A vulnerability in git-annex exposed the checksum of annexed files to encrypted special remotes during resumed uploads. Encrypted special remotes are not supposed to access the checksum of the unencrypted file, but due to this bug, the checksum was leaked. This issue is considered low severity and was fixed in git-annex version 6.20160419.