Simplified

Author: hsbt

en/news/_posts/2024-03-21-buffer-overread-cve-2024-27280.md

@@ -26,7 +26,7 @@ We recommend to update the StringIO gem to version 3.0.3 or later. In order to e
 * For Ruby 3.0 users: Update to `stringio` 3.0.1.1
 * For Ruby 3.1 users: Update to `stringio` 3.0.1.2
 
-StringIO 3.0.1.2 contained bugfix for [[Bug #19389]][https://github.com/ruby/ruby/commit/1d24a931c458c93463da1d5885f33edef3677cc2]. This fix has been backported to Ruby 3.1.4. But we didn't change stringio version from 3.0.1. Therefore, we released 3.0.1.2 to include the vulnerability fix.
+Note: hat StringIO 3.0.1.2 contains not only the fix for this vulnerability but also a bugfix for [[Bug #19389]][https://github.com/ruby/ruby/commit/1d24a931c458c93463da1d5885f33edef3677cc2].
 
 You can use `gem update stringio` to update it. If you are using bundler, please add `gem "stringio", ">= 3.0.1.2"` to your `Gemfile`.