Debian Linux Security Advisory 5246-1 - Marlon Starkloff discovered that twig, a template engine for PHP, did not correctly enforce sandboxing. This would allow a malicious user to execute arbitrary code.
bafe6fbd63e7ce336ce7f16d95873da98aa675c25a5d71e8b2d0b10a0af1e05a