)]}'
{
  "commit": "90f76b8ffe1453c472892d338785687e9727bcc0",
  "tree": "90c9d5974f4a63e764bf3eccf89dfd98cc08526b",
  "parents": [
    "b53964a1ca4763384f2ee3bf482b8ca67a9f9fa8"
  ],
  "author": {
    "name": "Nicola Murino",
    "email": "nicola.murino@gmail.com",
    "time": "Sun Jul 19 21:07:53 2026 +0200"
  },
  "committer": {
    "name": "Gopher Robot",
    "email": "gobot@golang.org",
    "time": "Wed Jul 22 10:37:06 2026 -0700"
  },
  "message": "ssh: reject certificate signature keys before recursing\n\nparseCert parsed a certificate\u0027s SignatureKey by calling ParsePublicKey\nagain, and only afterwards rejected a certificate used as a signing key.\nFor a chain of nested certificates this recursed once per level, so a key\nwith enough nesting exhausted the goroutine stack and crashed with a fatal\nstack overflow that recover cannot catch.\n\nReject the signature key by its declared algorithm before parsing it, which\nbounds parsing.\n\nFixes golang/go#80414\n\nChange-Id: Id51401aae15bfbec006c03ab97635a3b68bd6058\nReviewed-on: https://go-review.googlesource.com/c/crypto/+/802145\nAuto-Submit: Nicola Murino \u003cnicola.murino@gmail.com\u003e\nReviewed-by: Carlos Amedee \u003ccarlos@golang.org\u003e\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Cherry Mui \u003ccherryyz@google.com\u003e\nReviewed-by: Filippo Valsorda \u003cfilippo@golang.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "6f75d77ec1a5e01dac7ab6e52dcbede9c5af5539",
      "old_mode": 33188,
      "old_path": "ssh/certs.go",
      "new_id": "fa848f51a5f9be5dadf7b2518e9bad5ff4ec6477",
      "new_mode": 33188,
      "new_path": "ssh/certs.go"
    },
    {
      "type": "modify",
      "old_id": "43280e34f7a9acd73a87ca1bb6659c65a40d76b5",
      "old_mode": 33188,
      "old_path": "ssh/certs_test.go",
      "new_id": "8358b33e5e77ef68d813a4352ff841cad84f4c7e",
      "new_mode": 33188,
      "new_path": "ssh/certs_test.go"
    }
  ]
}