From 4a6edf4778b1c0e6b9aa97cd2cbb4a2f5dc1844f Mon Sep 17 00:00:00 2001 From: Frank Taillandier Date: Thu, 27 Sep 2018 14:47:22 +0200 Subject: [PATCH] Typo --- .../2018-09-19-security-fixes-for-3-6-3-7-3-8.markdown | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/docs/_posts/2018-09-19-security-fixes-for-3-6-3-7-3-8.markdown b/docs/_posts/2018-09-19-security-fixes-for-3-6-3-7-3-8.markdown index ac68177e..bb02b3bf 100644 --- a/docs/_posts/2018-09-19-security-fixes-for-3-6-3-7-3-8.markdown +++ b/docs/_posts/2018-09-19-security-fixes-for-3-6-3-7-3-8.markdown @@ -12,13 +12,13 @@ bring that patch to you. The vulnerability allowed arbitrary file reads with the config file. By simply including a symlink in the `include` array allowed the symlinked file to be read into the build when they shouldn't -actually be read in any circumstance.
+actually be read in any circumstance.   Further details regarding the patch can be viewed at the [pull request URL]({{ site.repository }}/pull/7224) -The patch has been released as versions `3.6.3`, `3.7.4` and `3.8.4`.
+The patch has been released as versions `3.6.3`, `3.7.4` and `3.8.4`.   `v3.7.4` was released a couple of weeks prior and has been bundled with `github-pages-v192`. Please keep in mind that this issue affects _all previously released Jekyll versions_. If you have not had -a good reason to upgrade to `3.6`, `3.7` or `3.8` yet, we advise that you do so at your earliest. +a good reason to upgrade to `3.6`, `3.7` or `3.8` yet, we advise that you do so at the earliest. As always, Happy Jekylling! :sparkles: