)]}'
{
  "commit": "b4f1988a35dee11ec3e05d6bf3e90b695fbd8909",
  "tree": "69f31d6f5e0e04427c355f89a56ec2fde17814ad",
  "parents": [
    "7042ebcbe097f305ba3a93f9a22b4befa4b83d29"
  ],
  "author": {
    "name": "Roland Shoemaker",
    "email": "roland@golang.org",
    "time": "Tue Dec 03 09:03:03 2024 -0800"
  },
  "committer": {
    "name": "Gopher Robot",
    "email": "gobot@golang.org",
    "time": "Wed Dec 11 09:50:49 2024 -0800"
  },
  "message": "ssh: make the public key cache a 1-entry FIFO cache\n\nUsers of the the ssh package seem to extremely commonly misuse the\nPublicKeyCallback API, assuming that the key passed in the last call\nbefore a connection is established is the key used for authentication.\nSome users then make authorization decisions based on this key. This\nproperty is not documented, and may not be correct, due to the caching\nbehavior of the package, resulting in users making incorrect\nauthorization decisions about the connection.\n\nThis change makes the cache a one entry FIFO cache, making the assumed\nproperty, that the last call to PublicKeyCallback represents the key\nactually used for authentication, actually hold.\n\nThanks to Damien Tournoud, Patrick Dawkins, Vince Parker, and\nJules Duvivier from the Platform.sh / Upsun engineering team\nfor reporting this issue.\n\nFixes golang/go#70779\nFixes CVE-2024-45337\n\nChange-Id: Ife7c7b4045d8b6bcd7e3a417bdfae370c709797f\nReviewed-on: https://go-review.googlesource.com/c/crypto/+/635315\nReviewed-by: Roland Shoemaker \u003croland@golang.org\u003e\nAuto-Submit: Gopher Robot \u003cgobot@golang.org\u003e\nReviewed-by: Damien Neil \u003cdneil@google.com\u003e\nReviewed-by: Nicola Murino \u003cnicola.murino@gmail.com\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "c0d1c29e6f9b7963dd75a327dec521669bab4e3e",
      "old_mode": 33188,
      "old_path": "ssh/server.go",
      "new_id": "5b5ccd96f4539604a0977ab1333208aadfbd4f9f",
      "new_mode": 33188,
      "new_path": "ssh/server.go"
    },
    {
      "type": "modify",
      "old_id": "b6d8ab3333b1c98392543d8c8d227041f68c2e1d",
      "old_mode": 33188,
      "old_path": "ssh/server_test.go",
      "new_id": "ba1bd10e8273732347c1db845102a06da28133f0",
      "new_mode": 33188,
      "new_path": "ssh/server_test.go"
    }
  ]
}