diff --git a/ReleaseNotes/ReleaseNotes-2.10.txt b/ReleaseNotes/ReleaseNotes-2.10.txt
index 8e428d9..f8a549e 100644
--- a/ReleaseNotes/ReleaseNotes-2.10.txt
+++ b/ReleaseNotes/ReleaseNotes-2.10.txt
@@ -701,7 +701,7 @@
 
 * Update Jetty to 9.2
 
-* Update JGit to 3.5.3.201412180710-r
+* Update JGit to 3.6.2.201501210735-r
 
 * Update log4j to 1.2.17
 
diff --git a/lib/jgit/BUCK b/lib/jgit/BUCK
index 8ddf3f9..2d0af1b 100644
--- a/lib/jgit/BUCK
+++ b/lib/jgit/BUCK
@@ -1,12 +1,12 @@
 include_defs('//lib/maven.defs')
 
-VERS = '3.5.3.201412180710-r'
+VERS = '3.6.2.201501210735-r'
 
 maven_jar(
   name = 'jgit',
   id = 'org.eclipse.jgit:org.eclipse.jgit:' + VERS,
-  bin_sha1 = '9f3781c7163ee6fa380a4518564a5abb097d9e27',
-  src_sha1 = 'e6d8548522624ffa3094e43130e5dc958f359187',
+  bin_sha1 = '47d59dffb5f02470ccfb6c1a5a31b6040a1636e5',
+  src_sha1 = '52e133360f2c38046de262c827dfec8ec5b7c885',
   license = 'jgit',
   unsign = True,
   deps = [':ewah'],
@@ -20,7 +20,7 @@
 maven_jar(
   name = 'jgit-servlet',
   id = 'org.eclipse.jgit:org.eclipse.jgit.http.server:' + VERS,
-  sha1 = 'f2678e1feefd8b90b3c47d40ebc2b9426e3b69f4',
+  sha1 = 'f7788bbd0c0414e856c84ddf353e6f4c62fe1d28',
   license = 'jgit',
   deps = [':jgit'],
   unsign = True,
@@ -33,7 +33,7 @@
 maven_jar(
   name = 'jgit-archive',
   id = 'org.eclipse.jgit:org.eclipse.jgit.archive:' + VERS,
-  sha1 = '66705b6630a89c9e6e7950798ea2d7f8a4a82cd7',
+  sha1 = 'ca9da919275dad5ac2844529f4cdccdd919bab5f',
   license = 'jgit',
   deps = [':jgit',
     '//lib/commons:compress',
@@ -49,7 +49,7 @@
 maven_jar(
   name = 'junit',
   id = 'org.eclipse.jgit:org.eclipse.jgit.junit:' + VERS,
-  sha1 = '47e821761059770dfd3f443dc7f14d5381fb6f4f',
+  sha1 = 'b7418e19efbeb9490b359c8a921cf32bfc57ebbd',
   license = 'DO_NOT_DISTRIBUTE',
   unsign = True,
   deps = [':jgit'],