diff --git a/site/_posts/2013-07-25-jekyll-1-0-4-released.markdown b/site/_posts/2013-07-25-jekyll-1-0-4-released.markdown index 775763d98..6ef686c26 100644 --- a/site/_posts/2013-07-25-jekyll-1-0-4-released.markdown +++ b/site/_posts/2013-07-25-jekyll-1-0-4-released.markdown @@ -7,7 +7,7 @@ version: 1.0.4 categories: [release] --- -Version 1.0.4 fixes a minor, but nonetheless important security vulnerability affecting several third-party Jekyll plugins. If your Jekyll site does not use plugins, you are may, but are not required to upgrade at this time. +Version 1.0.4 fixes a minor, but nonetheless important security vulnerability affecting several third-party Jekyll plugins. If your Jekyll site does not use plugins, you may, but are not required to upgrade at this time. Community and custom plugins extending the `Liquid::Drop` class may inadvertently disclose some system information such as directory structure or software configuration to users with access to the Liquid templating system. diff --git a/site/_posts/2013-07-25-jekyll-1-1-2-released.markdown b/site/_posts/2013-07-25-jekyll-1-1-2-released.markdown index 10d843c7d..c27922c4a 100644 --- a/site/_posts/2013-07-25-jekyll-1-1-2-released.markdown +++ b/site/_posts/2013-07-25-jekyll-1-1-2-released.markdown @@ -7,7 +7,7 @@ version: 1.1.2 categories: [release] --- -Version 1.1.2 fixes a minor, but nonetheless important security vulnerability affecting several third-party Jekyll plugins. If your Jekyll site does not use plugins, you are may, but are not required to upgrade at this time. +Version 1.1.2 fixes a minor, but nonetheless important security vulnerability affecting several third-party Jekyll plugins. If your Jekyll site does not use plugins, you may, but are not required to upgrade at this time. Community and custom plugins extending the `Liquid::Drop` class may inadvertently disclose some system information such as directory structure or software configuration to users with access to the Liquid templating system.