Linux ·
Ubuntu · Package update · August 26, 2021
Ubuntu · Package update · August 26, 2021chromium-codecs-ffmpeg-extra 92.0.4515.159-0ubuntu0.18.04.1: chromium-codecs-ffmpeg-extra 92.0.4515.159-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic)
chromium-codecs-ffmpeg-extra 92.0.4515.159-0ubuntu0.18.04.1, released August 26, 2021, fixes 49 CVEs in chromium-codecs-ffmpeg-extra. 2 of them are being exploited (CVE-2021-30563); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now2 on CISA KEVUnsupported product
CVEs closed
49
None rated Critical
Exploited
2
CVE-2021-30563
Highest CVSS
9.6
Base score, 0 to 10
Highest EPSS
0.2038
97th percentile
Priority of the 49 CVEs
Patch now 2
Urgent 0
High 27
Routine 20
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| chromium-codecs-ffmpeg-extra | Ubuntu 18.04.6 LTS (bionic) | 92.0.4515.159-0ubuntu0.18.04.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Patch now | CVE-2021-30563 | Chromium: CVE-2021-30563 Type Confusion in V8 | n/a | 0.0945 | KEVExploited |
| Patch now | CVE-2021-30554 | Chromium: CVE-2021-30554 Use after free in WebGL | n/a | 0.0737 | KEVExploited |
| High | CVE-2021-30598 | Chromium: CVE-2021-30598 Type Confusion in V8 | 8.8 | 0.0700 | None reported |
| High | CVE-2021-30573 | Chromium: CVE-2021-30573 Use after free in GPU | 8.8 | 0.0628 | None reported |
| High | CVE-2021-30599 | Chromium: CVE-2021-30599 Type Confusion in V8 | 8.8 | 0.0542 | None reported |
| High | CVE-2021-30603 | Chromium: CVE-2021-30603 Race in WebAudio | 7.5 | 0.0387 | None reported |
| High | CVE-2021-30590 | Chromium: CVE-2021-30590 Heap buffer overflow in Bookmarks | 8.8 | 0.0282 | None reported |
| High | CVE-2021-30591 | Chromium: CVE-2021-30591 Use after free in File System API | 8.8 | 0.0252 | None reported |
| High | CVE-2021-30604 | Chromium: CVE-2021-30604 Use after free in ANGLE | 8.8 | 0.0252 | None reported |
| High | CVE-2021-30602 | Chromium: CVE-2021-30602 Use after free in WebRTC | 8.8 | 0.0212 | None reported |
| High | CVE-2021-30592 | Chromium: CVE-2021-30592 Out of bounds write in Tab Groups | 8.8 | 0.0200 | None reported |
| High | CVE-2021-30588 | Chromium: CVE-2021-30588 Type Confusion in V8 | 8.8 | 0.0199 | None reported |
| High | CVE-2021-30593 | Chromium: CVE-2021-30593 Out of bounds read in Tab Strip | 8.1 | 0.0195 | None reported |
| High | CVE-2021-30601 | Chromium: CVE-2021-30601 Use after free in Extensions API | 8.8 | 0.0194 | None reported |
| High | CVE-2021-30578 | Chromium: CVE-2021-30578 Uninitialized Use in Media | 8.8 | 0.0174 | None reported |
| High | CVE-2021-30566 | Chromium: CVE-2021-30566 Stack buffer overflow in Printing | 8.8 | 0.0174 | None reported |
| High | CVE-2021-30574 | Chromium: CVE-2021-30574 Use after free in protocol handling | 8.8 | 0.0160 | None reported |
| High | CVE-2021-30575 | Chromium: CVE-2021-30575 Out of bounds read in Autofill | 8.8 | 0.0160 | None reported |
| High | CVE-2021-30572 | Chromium: CVE-2021-30572 Use after free in Autofill | 8.8 | 0.0159 | None reported |
| High | CVE-2021-30579 | Chromium: CVE-2021-30579 Use after free in UI framework | 8.8 | 0.0159 | None reported |
| High | CVE-2021-30568 | Chromium: CVE-2021-30568 Heap buffer overflow in WebGL | 8.8 | 0.0151 | None reported |
| High | CVE-2021-30569 | Chromium: CVE-2021-30569 Use after free in sqlite | 8.8 | 0.0136 | None reported |
| High | CVE-2021-30585 | Chromium: CVE-2021-30585 Use after free in sensor handling | 8.8 | 0.0136 | None reported |
| High | CVE-2021-30576 | Chromium: CVE-2021-30576 Use after free in DevTools | 8.8 | 0.0123 | None reported |
| High | CVE-2021-30581 | Chromium: CVE-2021-30581 Use after free in DevTools | 8.8 | 0.0123 | None reported |
Showing 1 to 25 of 49
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.