d/git-2.7.4-x86_64-1.txz
NOTE: Issuing this patch again since the bug reporter listed the
wrong git version (2.7.1) as fixed. The vulnerability was actually
patched in git-2.7.4.
Fixed buffer overflows allowing server and client side remote code
execution in all git versions before 2.7.4.
For more information, see:
http://seclists.org/oss-sec/2016/q1/645
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2315
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2324
(* Security fix *)

xap/hexchat-2.12.0-x86_64-1.txz

xap/mozilla-thunderbird-38.7.0-x86_64-1.txz
This update contains security fixes and improvements.
For more information, see:
http://www.mozilla.org/security/known-vulnerabilities/thunderbird.html
(* Security fix *)

extra/bash-completion/bash-completion-2.2-noarch-2.txz
Applied upstream patches to fix tar filename completion and related issues.
Thanks to Robby Workman.