)]}'
{
  "commit": "0471e7969e6740594dfe354646bf03e5e89de52d",
  "tree": "512c889fed163313aabd039c3f5fa1c60b2f0664",
  "parents": [
    "6435c37ab681759aff37ba751d0f2238b3043767"
  ],
  "author": {
    "name": "Nicola Murino",
    "email": "nicola.murino@gmail.com",
    "time": "Mon Jun 29 19:45:55 2026 +0200"
  },
  "committer": {
    "name": "Nicola Murino",
    "email": "nicola.murino@gmail.com",
    "time": "Tue Jun 30 10:06:28 2026 -0700"
  },
  "message": "ssh/agent: enforce strict limits on DSA key parameters\n\nThe parseDSAKey function constructed a *dsa.PrivateKey directly from the\nadd-identity request without validating the key parameters. Unlike DSA\ncertificates, whose parameters are checked by the ssh package when the\ncertificate\u0027s public key is parsed, raw DSA keys added to the agent were\nnot validated at all.\n\nAlign the raw DSA key parsing with the validation already performed by\nthe main ssh package.\n\nFixes golang/go#79725\n\nChange-Id: I537cc2175d35c19848c90c68739cf94ba7b50e10\nReviewed-on: https://go-review.googlesource.com/c/crypto/+/795422\nReviewed-by: Roland Shoemaker \u003croland@golang.org\u003e\nReviewed-by: Junyang Shao \u003cshaojunyang@google.com\u003e\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "f05d22fb3d4a45fe7940f9a1592efadd96da9f6a",
      "old_mode": 33188,
      "old_path": "ssh/agent/server.go",
      "new_id": "782c54eb7c94b80c16b49a30aca880ba773616e1",
      "new_mode": 33188,
      "new_path": "ssh/agent/server.go"
    },
    {
      "type": "modify",
      "old_id": "f57e039873164d428b224c11b3c8b44820bd2f44",
      "old_mode": 33188,
      "old_path": "ssh/agent/server_test.go",
      "new_id": "be6ba15e2fd122f4b2427d6a1f3a1e20a5079d86",
      "new_mode": 33188,
      "new_path": "ssh/agent/server_test.go"
    }
  ]
}