specify which versions are affected
\release{2017-7-11}{3.3.2}{1.6.0}{
\note{fix}{security}{
Fixed a vulnerability affecting installations using untrusted multi-tenancy
- (i.e. multiple teams who may be jerks).
+ (i.e. multiple teams who may be jerks). This issue affects all versions
+ after and including \reference{2.7.1}.
If you are running a single-tenant Concourse installation, or an
installation where all team members are "trusted" (i.e. part of your small
- org), you probably don't have much to worry about. Otherwise, you'll want
- to upgrade to this as soon as possible.
+ org), you don't have much to worry about. Otherwise, you'll want to upgrade
+ to this as soon as possible.
+
+ We strongly recommend upgrading as soon as possible. If you're stuck on an
+ older version (i.e. v2.7.x), please let us know at
+ \hyperlink{mailto:security@concourse.ci}{security@concourse.ci}.
}
\note{feature}{
