Linux ·
Ubuntu · Package update · January 2, 2023
Ubuntu · Package update · January 2, 2023chromium-codecs-ffmpeg 91.0.4472.77-0ubuntu0.18.04.1: chromium-codecs-ffmpeg 91.0.4472.77-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic)
chromium-codecs-ffmpeg 91.0.4472.77-0ubuntu0.18.04.1, released January 2, 2023, fixes 36 CVEs in chromium-codecs-ffmpeg. One of them is being exploited (CVE-2021-30533); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now1 on CISA KEVUnsupported product
CVEs closed
36
None rated Critical
Exploited
1
CVE-2021-30533
Highest CVSS
8.8
Base score, 0 to 10
Highest EPSS
0.1674
97th percentile
Priority of the 36 CVEs
Patch now 1
Urgent 0
High 1
Routine 34
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| chromium-codecs-ffmpeg | Ubuntu 18.04.6 LTS (bionic) | 91.0.4472.77-0ubuntu0.18.04.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Patch now | CVE-2021-30533 | Chromium: CVE-2021-30533 Insufficient policy enforcement in PopupBlocker | n/a | 0.1674 | KEVExploited |
| High | CVE-2021-30558 | chromium: chromium - security update | 8.8 | 0.1149 | None reported |
| Routine | CVE-2021-30538 | Chromium: CVE-2021-30538 Insufficient policy enforcement in content security policy | n/a | 0.1573 | None reported |
| Routine | CVE-2021-30517 | Chromium: CVE-2021-30517 Type Confusion in V8 | n/a | 0.0252 | None reported |
| Routine | CVE-2021-30513 | Chromium: CVE-2021-30513 Type Confusion in V8 | n/a | 0.0196 | None reported |
| Routine | CVE-2021-30531 | Chromium: CVE-2021-30531 Insufficient policy enforcement in Content Security Policy | n/a | 0.0174 | None reported |
| Routine | CVE-2021-30540 | Chromium: CVE-2021-30540 Incorrect security UI in payments | n/a | 0.0144 | None reported |
| Routine | CVE-2021-30522 | Chromium: CVE-2021-30522 Use after free in WebAudio | n/a | 0.0143 | None reported |
| Routine | CVE-2021-30528 | Chromium: CVE-2021-30528 Use after free in WebAuthentication | n/a | 0.0135 | None reported |
| Routine | CVE-2021-30521 | Chromium: CVE-2021-30521 Heap buffer overflow in Autofill | n/a | 0.0133 | None reported |
| Routine | CVE-2021-30516 | Chromium: CVE-2021-30516 Heap buffer overflow in History | n/a | 0.0132 | None reported |
| Routine | CVE-2021-30518 | Chromium: CVE-2021-30518 Heap buffer overflow in Reader Mode | n/a | 0.0132 | None reported |
| Routine | CVE-2021-30539 | Chromium: CVE-2021-30539 Insufficient policy enforcement in content security policy | n/a | 0.0128 | None reported |
| Routine | CVE-2021-30534 | Chromium: CVE-2021-30534 Insufficient policy enforcement in iFrameSandbox | n/a | 0.0122 | None reported |
| Routine | CVE-2021-30512 | Chromium: CVE-2021-30512 Use after free in Notifications | n/a | 0.0121 | None reported |
| Routine | CVE-2021-30536 | Chromium: CVE-2021-30536 Out of bounds read in V8 | n/a | 0.0120 | None reported |
| Routine | CVE-2021-30510 | Chromium: CVE-2021-30510 Race in Aura | n/a | 0.0119 | None reported |
| Routine | CVE-2021-30530 | Chromium: CVE-2021-30530 Out of bounds memory access in WebAudio | n/a | 0.0118 | None reported |
| Routine | CVE-2021-30515 | Chromium: CVE-2021-30515 Use after free in File API | n/a | 0.0118 | None reported |
| Routine | CVE-2021-30532 | Chromium: CVE-2021-30532 Insufficient policy enforcement in Content Security Policy | n/a | 0.0117 | None reported |
| Routine | CVE-2021-30507 | Chromium: CVE-2021-30507 Inappropriate implementation in Offline | n/a | 0.0114 | None reported |
| Routine | CVE-2021-30537 | Chromium: CVE-2021-30537 Insufficient policy enforcement in cookies | n/a | 0.0114 | None reported |
| Routine | CVE-2021-30535 | Chromium: CVE-2021-30535 Double free in ICU | n/a | 0.0113 | None reported |
| Routine | CVE-2021-30523 | Chromium: CVE-2021-30523 Use after free in WebRTC | n/a | 0.0110 | None reported |
| Routine | CVE-2021-30514 | Chromium: CVE-2021-30514 Use after free in Autofill | n/a | 0.0109 | None reported |
Showing 1 to 25 of 36
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.