle unmarshalling","message":"Harden pickle unmarshalling\n\nPreviously, if an attacker gained control of a node, there were many\nways that they could drop malicious pickles to gain further access.\nMost notably, the REPLICATE verb in the object server responds with\npickled hashes; an attacker could use that to make lateral movement\nwithin the object layer.\n\nNow, harden our pickle unmarshalling: only allow a subset of imports\nwhich should all be safe. Apply this to most places where we unpickle,\nnot just hashes. Ring builder files are the lone exception; both their\nsecurity boundaries and required-supported data types are radically\ndifferent from other pickle usage.\n\nPartial-Bug: #2152384\nCo-Authored-By: Christian Schwede \u003ccschwede@mailbox.org\u003e\nCo-Authored-By: Alistair Coles \u003calistairncoles@gmail.com\u003e\nCo-Authored-By: Matthew Oliver \u003cmatt@oliver.net.au\u003e\nAssisted-by: Claude:claude-4.7-opus\nChange-Id: I00e27a402466cb24c94b22e5bde6d707a05c3609\nSigned-off-by: Tim Burke \u003ctim.burke@gmail.com\u003e\n(cherry picked from commit b7fdd9743bf6697114526f972a3cd1618bb0f542)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/swift/commit/fefd09dd127e6cf4bbb7b3310f4dc0336b1b7377"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/swift/commit/fefd09dd127e6cf4bbb7b3310f4dc0336b1b7377"}]},"branch":"refs/heads/stable/2026.1"},"c83bb6afb3ca7d19795bd8ae756ea3b3dab90527":{"kind":"TRIVIAL_REBASE","_number":4,"created":"2026-05-30 18:29:44.000000000","uploader":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"ref":"refs/changes/67/990767/4","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/swift","ref":"refs/changes/67/990767/4","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/swift refs/changes/67/990767/4 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/swift refs/changes/67/990767/4 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/swift refs/changes/67/990767/4 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/swift refs/changes/67/990767/4"}}},"commit":{"parents":[{"commit":"4083617997957e1c36e0a1221f478e59b20b8b4b","subject":"test_sharder.py: pass timestamp strings to put_object","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/swift/commit/4083617997957e1c36e0a1221f478e59b20b8b4b"}]}],"author":{"name":"Tim Burke","email":"tim.burke@gmail.com","date":"2026-05-15 22:24:41.000000000","tz":-420},"committer":{"name":"Tim Burke","email":"tim.burke@gmail.com","date":"2026-05-30 18:29:32.000000000","tz":-420},"subject":"Harden pickle unmarshalling","message":"Harden pickle unmarshalling\n\nPreviously, if an attacker gained control of a node, there were many\nways that they could drop malicious pickles to gain further access.\nMost notably, the REPLICATE verb in the object server responds with\npickled hashes; an attacker could use that to make lateral movement\nwithin the object layer.\n\nNow, harden our pickle unmarshalling: only allow a subset of imports\nwhich should all be safe. Apply this to most places where we unpickle,\nnot just hashes. Ring builder files are the lone exception; both their\nsecurity boundaries and required-supported data types are radically\ndifferent from other pickle usage.\n\nPartial-Bug: #2152384\nCo-Authored-By: Christian Schwede \u003ccschwede@mailbox.org\u003e\nCo-Authored-By: Alistair Coles \u003calistairncoles@gmail.com\u003e\nCo-Authored-By: Matthew Oliver \u003cmatt@oliver.net.au\u003e\nAssisted-by: Claude:claude-4.7-opus\nChange-Id: I00e27a402466cb24c94b22e5bde6d707a05c3609\nSigned-off-by: Tim Burke \u003ctim.burke@gmail.com\u003e\n(cherry picked from commit b7fdd9743bf6697114526f972a3cd1618bb0f542)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/swift/commit/c83bb6afb3ca7d19795bd8ae756ea3b3dab90527"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/swift/commit/c83bb6afb3ca7d19795bd8ae756ea3b3dab90527"}]},"branch":"refs/heads/stable/2026.1"},"110eb050ad24730a1421258cc33279f337ef9343":{"kind":"TRIVIAL_REBASE","_number":5,"created":"2026-05-30 19:12:33.000000000","uploader":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"ref":"refs/changes/67/990767/5","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/swift","ref":"refs/changes/67/990767/5","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/swift refs/changes/67/990767/5 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/swift refs/changes/67/990767/5 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/swift refs/changes/67/990767/5 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/swift refs/changes/67/990767/5"}}},"commit":{"parents":[{"commit":"b60ff0dc3d5180155b99703573b26deaca7036bf","subject":"test_sharder.py: pass timestamp strings to put_object","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/swift/commit/b60ff0dc3d5180155b99703573b26deaca7036bf"}]}],"author":{"name":"Tim Burke","email":"tim.burke@gmail.com","date":"2026-05-15 22:24:41.000000000","tz":-420},"committer":{"name":"Tim Burke","email":"tim.burke@gmail.com","date":"2026-05-30 19:12:22.000000000","tz":-420},"subject":"Harden pickle unmarshalling","message":"Harden pickle unmarshalling\n\nPreviously, if an attacker gained control of a node, there were many\nways that they could drop malicious pickles to gain further access.\nMost notably, the REPLICATE verb in the object server responds with\npickled hashes; an attacker could use that to make lateral movement\nwithin the object layer.\n\nNow, harden our pickle unmarshalling: only allow a subset of imports\nwhich should all be safe. Apply this to most places where we unpickle,\nnot just hashes. Ring builder files are the lone exception; both their\nsecurity boundaries and required-supported data types are radically\ndifferent from other pickle usage.\n\nPartial-Bug: #2152384\nCo-Authored-By: Christian Schwede \u003ccschwede@mailbox.org\u003e\nCo-Authored-By: Alistair Coles \u003calistairncoles@gmail.com\u003e\nCo-Authored-By: Matthew Oliver \u003cmatt@oliver.net.au\u003e\nAssisted-by: Claude:claude-4.7-opus\nChange-Id: I00e27a402466cb24c94b22e5bde6d707a05c3609\nSigned-off-by: Tim Burke \u003ctim.burke@gmail.com\u003e\n(cherry picked from commit b7fdd9743bf6697114526f972a3cd1618bb0f542)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/swift/commit/110eb050ad24730a1421258cc33279f337ef9343"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/swift/commit/110eb050ad24730a1421258cc33279f337ef9343"}]},"branch":"refs/heads/stable/2026.1"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"}},{"label":"Workflow","status":"MAY","applied_by":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"}}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dMAX"],"failing_atoms":["label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dMAX"],"failing_atoms":["label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dMAX"],"failing_atoms":["label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}