)]}'
{"id":"openstack%2Fswift~994449","triplet_id":"openstack%2Fswift~master~I84b0b6878f0baef025000d047aa705ad241a3a13","project":"openstack/swift","branch":"master","attention_set":{},"removed_from_attention_set":{"6968":{"account":{"_account_id":6968,"name":"Christian Schwede","email":"cschwede@nvidia.com","username":"cschwede"},"last_update":"2026-06-23 19:33:58.000000000","reason":"Change was submitted"}},"hashtags":["CVE-2026-50221"],"change_id":"I84b0b6878f0baef025000d047aa705ad241a3a13","subject":"gatekeeper: Block X-Container-Host and other update headers from clients","status":"MERGED","created":"2026-06-23 15:00:15.000000000","updated":"2026-06-23 19:38:06.000000000","submitted":"2026-06-23 19:33:58.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":1,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"994449","meta_rev_id":"dab46928e3d96e684cd5819edc5182506a3d12cd","_number":994449,"virtual_id_number":994449,"owner":{"_account_id":6968,"name":"Christian Schwede","email":"cschwede@nvidia.com","username":"cschwede"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":6968,"name":"Christian Schwede","email":"cschwede@nvidia.com","username":"cschwede"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2026-06-23 19:33:58.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":6968,"name":"Christian Schwede","email":"cschwede@nvidia.com","username":"cschwede"},"all":[{"value":2,"date":"2026-06-23 15:01:59.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":6968,"name":"Christian Schwede","email":"cschwede@nvidia.com","username":"cschwede"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":2,"date":"2026-06-23 15:18:43.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":6968,"name":"Christian Schwede","email":"cschwede@nvidia.com","username":"cschwede"},"all":[{"value":1,"date":"2026-06-23 15:01:59.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":6968,"name":"Christian Schwede","email":"cschwede@nvidia.com","username":"cschwede"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":6968,"name":"Christian Schwede","email":"cschwede@nvidia.com","username":"cschwede"},{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-06-23 15:00:15.000000000","updated_by":{"_account_id":6968,"name":"Christian Schwede","email":"cschwede@nvidia.com","username":"cschwede"},"reviewer":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"state":"CC"},{"updated":"2026-06-23 15:18:43.000000000","updated_by":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"reviewer":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"state":"REVIEWER"},{"updated":"2026-06-23 15:34:38.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"CC"},{"updated":"2026-06-23 16:19:24.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"}],"messages":[{"id":"da52c317f3e66393cb90296e3d15b597f271a90d","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":6968,"name":"Christian Schwede","email":"cschwede@nvidia.com","username":"cschwede"},"date":"2026-06-23 15:00:15.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"55a2336036bc1e6d71c516bb7730eb4d00d512a8","author":{"_account_id":6968,"name":"Christian Schwede","email":"cschwede@nvidia.com","username":"cschwede"},"date":"2026-06-23 15:01:59.000000000","message":"Patch Set 1: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":1},{"id":"57b7b796f0f99334d3076dedb440c0d555d3360b","tag":"autogenerated:gerrit:setHashtag","author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"date":"2026-06-23 15:09:52.000000000","message":"Hashtag added: CVE-2026-50221","accounts_in_message":[],"_revision_number":1},{"id":"8aade650f9b0896c9ecbe6fa3e3f22c3e0179b8e","author":{"_account_id":15343,"name":"Tim Burke","email":"tburke@nvidia.com","username":"tburke"},"date":"2026-06-23 