Linux · Ubuntu · Package update · October 8, 2021

chromium-codecs-ffmpeg 94.0.4606.71-0ubuntu0.18.04.1: chromium-codecs-ffmpeg 94.0.4606.71-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic)

chromium-codecs-ffmpeg 94.0.4606.71-0ubuntu0.18.04.1, released October 8, 2021, fixes 28 CVEs in chromium-codecs-ffmpeg. 5 of them are being exploited (CVE-2021-30632); 5 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now5 on CISA KEVUnsupported product
CVEs closed
28
None rated Critical
Exploited
5
CVE-2021-30632
Highest CVSS
9.6
Base score, 0 to 10
Highest EPSS
0.6319
99th percentile

Priority of the 28 CVEs

Patch now 5 Urgent 0 High 14 Routine 9

Fixed package versions

ProductReleaseFixed in
chromium-codecs-ffmpegUbuntu 18.04.6 LTS (bionic)94.0.4606.71-0ubuntu0.18.04.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Patch now CVE-2021-30632 Chromium: CVE-2021-30632 Out of bounds write in V88.8 0.6319 KEVExploited
Patch now CVE-2021-37975 Chromium: CVE-2021-37975 Use after free in V88.8 0.3489 KEVExploited
Patch now CVE-2021-30633 Chromium: CVE-2021-30633 Use after free in Indexed DB API9.6 0.3318 KEVExploited
Patch now CVE-2021-37976 Chromium: CVE-2021-37976 Information leak in core6.5 0.1990 KEVExploited
Patch now CVE-2021-37973 Chromium: CVE-2021-37973 Use after free in Portals9.6 0.1174 KEVExploited
High CVE-2021-30625 Chromium: CVE-2021-30625 Use after free in Selection API8.8 0.1013 None reported
High CVE-2021-37972 Chromium: CVE-2021-37972 Out of bounds read in libjpeg-turbo8.8 0.0179 None reported
High CVE-2021-37970 Chromium: CVE-2021-37970 Use after free in File System API8.8 0.0145 None reported
High CVE-2021-37974 Chromium: CVE-2021-37974 Use after free in Safe Browsing8.8 0.0135 None reported
High CVE-2021-37961 Chromium: CVE-2021-37961 Use after free in Tab Strip8.8 0.0132 None reported
High CVE-2021-37962 Chromium: CVE-2021-37962 Use after free in Performance Manager8.8 0.0132 None reported
High CVE-2021-37956 Chromium: CVE-2021-37956 Use after free in Offline use8.8 0.0125 None reported
High CVE-2021-37957 Chromium: CVE-2021-37957 Use after free in WebGPU8.8 0.0125 None reported
High CVE-2021-30626 Chromium: CVE-2021-30626 Out of bounds memory access in ANGLE8.8 0.0101 None reported
High CVE-2021-30628 Chromium: CVE-2021-30628 Stack buffer overflow in ANGLE8.8 0.0098 None reported
High CVE-2021-37969 Chromium: CVE-2021-37969 Inappropriate implementation in Google Updater7.8 0.0095 None reported
High CVE-2021-37959 Chromium: CVE-2021-37959 Use after free in Task Manager8.8 0.0094 None reported
High CVE-2021-30627 Chromium: CVE-2021-30627 Type Confusion in Blink layout8.8 0.0091 None reported
High CVE-2021-30629 Chromium: CVE-2021-30629 Use after free in Permissions8.8 0.0088 None reported
Routine CVE-2021-37968 Chromium: CVE-2021-37968 Inappropriate implementation in Background Fetch API4.3 0.0128 None reported
Routine CVE-2021-37971 Chromium: CVE-2021-37971 Incorrect security UI in Web Browser UI4.3 0.0126 None reported
Routine CVE-2021-37965 Chromium: CVE-2021-37965 Inappropriate implementation in Background Fetch API4.3 0.0121 None reported
Routine CVE-2021-37963 Chromium: CVE-2021-37963 Side-channel information leakage in DevTools4.3 0.0115 None reported
Routine CVE-2021-37958 Chromium: CVE-2021-37958 Inappropriate implementation in Navigation5.4 0.0099 None reported
Routine CVE-2021-37967 Chromium: CVE-2021-37967 Inappropriate implementation in Background Fetch API4.3 0.0080 None reported
Showing 1 to 25 of 28 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.