Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Ubuntu 24.04, USN-7456-1: Twig Denial of Service and Data Exposure

ubuntu
Calendar Grey April 24, 2025
Dist Ubuntu Esm H88
Multiple vulnerabilities found in php-twig may result in service interruptions and unauthorized data access on Ubuntu environments. Act promptly and upgrade!
Several security issues were fixed in Twig.

Summary

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS Summary: Several security issues were fixed in Twig. Software Description: - php-twig: Flexible, fast, and secure template engine for PHP Details: Fabien Potencier discovered that Twig did not run sandbox security checks in some circumstances. An attacker could possibly use this issue to cause a denial of service or execute arbitrary commands. This issue only affected Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2024-45411) Jamie Schouten discovered that Twig could bypass the security policy for an object call. An attacker could possibly use this issue to obtain sensitive information. (CVE-2024-51754)

Topics%20covered

Topics Covered

security advisory denial of service sensitive information php-twig Ubuntu 22.04 Ubuntu 24.04

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS   php-twig                        3.8.0-2ubuntu0.1~esm1                                   Available with Ubuntu Pro Ubuntu 22.04 LTS   php-twig                        3.3.8-2ubuntu4+esm2                                   Available with Ubuntu Pro Ubuntu 20.04 LTS   php-twig                        2.12.5-1ubuntu0.1~esm2                                   Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.

References

  https://ubuntu.com/security/notices/USN-7456-1

  CVE-2024-45411, CVE-2024-51754

Severity
important
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7456-1

Topics%20covered

Topics Covered

security advisory denial of service sensitive information php-twig Ubuntu 22.04 Ubuntu 24.04

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here