DSA-3343-1 twig - security update

Bulletin has no description...

PT-2015-7622

Name of the Vulnerable Software and Affected Versions Sensio Labs Twig versions prior to 1.20.0 Description The issue allows remote attackers to execute arbitrary code via the self variable in a template when Sandbox mode is enabled. This is related to the displayBlock function in Template.php...

Debian Security Advisory DSA 3343-1 (twig - security update)

James Kettle, Alain Tiemblo, Christophe Coevoet and Fabien Potencier discovered that twig, a templating engine for PHP, did not correctly process its input. End users allowed to submit twig templates could use specially crafted code to trigger remote code execution, even in sandboxed templates...

Remote code execution in templates

More info at https://symfony.com/blog/security-release-twig-1-20-0...

F5 Networks BIG-IP : Expat vulnerabilities (K15905)

CVE-2009-3560 The big2toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent attackers to cause a denial of service application crash via an XML document with malformed UTF-8 sequences that trigger a buffer over-read, related ...

Fedora Update for php-twig-Twig FEDORA-2013-6114

Check for the Version of php-twig-Twig OpenVAS Vulnerability Test Fedora Update for php-twig-Twig FEDORA-2013-6114 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for php-twig-Twig FEDORA-2013-6107

Check for the Version of php-twig-Twig OpenVAS Vulnerability Test Fedora Update for php-twig-Twig FEDORA-2013-6107 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for php-twig-Twig FEDORA-2013-6114

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for php-twig-Twig FEDORA-2013-6107

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 17 : php-twig-Twig-1.12.3-1.fc17 (2013-6107)

Updated to version 1.12.3 See: http://blog.twig.sensiolabs.org/post/47461911874/security-release-twig -1-12-3-released Full change log: https://github.com/fabpot/Twig/blob/v1.12.3/CHANGELOG Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Fedora 18 : php-twig-Twig-1.12.3-1.fc18 (2013-6114)

Updated to version 1.12.3 See: http://blog.twig.sensiolabs.org/post/47461911874/security-release-twig -1-12-3-released Full change log: https://github.com/fabpot/Twig/blob/v1.12.3/CHANGELOG Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

[SECURITY] Fedora 18 Update: php-twig-Twig-1.12.3-1.fc18

The flexible, fast, and secure template engine for PHP. Fast: Twig compiles templates down to plain optimized PHP code. The overhead compared to regular PHP code was reduced to the very minimum. Secure: Twig has a sandbox mode to evaluate untrusted template code. This allows Twig to be used as a...

[SECURITY] Fedora 17 Update: php-twig-Twig-1.12.3-1.fc17

The flexible, fast, and secure template engine for PHP. Fast: Twig compiles templates down to plain optimized PHP code. The overhead compared to regular PHP code was reduced to the very minimum. Secure: Twig has a sandbox mode to evaluate untrusted template code. This allows Twig to be used as a...

[SECURITY] Fedora 19 Update: php-twig-Twig-1.12.3-1.fc19

The flexible, fast, and secure template engine for PHP. Fast: Twig compiles templates down to plain optimized PHP code. The overhead compared to regular PHP code was reduced to the very minimum. Secure: Twig has a sandbox mode to evaluate untrusted template code. This allows Twig to be used as a...

Fedora 19 : php-twig-Twig-1.12.3-1.fc19 (2013-6077)

Updated to version 1.12.3 See: http://blog.twig.sensiolabs.org/post/47461911874/security-release-twig -1-12-3-released Full change log: https://github.com/fabpot/Twig/blob/v1.12.3/CHANGELOG Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Vulnerability in the filesystem loader

More info at http://blog.twig.sensiolabs.org/post/47461911874/security-release-twig-1-12-3-released...

Vulnerability in the filesystem loader

More info at http://blog.twig.sensiolabs.org/post/47461911874/security-release-twig-1-12-3-released...

Twig SQL Injection

---------------------------------------------------------------- Twig SQL Injection Vulnerability ---------------------------------------------------------------- Exploit Title : Twig SQL Injection Vulnerability Author : Hack Center Security Team Discovered By : Net.W0lf Software Link :...

Mandriva Update for expat MDVSA-2009:316-1 (expat)

Check for the Version of expat OpenVAS Vulnerability Test Mandriva Update for expat MDVSA-2009:316-1 expat Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

AZL-44736 CVE-2009-3560 affecting package ogdi 4.1.1-3

The big2toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent attackers to cause a denial of service application crash via an XML document with malformed UTF-8 sequences that trigger a buffer over-read, related to the doProlo...