)]}'
{
  "commit": "86efde54dc7069251a8b007026c500d28e4239ce",
  "tree": "79b1942707885af0952436981fa447db1923cb71",
  "parents": [
    "a6cdac60840750226b15617ac8858be44361b36b"
  ],
  "author": {
    "name": "Nicola Murino",
    "email": "nicola.murino@gmail.com",
    "time": "Sat Jun 13 11:48:20 2026 +0200"
  },
  "committer": {
    "name": "Gopher Robot",
    "email": "gobot@golang.org",
    "time": "Wed Sep 02 11:02:47 2026 -0700"
  },
  "message": "ssh: reject unexpected message types on established channels\n\nch.msg is only read while the channel open or a channel request with a\nreply is pending, so anything the default arm of channel.handlePacket\ndelivered to it was never consumed. The blocking send there let a\nmisbehaving peer fill the buffer with well-formed but unexpected message\ntypes carrying a valid channel id and stall the mux read loop,\ndeadlocking the whole connection.\n\nNo conforming peer sends such messages during the connection protocol.\nTreat them as a protocol error and tear the connection down, as\nhandleUnknownChannelPacket already does for the same messages when the\nchannel id is not in use.\n\nFixes CVE-2026-56855\nFixes golang/go#81317\n\nChange-Id: I87420dfe68fcb62a17df4b47dc5ffb6ccd72ba26\nReviewed-on: https://go-review.googlesource.com/c/crypto/+/826524\nReviewed-by: Roland Shoemaker \u003croland@golang.org\u003e\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nAuto-Submit: Neal Patel \u003cnealpatel@google.com\u003e\nReviewed-by: Nicholas Husin \u003chusin@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "0d9dac9c4312e1cafe824d0703f9c1ddba2bb6b7",
      "old_mode": 33188,
      "old_path": "ssh/channel.go",
      "new_id": "d6010fd77b995106be297978d5c07b58343d1b36",
      "new_mode": 33188,
      "new_path": "ssh/channel.go"
    },
    {
      "type": "modify",
      "old_id": "b844082362e5b8f91f1bedccb4a810da3c8c95ba",
      "old_mode": 33188,
      "old_path": "ssh/mux_test.go",
      "new_id": "e23fd0e1d9977db9f719f2795087848501b59cd1",
      "new_mode": 33188,
      "new_path": "ssh/mux_test.go"
    }
  ]
}