See here: https://github.com/blog/1938-vulnerability-announced-update-your-git-clients All supported repos (006/LTS, 010/previous-stable, 012/current-stable, 013/bloody) are now updated with an appropriately patched version of git. Dan