ALT-PU-2020-2334-1
Package libwebkitgtk4 updated to version 2.28.3-alt1 for branch sisyphus in task 254707.
Closed vulnerabilities
Published: 2020-07-14
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2020-13753
The bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed to properly block access to CLONE_NEWUSER and the TIOCSTI ioctl. CLONE_NEWUSER could potentially be used to confuse xdg-desktop-portal, which allows access outside the sandbox. TIOCSTI can be used to directly execute commands outside the sandbox by writing to the controlling terminal's input buffer, similar to CVE-2017-5226.
Severity: CRITICAL (10.0)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
References:
- openSUSE-SU-2020:1064
- FEDORA-2020-d2736ee493
- GLSA-202007-11
- https://trac.webkit.org/changeset/262368/webkit
- USN-4422-1
- DSA-4724
- https://www.openwall.com/lists/oss-security/2020/07/10/1
- openSUSE-SU-2020:1064
- https://www.openwall.com/lists/oss-security/2020/07/10/1
- DSA-4724
- USN-4422-1
- https://trac.webkit.org/changeset/262368/webkit
- GLSA-202007-11
- FEDORA-2020-d2736ee493