)]}'
{
  "commit": "e04e7219970912a40f80c4b13029416fdf960eeb",
  "tree": "9f52f6a78988019ac4fee80c62b34fc01224ea32",
  "parents": [
    "b315afd69a138d4d9d8bd44a9524bf78a37cf479"
  ],
  "author": {
    "name": "Nicola Murino",
    "email": "nicola.murino@gmail.com",
    "time": "Sun May 24 17:05:34 2026 +0200"
  },
  "committer": {
    "name": "Nicola Murino",
    "email": "nicola.murino@gmail.com",
    "time": "Tue Jun 02 00:22:54 2026 -0700"
  },
  "message": "ssh/agent: validate ed25519 private key length in Add\n\ninsertKey and insertCert assume an ed25519.PrivateKey is exactly\n64 bytes long: a 32-byte seed followed by a 32-byte public key.\nThe expression []byte(k)[32:] panics with \"slice bounds out of\nrange\" when a shorter slice is passed, which is reachable through\nthe exported Add API and crashes the caller process.\n\nReject ed25519 keys whose length is not ed25519.PrivateKeySize in\nall four branches (value and pointer variants of insertKey and\ninsertCert), using the same error wording already used by\nparseEd25519Cert in server.go.\n\nThis issue was found during a security audit by NCC Group\nCryptography Services, sponsored by Teleport, and was assessed\nand is being fixed as a non-security bug.\n\nChange-Id: I4a053835588aad4c3482fe1ca8045542cd960500\nReviewed-on: https://go-review.googlesource.com/c/crypto/+/782423\nReviewed-by: David Chase \u003cdrchase@google.com\u003e\nReviewed-by: Filippo Valsorda \u003cfilippo@golang.org\u003e\nReviewed-by: Junyang Shao \u003cshaojunyang@google.com\u003e\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "42760021e85c8192e7acc18438e9735bc16925b7",
      "old_mode": 33188,
      "old_path": "ssh/agent/client.go",
      "new_id": "eb96184e4c0838d770f70fea2eb8788230fb3e64",
      "new_mode": 33188,
      "new_path": "ssh/agent/client.go"
    },
    {
      "type": "modify",
      "old_id": "567c0d9cd27198b916a623b09a45f448c2ba24a3",
      "old_mode": 33188,
      "old_path": "ssh/agent/client_test.go",
      "new_id": "3b925c332479200dd9702d985dca4814c4544d8a",
      "new_mode": 33188,
      "new_path": "ssh/agent/client_test.go"
    }
  ]
}