15:18:43.000000000","message":"Patch Set 1: Code-Review+2\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"752e93e3fd7386324eac4d81c8fcca1347f41fef","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-23 15:34:38.000000000","message":"Patch Set 1:\n\nBuild succeeded (ARM64 pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/ff53593c81d54ea4b00ae3537d62e51f\n\n- swift-tox-py312-arm64 https://zuul.opendev.org/t/openstack/build/90cef1edd225443cbdc2202c134e24cd : SUCCESS in 32m 07s","accounts_in_message":[],"_revision_number":1},{"id":"37caefac1c101f4ce5399ed16dc28627f22b4a58","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-23 16:19:24.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/f6074bbb9cd049a7ae882d11e6382196\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/86072544e885474fbe68a5dd8c0e64c3 : SUCCESS in 4m 57s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/a4ced2bbdb474dffa53f9577ed1add3e : SUCCESS in 3m 40s\n- grenade https://zuul.opendev.org/t/openstack/build/3ae9bc25544b48318d35fc1568285d80 : SUCCESS in 1h 13m 38s\n- grenade-skip-level-always https://zuul.opendev.org/t/openstack/build/53e63748b53f45f7a8aedc490b63eade : SUCCESS in 1h 04m 56s\n- tempest-integrated-object-storage https://zuul.opendev.org/t/openstack/build/4c34cf408c244148a93f2b1c3dd752c0 : SUCCESS in 33m 41s\n- openstacksdk-functional-devstack https://zuul.opendev.org/t/openstack/build/275cd55ce504412d817a8620bfc2ded3 : SUCCESS in 1h 03m 28s\n- swift-tox-func-py39-centos-9-stream-fips https://zuul.opendev.org/t/openstack/build/3b8c13c7d220473cba1022ceebf69a4b : SUCCESS in 21m 17s (non-voting)\n- swift-tox-func-encryption-py39-centos-9-stream-fips https://zuul.opendev.org/t/openstack/build/849e1b39f3bd4a27bb2f3c77a5a1a607 : SUCCESS in 10m 26s (non-voting)\n- swift-tox-func-ec-py39-centos-9-stream-fips https://zuul.opendev.org/t/openstack/build/60e87f6646cc4222b83b2a4d49950328 : SUCCESS in 22m 04s (non-voting)\n- swift-build-image https://zuul.opendev.org/t/openstack/build/de86fc12b2e046a7a3ab10903f70db52 : SUCCESS in 6m 58s (non-voting)\n- swift-tox-py37 https://zuul.opendev.org/t/openstack/build/ee7d45c9885f4991b19f0621f1824b7f : SUCCESS in 25m 54s\n- swift-tox-py310 https://zuul.opendev.org/t/openstack/build/916116890f6f4193b710137bff9c7eb9 : SUCCESS in 22m 37s\n- swift-tox-py313 https://zuul.opendev.org/t/openstack/build/c7913ce0293f4b04bcbef173db30f1ef : SUCCESS in 39m 09s\n- swift-tox-py314 https://zuul.opendev.org/t/openstack/build/774de9022ea74b348f33697206bf3c1d : SUCCESS in 24m 14s\n- swift-tox-func-py312 https://zuul.opendev.org/t/openstack/build/25a07c41425644919f8de9ccbaf56da8 : SUCCESS in 14m 56s\n- swift-tox-func-encryption-py312 https://zuul.opendev.org/t/openstack/build/a2edf2447e964152b2a5c4f94c0d1186 : SUCCESS in 14m 57s\n- swift-tox-func-ec-py312 https://zuul.opendev.org/t/openstack/build/93c455c899864981810c588c35d301ed : SUCCESS in 16m 16s\n- swift-func-cors https://zuul.opendev.org/t/openstack/build/1dae48d4969a43388cff06c1482446c9 : SUCCESS in 7m 46s\n- swift-tox-func-ceph-s3tests-tempauth https://zuul.opendev.org/t/openstack/build/5181119104b0444a856dfe8ac45c2b67 : SUCCESS in 19m 21s (non-voting)\n- swift-tox-func-s3api-compat-tests-tempauth https://zuul.opendev.org/t/openstack/build/bd53858072cc45a0844b1ce6ecfd44b5 : SUCCESS in 8m 48s\n- swift-probetests-centos-9-stream https://zuul.opendev.org/t/openstack/build/57cbf8bb4e6d40cc9913e4f61501cc18 : SUCCESS in 1h 04m 19s\n- swift-dsvm-functional https://zuul.opendev.org/t/openstack/build/71afe2c12b3242cd8c16f50e0a4703ef : SUCCESS in 56m 12s\n- swift-dsvm-functional-ipv6 https://zuul.opendev.org/t/openstack/build/fc46c262f43040f0af701f013c667a1f : SUCCESS in 