chromium-codecs-ffmpeg 80.0.3987.149-0ubuntu0.18.04.1: chromium-codecs-ffmpeg 80.0.3987.149-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic)

chromium-codecs-ffmpeg 80.0.3987.149-0ubuntu0.18.04.1, released March 23, 2020, fixes 16 CVEs in chromium-codecs-ffmpeg. One of them is being exploited (CVE-2020-6418); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEVUnsupported product

CVEs closed

None rated Critical

Exploited

CVE-2020-6418

Highest CVSS

8.8

Base score, 0 to 10

Highest EPSS

0.7881

99th percentile

Priority of the 16 CVEs

Patch now 1
                                Urgent 0
                                High 1
                                Routine 14

Fixed package versions

Product	Release	Fixed in
chromium-codecs-ffmpeg	Ubuntu 18.04.6 LTS (bionic)	80.0.3987.149-0ubuntu0.18.04.1

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Patch now	CVE-2020-6418	chromium-browser: Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap co...	n/a	0.7881	KEVExploited
High	CVE-2020-10531	Node.js 10: An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1.	8.8	0.0267	None reported
Routine	CVE-2020-6383	chromium-browser: Type confusion in V8 in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap co...	n/a	0.0638	None reported
Routine	CVE-2020-6424	chromium-browser: Use after free in media in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap...	n/a	0.0350	None reported
Routine	CVE-2019-20503	xul-ext-lightning: usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.	6.5	0.0314	None reported
Routine	CVE-2020-6426	chromium-browser: Inappropriate implementation in V8 in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially e...	n/a	0.0286	None reported
Routine	CVE-2020-6449	chromium-browser: Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap...	n/a	0.0266	None reported
Routine	CVE-2020-6427	chromium-browser: Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap...	n/a	0.0245	None reported
Routine	CVE-2020-6422	chromium-browser: Use after free in WebGL in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap...	n/a	0.0235	None reported
Routine	CVE-2020-6428	chromium-browser: Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap...	n/a	0.0231	None reported
Routine	CVE-2020-6429	chromium-browser: Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap...	n/a	0.0231	None reported
Routine	CVE-2020-6407	chromium-browser: Out of bounds memory access in streams in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potential...	n/a	0.0178	None reported
Routine	CVE-2020-6386	chromium-browser: Use after free in speech in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit hea...	n/a	0.0170	None reported
Routine	CVE-2020-6384	chromium-browser: Use after free in WebAudio in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit h...	n/a	0.0168	None reported
Routine	CVE-2020-6420	chromium-browser: Insufficient policy enforcement in media in Google Chrome prior to 80.0.3987.132 allowed a remote attacker to bypass...	n/a	0.0133	None reported
Routine	CVE-2020-6425	chromium-browser: Insufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.149 allowed an attacker who convinc...	n/a	0.0118	None reported

Also fixes CVE-2020-6418

chromium-browser 80.0.3987.149-0ubuntu0.18.04.1
chromium-browser on Ubuntu 18.04.6 LTS (bionic)
chromium-browser-l10n 80.0.3987.149-0ubuntu0.18.04.1
chromium-browser-l10n on Ubuntu 18.04.6 LTS (bionic)
chromium-chromedriver 80.0.3987.149-0ubuntu0.18.04.1
chromium-chromedriver on Ubuntu 18.04.6 LTS (bionic)
chromium-codecs-ffmpeg-extra 80.0.3987.149-0ubuntu0.18.04.1
chromium-codecs-ffmpeg-extra on Ubuntu 18.04.6 LTS (bionic)

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/linux/ubuntu-bionic-chromium-codecs-ffmpeg-80.0.3987.149-0ubuntu0.18.04.1">chromium-codecs-ffmpeg 80.0.3987.149-0ubuntu0.18.04.1 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.