)]}'
{
  "commit": "8b5274cf687fd9316b4108863654cc57385531e8",
  "tree": "0183928d2fafb2f715756a35d986eeae89f39afa",
  "parents": [
    "5f87f3452ae96c4850ab9af7783f2517b643061b"
  ],
  "author": {
    "name": "Roland Shoemaker",
    "email": "roland@golang.org",
    "time": "Wed Dec 16 10:17:34 2020 -0800"
  },
  "committer": {
    "name": "Roland Shoemaker",
    "email": "roland@golang.org",
    "time": "Wed Dec 16 22:30:49 2020 +0000"
  },
  "message": "ssh: disallow gssapi-with-mic if GSSAPIWithMICConfig is not set\n\nThe ability to trigger the \u0027gssapi-with-mic\u0027 authentication method is\nnot properly gated by the presence of the GSSAPIWithMICConfig field of\nthe ServerConfig type. If this field is not set and a client sends a\n\u0027gssapi-with-mic\u0027 request, regardless of if the server advertises it,\nthe server will panic.\n\nThis issue was discovered and reported by Joern Schneewesiz, GitLab\nSecurity Research Team.\n\nFixes CVE-2020-29652\n\nChange-Id: Ie25de2766e442c8ab46680aae3ac89b0823cdeed\nReviewed-on: https://go-review.googlesource.com/c/crypto/+/278852\nTrust: Roland Shoemaker \u003croland@golang.org\u003e\nRun-TryBot: Roland Shoemaker \u003croland@golang.org\u003e\nReviewed-by: Filippo Valsorda \u003cfilippo@golang.org\u003e\nTryBot-Result: Go Bot \u003cgobot@golang.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "7d42a8c88d26bc6f77c68e38f5b5328a8fa94b5c",
      "old_mode": 33188,
      "old_path": "ssh/server.go",
      "new_id": "b6911e8306d6736e1592ebe2a2e243051d209a35",
      "new_mode": 33188,
      "new_path": "ssh/server.go"
    }
  ]
}