Linux · Ubuntu · Package update · November 2, 2021

chromium-browser 68.0.3440.75-0ubuntu0.18.04.1: chromium-browser 68.0.3440.75-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic)

chromium-browser 68.0.3440.75-0ubuntu0.18.04.1, released November 2, 2021, fixes 31 CVEs in chromium-browser. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.

HighUnsupported product
CVEs closed
31
None rated Critical
Exploited
0
None reported
Highest CVSS
6.5
Base score, 0 to 10
Highest EPSS
0.0330
88th percentile

Priority of the 31 CVEs

Patch now 0 Urgent 0 High 3 Routine 28

Fixed package versions

ProductReleaseFixed in
chromium-browserUbuntu 18.04.6 LTS (bionic)68.0.3440.75-0ubuntu0.18.04.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2018-6153 chromium-browser: A precision error in Skia in Google Chrome prior to 68.0.3440.75 allowed a remote attacker who had compromised the re...n/a 0.0159 None reported
High CVE-2018-6156 chromium-browser: Incorect derivation of a packet length in WebRTC in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to...n/a 0.0086 None reported
High CVE-2018-6155 chromium-browser: Incorrect handling of frames in the VP8 parser in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to po...n/a 0.0068 None reported
Routine CVE-2018-6174 chromium-browser: Integer overflows in Swiftshader in Google Chrome prior to 68.0.3440.75 potentially allowed a remote attacker to exec...n/a 0.0330 None reported
Routine CVE-2018-4117 iTunes: An issue was discovered in certain Apple products.6.5 0.0300 None reported
Routine CVE-2018-6164 chromium-browser: Insufficient origin checks for CSS content in Blink in Google Chrome prior to 68.0.3440.75 allowed a remote attacker...n/a 0.0189 None reported
Routine CVE-2018-6162 chromium-browser: Improper deserialization in WebGL in Google Chrome on Mac prior to 68.0.3440.75 allowed a remote attacker to potentia...n/a 0.0160 None reported
Routine CVE-2018-6170 chromium-browser: A bad cast in PDFium in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap cor...n/a 0.0155 None reported
Routine CVE-2018-6165 chromium-browser: Incorrect handling of reloads in Navigation in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to spoof...n/a 0.0150 None reported
Routine CVE-2018-6166 chromium-browser: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote...n/a 0.0144 None reported
Routine CVE-2018-6163 chromium-browser: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote...n/a 0.0140 None reported
Routine CVE-2018-6167 chromium-browser: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote...n/a 0.0140 None reported
Routine CVE-2018-6172 chromium-browser: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote...n/a 0.0140 None reported
Routine CVE-2018-6173 chromium-browser: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote...n/a 0.0140 None reported
Routine CVE-2018-6175 chromium-browser: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote...n/a 0.0140 None reported
Routine CVE-2018-6169 chromium-browser: Lack of timeout on extension install prompt in Extensions in Google Chrome prior to 68.0.3440.75 allowed a remote att...n/a 0.0135 None reported
Routine CVE-2018-6152 chromium-browser: The implementation of the Page.downloadBehavior backend unconditionally marked downloaded files as safe, regardless o...n/a 0.0132 None reported
Routine CVE-2018-6158 chromium-browser: A race condition in Oilpan in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit he...n/a 0.0127 None reported
Routine CVE-2018-6151 chromium-browser: Bad cast in DevTools in Google Chrome on Win, Linux, Mac, Chrome OS prior to 66.0.3359.117 allowed an attacker who co...n/a 0.0121 None reported
Routine CVE-2018-6179 chromium-browser: Insufficient enforcement of file access permission in the activeTab case in Extensions in Google Chrome prior to 68.0...n/a 0.0118 None reported
Routine CVE-2018-6154 chromium-browser: Insufficient data validation in WebGL in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially...n/a 0.0096 None reported
Routine CVE-2018-6178 chromium-browser: Eliding from the wrong side in an infobar in DevTools in Google Chrome prior to 68.0.3440.75 allowed an attacker who...n/a 0.0091 None reported
Routine CVE-2018-6161 chromium-browser: Insufficient policy enforcement in Blink in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to bypass s...n/a 0.0089 None reported
Routine CVE-2018-6177 chromium-browser: Information leak in media engine in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to leak cross-origi...n/a 0.0088 None reported
Routine CVE-2018-6150 chromium-browser: Incorrect handling of CORS in ServiceWorker in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak...n/a 0.0085 None reported
Showing 1 to 25 of 31 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.