)]}'
{
  "commit": "ca6a5545ba18844a97c88a90a385eb6335bb7526",
  "tree": "a6a82ccbde9c57045bd0b77797944502ab3184a3",
  "parents": [
    "3a666bca00d7fb30d55e252131ea2cf2006dc3a3"
  ],
  "author": {
    "name": "Roland Shoemaker",
    "email": "roland@golang.org",
    "time": "Thu Oct 09 13:35:24 2025 -0700"
  },
  "committer": {
    "name": "Gopher Robot",
    "email": "gobot@golang.org",
    "time": "Mon Oct 13 08:39:27 2025 -0700"
  },
  "message": "[release-branch.go1.24] crypto/x509: rework fix for CVE-2025-58187\n\nIn CL 709854 we enabled strict validation for a number of properties of\ndomain names (and their constraints). This caused significant breakage,\nsince we didn\u0027t previously disallow the creation of certificates which\ncontained these malformed domains.\n\nRollback a number of the properties we enforced, making domainNameValid\nonly enforce the same properties that domainToReverseLabels does. Since\nthis also undoes some of the DoS protections our initial fix enabled,\nthis change also adds caching of constraints in isValid (which perhaps\nis the fix we should\u0027ve initially chosen).\n\nUpdates #75835\nUpdates #75828\nFixes #75860\n\nChange-Id: Ie6ca6b4f30e9b8a143692b64757f7bbf4671ed0e\nReviewed-on: https://go-review.googlesource.com/c/go/+/710735\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Damien Neil \u003cdneil@google.com\u003e\n(cherry picked from commit 1cd71689f2ed8f07031a0cc58fc3586ca501839f)\nReviewed-on: https://go-review.googlesource.com/c/go/+/710879\nReviewed-by: Michael Pratt \u003cmpratt@google.com\u003e\nAuto-Submit: Michael Pratt \u003cmpratt@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "831fcbc8d2eb8286ed8fa088b76c389c529b80f3",
      "old_mode": 33188,
      "old_path": "src/crypto/x509/name_constraints_test.go",
      "new_id": "a5851845164d1021f417e937d08aef9e943fa346",
      "new_mode": 33188,
      "new_path": "src/crypto/x509/name_constraints_test.go"
    },
    {
      "type": "modify",
      "old_id": "276551258c16c8da4e66ef6d4408edf0da8d2370",
      "old_mode": 33188,
      "old_path": "src/crypto/x509/parser.go",
      "new_id": "58849468cdc56001bc1de07ce9db90d558805f6a",
      "new_mode": 33188,
      "new_path": "src/crypto/x509/parser.go"
    },
    {
      "type": "modify",
      "old_id": "8f9ba1b93710ea1101ddeb96281b8429fb45d908",
      "old_mode": 33188,
      "old_path": "src/crypto/x509/parser_test.go",
      "new_id": "e5044597b67577869105700567fcfe1babf9d83c",
      "new_mode": 33188,
      "new_path": "src/crypto/x509/parser_test.go"
    },
    {
      "type": "modify",
      "old_id": "058153fbe73461295e8d5cdc4c3eedaf13b6a811",
      "old_mode": 33188,
      "old_path": "src/crypto/x509/verify.go",
      "new_id": "bf7e7ec058db2bd59aae0cdf26a01e1c8e63bafa",
      "new_mode": 33188,
      "new_path": "src/crypto/x509/verify.go"
    },
    {
      "type": "modify",
      "old_id": "5595f99ea5e43a7715fe8cf2c622693751ad7b04",
      "old_mode": 33188,
      "old_path": "src/crypto/x509/verify_test.go",
      "new_id": "60a4cea9146adf051922fcdce616c941866514c8",
      "new_mode": 33188,
      "new_path": "src/crypto/x509/verify_test.go"
    }
  ]
}