chromium-codecs-ffmpeg 90.0.4430.93-0ubuntu0.18.04.1: chromium-codecs-ffmpeg 90.0.4430.93-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic)

chromium-codecs-ffmpeg 90.0.4430.93-0ubuntu0.18.04.1, released April 30, 2021, fixes 12 CVEs in chromium-codecs-ffmpeg. One of them is being exploited (CVE-2021-21224); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEVUnsupported product

CVEs closed

None rated Critical

Exploited

CVE-2021-21224

Highest CVSS

n/a

No CVSS score published

Highest EPSS

0.8417

99th percentile

Priority of the 12 CVEs

Patch now 1
                                Urgent 0
                                High 0
                                Routine 11

Fixed package versions

Product	Release	Fixed in
chromium-codecs-ffmpeg	Ubuntu 18.04.6 LTS (bionic)	90.0.4430.93-0ubuntu0.18.04.1

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Patch now	CVE-2021-21224	Chromium: CVE-2021-21224 Type Confusion in V8	n/a	0.8417	KEVExploited
Routine	CVE-2021-21225	Chromium: CVE-2021-21225 Out of bounds memory access in V8	n/a	0.0663	None reported
Routine	CVE-2021-21222	Chromium: CVE-2021-21222 Heap buffer overflow in V8	n/a	0.0176	None reported
Routine	CVE-2021-21230	Chromium: CVE-2021-21230 Type Confusion in V8	n/a	0.0160	None reported
Routine	CVE-2021-21223	Chromium: CVE-2021-21223 Integer overflow in Mojo	n/a	0.0144	None reported
Routine	CVE-2021-21226	Chromium: CVE-2021-21226 Use after free in navigation	n/a	0.0135	None reported
Routine	CVE-2021-21233	Chromium: CVE-2021-21233 Heap buffer overflow in ANGLE	n/a	0.0133	None reported
Routine	CVE-2021-21227	Chromium: CVE-2021-21227 Insufficient data validation in V8	n/a	0.0119	None reported
Routine	CVE-2021-21231	Chromium: CVE-2021-21231 Insufficient data validation in V8	n/a	0.0114	None reported
Routine	CVE-2021-21232	Chromium: CVE-2021-21232 Use after free in Dev Tools	n/a	0.0110	None reported
Routine	CVE-2021-21228	Chromium: CVE-2021-21228 Insufficient policy enforcement in extensions	n/a	0.0106	None reported
Routine	CVE-2021-21229	Chromium: CVE-2021-21229 Incorrect security UI in downloads	n/a	0.0085	None reported

Also fixes CVE-2021-21224

chromium-browser 90.0.4430.93-0ubuntu0.18.04.1
chromium-browser on Ubuntu 18.04.6 LTS (bionic)
chromium-browser-l10n 90.0.4430.93-0ubuntu0.18.04.1
chromium-browser-l10n on Ubuntu 18.04.6 LTS (bionic)
chromium-chromedriver 90.0.4430.93-0ubuntu0.18.04.1
chromium-chromedriver on Ubuntu 18.04.6 LTS (bionic)
chromium-codecs-ffmpeg-extra 90.0.4430.93-0ubuntu0.18.04.1
chromium-codecs-ffmpeg-extra on Ubuntu 18.04.6 LTS (bionic)

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/linux/ubuntu-bionic-chromium-codecs-ffmpeg-90.0.4430.93-0ubuntu0.18.04.1">chromium-codecs-ffmpeg 90.0.4430.93-0ubuntu0.18.04.1 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.