)]}'
{
  "commit": "bcc6371443ebc0f104379b0a1068cfca0191b909",
  "tree": "067443ed62df176ae9561ca9e984c1d8872ac80d",
  "parents": [
    "1518c55a796b058eff01f3cbf177f4b726c01d7c"
  ],
  "author": {
    "name": "Matt Caswell",
    "email": "matt@openssl.org",
    "time": "Thu Mar 29 09:17:11 2018 +0100"
  },
  "committer": {
    "name": "Matt Caswell",
    "email": "matt@openssl.org",
    "time": "Tue Apr 03 15:52:31 2018 +0100"
  },
  "message": "Fix a text canonicalisation bug in CMS\n\nWhere a CMS detached signature is used with text content the text goes\nthrough a canonicalisation process first prior to signing or verifying a\nsignature. This process strips trailing space at the end of lines, converts\nline terminators to CRLF and removes additional trailing line terminators\nat the end of a file. A bug in the canonicalisation process meant that\nsome characters, such as form-feed, were incorrectly treated as whitespace\nand removed. This is contrary to the specification (RFC5485). This fix\ncould mean that detached text data signed with an earlier version of\nOpenSSL 1.1.0 may fail to verify using the fixed version, or text data\nsigned with a fixed OpenSSL may fail to verify with an earlier version of\nOpenSSL 1.1.0. A workaround is to only verify the canonicalised text data\nand use the \"-binary\" flag (for the \"cms\" command line application) or set\nthe SMIME_BINARY/PKCS7_BINARY/CMS_BINARY flags (if using CMS_verify()).\n\nReviewed-by: Tim Hudson \u003ctjh@openssl.org\u003e\nReviewed-by: Richard Levitte \u003clevitte@openssl.org\u003e\n(Merged from https://github.com/openssl/openssl/pull/5790)\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "0c1e8984bc41411236b3d75d7590719f7848a157",
      "old_mode": 33188,
      "old_path": "CHANGES",
      "new_id": "b4d0329491ae97ee365684029022eb533af558d7",
      "new_mode": 33188,
      "new_path": "CHANGES"
    },
    {
      "type": "modify",
      "old_id": "7f4db6a2f747c118dca8e99580c9455498d27d1e",
      "old_mode": 33188,
      "old_path": "crypto/asn1/asn_mime.c",
      "new_id": "aa92a8e115217a1da830eb84e57466f0c482b3ab",
      "new_mode": 33188,
      "new_path": "crypto/asn1/asn_mime.c"
    }
  ]
}