Fedora Update Notification
2022-02-13 01:14:18.017032

Name        : php-twig2
Product     : Fedora 35
Version     : 2.14.11
Release     : 1.fc35
URL         : https://twig.symfony.com
Summary     : The flexible, fast, and secure template engine for PHP
Description :
The flexible, fast, and secure template engine for PHP.

* Fast: Twig compiles templates down to plain optimized PHP code. The
  overhead compared to regular PHP code was reduced to the very minimum.

* Secure: Twig has a sandbox mode to evaluate untrusted template code. This
  allows Twig to be used as a template language for applications where users
  may modify the template design.

* Flexible: Twig is powered by a flexible lexer and parser. This allows the
  developer to define its own custom tags and filters, and create its own

Autoloader: /usr/share/php/Twig2/autoload.php

Update Information:

**Version 2.14.11** (2022-02-04)   * Fix a security issue when in a sandbox: the
`sort` filter must require a Closure for the `arrow` parameter  * Fix
deprecation notice on `round`  * Fix call to deprecated `convertToHtml` method

* Fri Feb  4 2022 Remi Collet  - 2.14.11-1
- update to 2.14.11

  [ 1 ] Bug #2051361 - CVE-2022-23614 twig:  Disallow non closures in `sort` filter when the sandbox mode is enabled

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-58abb323f0' at the command
line. For more information, refer to the dnf documentation available at

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
package-announce mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure