On Wed, Jun 01, 2016 at 01:39:01PM +0900, Jason A. Donenfeld wrote: > Does that vuln apply to our usage of libgit? Yes, I think CVE-2016-2315 affects anything that uses libgit's tree reading code.