)]}'
{
  "commit": "9f72eccdf6fa09a7c68448a7fdc333dd2deb7d9d",
  "tree": "6da6fb9953f01f178fb46816cf8a1a71364628bd",
  "parents": [
    "8f405a4109d7ce87a44f89185bdc385914ce5c13"
  ],
  "author": {
    "name": "Nicola Murino",
    "email": "nicola.murino@gmail.com",
    "time": "Sun May 24 17:47:48 2026 +0200"
  },
  "committer": {
    "name": "Nicola Murino",
    "email": "nicola.murino@gmail.com",
    "time": "Tue Jun 02 00:24:19 2026 -0700"
  },
  "message": "ssh/knownhosts: treat only ASCII space and tab as whitespace\n\nThe previous implementation used bytes.TrimSpace, which strips all\nUnicode whitespace categories (e.g., non-breaking spaces). However,\nOpenSSH\u0027s known_hosts parser (hostfile.c) strictly treats only ASCII\nspace (0x20) and horizontal tab (0x09) as separators.\n\nThis discrepancy meant the Go parser might interpret fields differently\nthan OpenSSH, potentially treating parts of a key or hostname as\nseparators if they contained Unicode whitespace.\n\nThis change replaces bytes.TrimSpace with a local trimSpace helper that\nonly trims \" \\t\", ensuring parsing behavior consistent with the\nreference implementation.\n\nThis issue was found during a security audit by NCC Group Cryptography\nServices, sponsored by Teleport, and was assessed and is being fixed as\na non-security bug.\n\nChange-Id: Ia536889636de2c167d2507c01e3f1b7c033c9a8f\nReviewed-on: https://go-review.googlesource.com/c/crypto/+/782426\nReviewed-by: David Chase \u003cdrchase@google.com\u003e\nReviewed-by: Filippo Valsorda \u003cfilippo@golang.org\u003e\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Junyang Shao \u003cshaojunyang@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "e57cf5b471d0b655c2c323aa1f57edb0815afb69",
      "old_mode": 33188,
      "old_path": "ssh/knownhosts/knownhosts.go",
      "new_id": "1ef1c35036ef31b4043584597380b7f13a78a298",
      "new_mode": 33188,
      "new_path": "ssh/knownhosts/knownhosts.go"
    },
    {
      "type": "modify",
      "old_id": "4d3ca59e920a0bacddf0824d416fe93ba07919d5",
      "old_mode": 33188,
      "old_path": "ssh/knownhosts/knownhosts_test.go",
      "new_id": "8e1fba2aadefd1642f83afe2697c82577e03541f",
      "new_mode": 33188,
      "new_path": "ssh/knownhosts/knownhosts_test.go"
    }
  ]
}