jekyll/site/_posts/2013-07-25-jekyll-1-1-2-released.markdown

layout	title	date	author	version	categories
news_item	Jekyll 1.1.2 Released	2013-07-25 09:08:38 +0200	parkr	1.1.2	release

Version 1.1.2 fixes a minor, but none-the-less important security vulnerablity affecting several third-party Jekyll plugins. If your Jekyll site does not use plugins, you are may, but are not required to upgrade at this time.

Community and custom plugins extending the Liquid::Drop class may inadvertantly disclose some system information such as directory structure or software configuration to users with access to the Liquid templating system.

We recommend you upgrade to Jekyll v1.1.2 immediately if you use Liquid::Drop plugins on your Jekyll site.

Many thanks for Ben Balter for alerting us to the problem and submitting a patch so quickly.