)]}'
{
  "commit": "247820ff6bfba6e1b7891f4bfc25511d68761d5d",
  "tree": "ea9c90510eb286eafd0db882e6c0333f1c48a625",
  "parents": [
    "7935b51b8b5cbc07f572a28dc2f82e03e5fcb449"
  ],
  "author": {
    "name": "Andrew Gerrand",
    "email": "adg@golang.org",
    "time": "Thu Sep 25 22:32:20 2014 +0000"
  },
  "committer": {
    "name": "Andrew Gerrand",
    "email": "adg@golang.org",
    "time": "Thu Sep 25 22:32:20 2014 +0000"
  },
  "message": "[release-branch.go1.3] crypto/tls: ensure that we don\u0027t resume when tickets are disabled\n\nA security bug affects programs that use crypto/tls to implement a TLS server\nfrom Go 1.1 onwards. If the server enables TLS client authentication using\ncertificates (this is rare) and explicitly sets SessionTicketsDisabled to true\nin the tls.Config, then a malicious client can falsely assert ownership of any\nclient certificate it wishes.\n\nThis issue was discovered internally and there is no evidence of exploitation.\n\nChange authored by Adam Langley \u003cagl@golang.org\u003e\nhttps://golang.org/cl/148080043/\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "75111eba0042f54c2cd42b59bd1f82161c957c84",
      "old_mode": 33188,
      "old_path": "src/pkg/crypto/tls/handshake_server.go",
      "new_id": "dff6fd9adc4595e2ec67ad91acebb3592e714de6",
      "new_mode": 33188,
      "new_path": "src/pkg/crypto/tls/handshake_server.go"
    },
    {
      "type": "modify",
      "old_id": "c3e36785b5d0fff4a0413d934b91372d12e73ab7",
      "old_mode": 33188,
      "old_path": "src/pkg/crypto/tls/handshake_server_test.go",
      "new_id": "3444d5ca829e93ea75d79879666336de2816e471",
      "new_mode": 33188,
      "new_path": "src/pkg/crypto/tls/handshake_server_test.go"
    },
    {
      "type": "add",
      "old_id": "0000000000000000000000000000000000000000",
      "old_mode": 0,
      "old_path": "/dev/null",
      "new_id": "30f0026815538511a3b44e50d269981048df71af",
      "new_mode": 33188,
      "new_path": "src/pkg/crypto/tls/testdata/Server-TLSv12-IssueTicketPreDisable"
    },
    {
      "type": "add",
      "old_id": "0000000000000000000000000000000000000000",
      "old_mode": 0,
      "old_path": "/dev/null",
      "new_id": "db833f65559af36771ab35aad82b58c476a0e74c",
      "new_mode": 33188,
      "new_path": "src/pkg/crypto/tls/testdata/Server-TLSv12-ResumeDisabled"
    },
    {
      "type": "modify",
      "old_id": "4cfc5a53ffeb1bff70cb3310ee0c5e6cd98221cb",
      "old_mode": 33188,
      "old_path": "src/pkg/crypto/tls/ticket.go",
      "new_id": "0923027c701b162db37f236b6eaf5f77c0a7ef58",
      "new_mode": 33188,
      "new_path": "src/pkg/crypto/tls/ticket.go"
    }
  ]
}