36m 25s\n- swift-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/a1cd805b6be1452bbc2fc69558d6cb05 : SUCCESS in 23m 29s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/dabd47f6eed14eaf8cfdbd692e4616ae : SUCCESS in 3m 48s\n- swift-multinode-rolling-upgrade https://zuul.opendev.org/t/openstack/build/27a612cacc024932b8a69ae55672bfa1 : SUCCESS in 20m 03s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/aea762256a614c49b15b15c6be2908aa : SUCCESS in 31m 14s","accounts_in_message":[],"_revision_number":1},{"id":"ad4deb5e40d8d419cc36b153e60776135265ee0b","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-23 16:20:15.000000000","message":"Patch Set 1: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":1},{"id":"db44b41d2cc3ddf33dccc082a709d54093d772e1","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-23 19:33:58.000000000","message":"Patch Set 1: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/ed527a3c1b7c4c7ca55611eeb29731dc\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/58429b954bcc4177b098ad89cbd0b9ce : SUCCESS in 7m 43s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/c26a454a0be849cdae1c490b07c5ef77 : SUCCESS in 5m 44s\n- grenade https://zuul.opendev.org/t/openstack/build/05ddb168ae78467abc34d5e7e2dd7a05 : SUCCESS in 1h 02m 28s\n- grenade-skip-level-always https://zuul.opendev.org/t/openstack/build/8bbee3bcbdde4f50801094000292217f : SUCCESS in 1h 18m 56s\n- tempest-integrated-object-storage https://zuul.opendev.org/t/openstack/build/fa2a0f29e9eb420097b6bde454e3a98b : SUCCESS in 52m 24s\n- openstacksdk-functional-devstack https://zuul.opendev.org/t/openstack/build/f0a33ef67ce943c189381a799a32bf0e : SUCCESS in 37m 59s\n- swift-upload-image https://zuul.opendev.org/t/openstack/build/d2e4f4f5a43e4f0f888476903118c6e3 : SUCCESS in 7m 16s (non-voting)\n- swift-tox-py37 https://zuul.opendev.org/t/openstack/build/5b215205fa864838991e4d7db99b7463 : SUCCESS in 27m 04s\n- swift-tox-py310 https://zuul.opendev.org/t/openstack/build/323e2ac34d2245d6988f198c5a29f26e : SUCCESS in 11m 12s\n- swift-tox-py313 https://zuul.opendev.org/t/openstack/build/9850d54ea7364c2f9f0afc1421e611d5 : SUCCESS in 34m 07s\n- swift-tox-py314 https://zuul.opendev.org/t/openstack/build/7143fe229df944cca6f7971b50267db9 : SUCCESS in 20m 28s\n- swift-tox-func-py312 https://zuul.opendev.org/t/openstack/build/0f04fd696dc843eab50a318677fb0405 : SUCCESS in 14m 32s\n- swift-tox-func-encryption-py312 https://zuul.opendev.org/t/openstack/build/7cb405f4f0d44266aaa4ae10713aa97f : SUCCESS in 9m 27s\n- swift-tox-func-ec-py312 https://zuul.opendev.org/t/openstack/build/4be34c2822504db88aefc6f89d153014 : SUCCESS in 10m 32s\n- swift-func-cors https://zuul.opendev.org/t/openstack/build/bc82372ae0254367b27542f76ce733c1 : SUCCESS in 8m 07s\n- swift-tox-func-s3api-compat-tests-tempauth https://zuul.opendev.org/t/openstack/build/5e22996085b24617a3ae8e14703278cb : SUCCESS in 8m 38s\n- swift-probetests-centos-9-stream https://zuul.opendev.org/t/openstack/build/90b17e8bb3834315bdc8decb2a871da3 : SUCCESS in 59m 27s\n- swift-dsvm-functional https://zuul.opendev.org/t/openstack/build/bfb44bb422fe44f9aa00518348498089 : SUCCESS in 51m 11s\n- swift-dsvm-functional-ipv6 https://zuul.opendev.org/t/openstack/build/ee4e8347c2e94a5ebea66effee369e34 : SUCCESS in 24m 54s\n- swift-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/1087abb916f74e9981ae025ac8ed6e96 : SUCCESS in 13m 42s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/1b2140b053484f12834c358196dd1a6d : SUCCESS in 5m 43s\n- swift-multinode-rolling-upgrade https://zuul.opendev.org/t/openstack/build/0f37f561a82044688a77152fd0f686f7 : SUCCESS in 10m 10s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/3128741ab89a494499be2d612c13fc74 : SUCCESS in 1h 23m 10s","accounts_in_message":[],"_revision_number":1},{"id":"60d365287a2b499b7bffacf0d03b6f0bdfd48083","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-23 19:33:58.