)]}'
{
  "commit": "137b8065ab5b485bbde0ed430dd89841c0602bb2",
  "tree": "9eec1e1b1eb1c7bb29a7710eabe4b5a86c1304d8",
  "parents": [
    "76d509e948d3a6e663936b7860444799efa82fe0"
  ],
  "author": {
    "name": "Roland Shoemaker",
    "email": "roland@golang.org",
    "time": "Fri May 08 09:22:41 2026 -0700"
  },
  "committer": {
    "name": "Gopher Robot",
    "email": "gobot@golang.org",
    "time": "Fri Jun 26 09:07:00 2026 -0700"
  },
  "message": "crypto/tls: omit PSK in ECH outer client hello\n\nWhen using ECH, do not include the PSK extension in the outer hello.\nIncluding the PSK extension allows for a degradation in privacy, as an\non-path attacker can harvest outer client hellos, and then construct new\nhellos using the PSK extension and arbitrary guessed SNI values,\nreplaying them to the target server. If the server rejects the PSK, the\nhandshake will continue, but if the PSK is accepted, the binder check\nwill fail.\n\nThanks to Coia Prant (github.com/rbqvq) for\nreporting this issue.\n\nFixes CVE-2026-42505\nFixes #79282\n\nChange-Id: Ib3a3c948106a57c1b07b9e61a58cbf757848be18\nReviewed-on: https://go-review.googlesource.com/c/go/+/775960\nAuto-Submit: Roland Shoemaker \u003croland@golang.org\u003e\nTryBot-Bypass: Roland Shoemaker \u003croland@golang.org\u003e\nReviewed-by: Daniel McCarney \u003cdaniel@binaryparadox.net\u003e\nReviewed-by: Carlos Amedee \u003ccarlos@golang.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "aa0b7db75dd493eed6b21460999bbd24289dfb00",
      "old_mode": 33188,
      "old_path": "src/crypto/tls/handshake_messages.go",
      "new_id": "511e073df57d724da7c9f31e15f3d4ff610a323b",
      "new_mode": 33188,
      "new_path": "src/crypto/tls/handshake_messages.go"
    },
    {
      "type": "modify",
      "old_id": "aa4659ac3aec38ad88fdbfe1cde7cc95b4c06d4f",
      "old_mode": 33188,
      "old_path": "src/crypto/tls/handshake_messages_test.go",
      "new_id": "d025ce85ca4a9df7793eb475c10500adbe6f9bf0",
      "new_mode": 33188,
      "new_path": "src/crypto/tls/handshake_messages_test.go"
    },
    {
      "type": "modify",
      "old_id": "d1f229b0c77127ee821ed1a8d2881805f41d8624",
      "old_mode": 33188,
      "old_path": "src/crypto/tls/tls_test.go",
      "new_id": "6fe44907358095b791e8f5218211b5e65e6f8738",
      "new_mode": 33188,
      "new_path": "src/crypto/tls/tls_test.go"
    }
  ]
}