)]}'
{
  "commit": "82b0cdb7411ea2cf02d3a45e6983cc7c8c009d9e",
  "tree": "b0ece863c5b016c7c785914b33233d9affb2ef67",
  "parents": [
    "7d2dd3488cdfbddda14c18c455d3263df75a46fc"
  ],
  "author": {
    "name": "Damien Neil",
    "email": "dneil@google.com",
    "time": "Mon Mar 23 13:12:44 2026 -0700"
  },
  "committer": {
    "name": "Gopher Robot",
    "email": "gobot@golang.org",
    "time": "Tue Apr 07 12:14:40 2026 -0700"
  },
  "message": "[release-branch.go1.25] archive/tar: limit the number of old GNU sparse format entries\n\nWe did not set a limit on the maximum size of sparse maps in\nthe old GNU sparse format. Set a limit based on the cumulative\nsize of the extension blocks used to encode the map (consistent\nwith how we limit the sparse map size for other formats).\n\nAdd an additional limit to the total number of sparse file entries,\nregardless of encoding, to all sparse formats.\n\nThanks to Colin Walters (walters@verbum.org),\nUuganbayar Lkhamsuren (https://github.com/uug4na),\nand Jakub Ciolek for reporting this issue.\n\nFixes #78301\nFixes CVE-2026-32288\n\nChange-Id: I84877345d7b41cc60c58771860ba70e16a6a6964\nReviewed-on: https://go-internal-review.googlesource.com/c/go/+/3901\nReviewed-by: Damien Neil \u003cdneil@google.com\u003e\nReviewed-by: Roland Shoemaker \u003cbracewell@google.com\u003e\nReviewed-on: https://go-internal-review.googlesource.com/c/go/+/4003\nReviewed-by: Nicholas Husin \u003chusin@google.com\u003e\nReviewed-by: Neal Patel \u003cnealpatel@google.com\u003e\nReviewed-on: https://go-review.googlesource.com/c/go/+/763554\nTryBot-Bypass: Gopher Robot \u003cgobot@golang.org\u003e\nAuto-Submit: Gopher Robot \u003cgobot@golang.org\u003e\nReviewed-by: Junyang Shao \u003cshaojunyang@google.com\u003e\nReviewed-by: David Chase \u003cdrchase@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "9954b4d9f5548a9f074ec6895a251ee1e65a6f9d",
      "old_mode": 33188,
      "old_path": "src/archive/tar/format.go",
      "new_id": "32e58a9d9b4e1e7419ebcc1c144d166f4b0f72df",
      "new_mode": 33188,
      "new_path": "src/archive/tar/format.go"
    },
    {
      "type": "modify",
      "old_id": "16ac2f5b17c28b4ec4214bd7ba8be2c2634a333a",
      "old_mode": 33188,
      "old_path": "src/archive/tar/reader.go",
      "new_id": "f85b9986259528ab727b9c986cf063bda9980284",
      "new_mode": 33188,
      "new_path": "src/archive/tar/reader.go"
    },
    {
      "type": "modify",
      "old_id": "fca53dae741bd51c2e2f7b5b5cfb54335a38f0dc",
      "old_mode": 33188,
      "old_path": "src/archive/tar/reader_test.go",
      "new_id": "49a71cb61770b08ae1ef5cc6b3fbd7d5710cc55a",
      "new_mode": 33188,
      "new_path": "src/archive/tar/reader_test.go"
    }
  ]
}