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":1},{"id":"dab46928e3d96e684cd5819edc5182506a3d12cd","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-23 19:38:06.000000000","message":"Patch Set 1:\n\nBuild succeeded (promote pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/cd17f5aff806496faf2ed8b2a923f56b\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/2f10ae3f043345158ef37c5f4de74c6b : SUCCESS in 52s\n- swift-promote-image https://zuul.opendev.org/t/openstack/build/6e8fd41036454a5bb77c06abb0e67547 : SUCCESS in 1m 41s (non-voting)","accounts_in_message":[],"_revision_number":1}],"current_revision_number":1,"current_revision":"75b050fdb1d1a6096f3765faa3b2059e28065d13","revisions":{"75b050fdb1d1a6096f3765faa3b2059e28065d13":{"kind":"REWORK","_number":1,"created":"2026-06-23 15:00:15.000000000","uploader":{"_account_id":6968,"name":"Christian Schwede","email":"cschwede@nvidia.com","username":"cschwede"},"ref":"refs/changes/49/994449/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/swift","ref":"refs/changes/49/994449/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/swift refs/changes/49/994449/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/swift refs/changes/49/994449/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/swift refs/changes/49/994449/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/swift refs/changes/49/994449/1"}}},"commit":{"parents":[{"commit":"486233a5a58c0294a2e6cee271cc48101ae8220b","subject":"Merge \"Add quoted includes to shard range show\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/swift/commit/486233a5a58c0294a2e6cee271cc48101ae8220b"}]}],"author":{"name":"Tim Burke","email":"tim.burke@gmail.com","date":"2026-05-12 21:57:34.000000000","tz":-420},"committer":{"name":"Christian Schwede","email":"cschwede@mailbox.org","date":"2026-06-23 14:53:17.000000000","tz":120},"subject":"gatekeeper: Block X-Container-Host and other update headers from clients","message":"gatekeeper: Block X-Container-Host and other update headers from clients\n\nThere are a variety of headers that get used by object-servers to\nupdate container-servers or by container-servers to update\naccount-servers. None of them start with X-Backend- (they predated that\nnamespace), and previously were not blocked by the gatekeeper. As a\nresult, a malicious client could direct the object-server to send\nupdates to unintended locations.\n\nNow, block all update-related X-Account-*, X-Container-*, and\nX-Delete-At-* headers at the gatekeeper.\n\nFixes: CVE-2026-50221\nCloses-Bug: #2150261\nChange-Id: I84b0b6878f0baef025000d047aa705ad241a3a13\nSigned-off-by: Tim Burke \u003ctim.burke@gmail.com\u003e\nSigned-off-by: Christian Schwede \u003ccschwede@mailbox.org\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/swift/commit/75b050fdb1d1a6096f3765faa3b2059e28065d13"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/swift/commit/75b050fdb1d1a6096f3765faa3b2059e28065d13"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":6968,"name":"Christian Schwede","email":"cschwede@nvidia.com","username":"cschwede"}},{"label":"Workflow","status":"MAY","applied_by":{"_account_id":6968,"name":"Christian Schwede","email":"cschwede@nvidia.com","username":"cschwede"}}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dMAX"],"failing_atoms":["label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dMAX"],"failing_atoms":["label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dMAX"],"failing_atoms":["label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}