CVE:CVE-2020-13753
CNNVD:CNNVD-202007-572
WebKitGTK是WebKit渲染引擎的全功能端口，适用于需要任何类型的Web集成的项目，包括混合HTML / CSS应用程序到成熟的Web浏览器。它提供WebKit的全部功能，适用于从台式计算机到手机，平板电脑和电视等嵌入式系统的各种系统。
WebKitGTK 2.28.3之前版本和WPE WebKit 2.28.3之前版本中的bubblewrap沙箱存在安全漏洞，该漏洞源于程序没有正确阻止对CLONE_NEWUSER和TIOCSTI ioctl的访问。攻击者可利用该漏洞在沙箱外部执行命令。
solution:Upgrade webkitgtk webkitgtk to a higher version than 2.28.3,and avoid the version (,2.28.3); Upgrade wpewebkit wpe_webkit to a higher version than 2.28.3,and avoid the version (,2.28.3); Upgrade fedoraproject fedora to a higher version than 31,and avoid the version 31; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0; Upgrade canonical ubuntu_linux to a higher version than 18.04,19.10,20.04,and avoid the version 18.04,19.10,20.04; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1