chromium-codecs-ffmpeg-extra 78.0.3904.70-0ubuntu0.18.04.2: chromium-codecs-ffmpeg-extra 78.0.3904.70-0ubuntu0.18.04.2 for Ubuntu 18.04.6 LTS (bionic)

chromium-codecs-ffmpeg-extra 78.0.3904.70-0ubuntu0.18.04.2, released November 25, 2019, fixes 26 CVEs in chromium-codecs-ffmpeg-extra. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.

HighUnsupported product

CVEs closed

None rated Critical

Exploited

None reported

Highest CVSS

7.5

Base score, 0 to 10

Highest EPSS

0.0664

93rd percentile

Priority of the 26 CVEs

Patch now 0
                                Urgent 0
                                High 1
                                Routine 25

Fixed package versions

Product	Release	Fixed in
chromium-codecs-ffmpeg-extra	Ubuntu 18.04.6 LTS (bionic)	78.0.3904.70-0ubuntu0.18.04.2

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2019-15903	Python 3.6 and 2 others: Out-of-bounds Read	7.5	0.0664	None reported
Routine	CVE-2019-13693	chromium-browser: Use after free in IndexedDB in Google Chrome prior to 77.0.3865.120 allowed a remote attacker who had compromised the...	n/a	0.0124	None reported
Routine	CVE-2019-13719	chromium-browser: Incorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to hide se...	n/a	0.0121	None reported
Routine	CVE-2019-13700	chromium-browser: Out of bounds memory access in the gamepad API in Google Chrome prior to 78.0.3904.70 allowed a remote attacker who h...	n/a	0.0118	None reported
Routine	CVE-2019-13711	chromium-browser: Insufficient policy enforcement in JavaScript in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to lea...	n/a	0.0118	None reported
Routine	CVE-2019-13713	chromium-browser: Insufficient policy enforcement in JavaScript in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to lea...	n/a	0.0114	None reported
Routine	CVE-2019-13699	chromium-browser: Use after free in media in Google Chrome prior to 78.0.3904.70 allowed a remote attacker who had compromised the rend...	n/a	0.0109	None reported
Routine	CVE-2019-13717	chromium-browser: Incorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to hide se...	n/a	0.0104	None reported
Routine	CVE-2019-13709	chromium-browser: Insufficient policy enforcement in downloads in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypa...	n/a	0.0099	None reported
Routine	CVE-2019-13695	chromium-browser: Use after free in audio in Google Chrome on Android prior to 77.0.3865.120 allowed a remote attacker to potentially e...	n/a	0.0097	None reported
Routine	CVE-2019-13710	chromium-browser: Insufficient validation of untrusted input in downloads in Google Chrome prior to 78.0.3904.70 allowed a remote attac...	n/a	0.0096	None reported
Routine	CVE-2019-13704	chromium-browser: Insufficient policy enforcement in navigation in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to byp...	n/a	0.0093	None reported
Routine	CVE-2019-13716	chromium-browser: Insufficient policy enforcement in service workers in Google Chrome prior to 78.0.3904.70 allowed a remote attacker t...	n/a	0.0093	None reported
Routine	CVE-2019-13701	chromium-browser: Incorrect implementation in navigation in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to spoof the...	n/a	0.0092	None reported
Routine	CVE-2019-13703	chromium-browser: Insufficient policy enforcement in the Omnibox in Google Chrome on Android prior to 78.0.3904.70 allowed a remote att...	n/a	0.0092	None reported
Routine	CVE-2019-13708	chromium-browser: Inappropriate implementation in navigation in Google Chrome on iOS prior to 78.0.3904.70 allowed a remote attacker to...	n/a	0.0092	None reported
Routine	CVE-2019-13694	chromium-browser: Use after free in WebRTC in Google Chrome prior to 77.0.3865.120 allowed a remote attacker to potentially exploit hea...	n/a	0.0091	None reported
Routine	CVE-2019-13718	chromium-browser: Insufficient data validation in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to perform d...	n/a	0.0088	None reported
Routine	CVE-2019-13715	chromium-browser: Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote attacke...	n/a	0.0085	None reported
Routine	CVE-2019-13714	chromium-browser: Insufficient validation of untrusted input in Color Enhancer extension in Google Chrome prior to 78.0.3904.70 allowed...	n/a	0.0083	None reported
Routine	CVE-2019-13696	chromium-browser: Use after free in JavaScript in Google Chrome prior to 77.0.3865.120 allowed a remote attacker to potentially exploit...	n/a	0.0079	None reported
Routine	CVE-2019-13706	chromium-browser: Out of bounds memory access in PDFium in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to potentially...	n/a	0.0077	None reported
Routine	CVE-2019-13697	chromium-browser: Insufficient policy enforcement in performance APIs in Google Chrome prior to 77.0.3865.120 allowed a remote attacker...	n/a	0.0077	None reported
Routine	CVE-2019-13705	chromium-browser: Insufficient policy enforcement in extensions in Google Chrome prior to 78.0.3904.70 allowed an attacker who convince...	n/a	0.0058	None reported
Routine	CVE-2019-13702	chromium-browser: Inappropriate implementation in installer in Google Chrome on Windows prior to 78.0.3904.70 allowed a local attacker...	n/a	0.0053	None reported

Also fixes CVE-2019-15903

firefox 70.0+build2-0ubuntu0.18.04.1
firefox on Ubuntu 18.04.6 LTS (bionic)
firefox-geckodriver 70.0+build2-0ubuntu0.18.04.1
firefox-geckodriver on Ubuntu 18.04.6 LTS (bionic)
firefox-mozsymbols 70.0+build2-0ubuntu0.18.04.1
firefox-mozsymbols on Ubuntu 18.04.6 LTS (bionic)
firefox 70.0+build2-0ubuntu1
firefox on Ubuntu 20.04 LTS (focal)
firefox-geckodriver 70.0+build2-0ubuntu1
firefox-geckodriver on Ubuntu 20.04 LTS (focal)
firefox-mozsymbols 70.0+build2-0ubuntu1
firefox-mozsymbols on Ubuntu 20.04 LTS (focal)
ELSA-2019-3237
thunderbird on ol 8
RHSA-2019:3237
thunderbird on RHEL 8

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/linux/ubuntu-bionic-chromium-codecs-ffmpeg-extra-78.0.3904.70-0ubuntu0.18.04.2">chromium-codecs-ffmpeg-extra 78.0.3904.70-0ubuntu0.18.04.2 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.