Linux · 
Ubuntu · Package update · May 20, 2020
Ubuntu · Package update · May 20, 2020chromium-codecs-ffmpeg 81.0.4044.138-0ubuntu0.18.04.1: chromium-codecs-ffmpeg 81.0.4044.138-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic)
chromium-codecs-ffmpeg 81.0.4044.138-0ubuntu0.18.04.1, released May 20, 2020, fixes 4 CVEs in chromium-codecs-ffmpeg. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.
UrgentUnsupported product
CVEs closed
4
1 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0580
93rd percentile
Priority of the 4 CVEs
Patch now 0
Urgent 1
High 0
Routine 3
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| chromium-codecs-ffmpeg | Ubuntu 18.04.6 LTS (bionic) | 81.0.4044.138-0ubuntu0.18.04.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2020-6831 | Firefox ESR: A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. | 9.8 | 0.0580 | None reported |
| Routine | CVE-2020-6464 | chromium-browser: Type confusion in Blink in Google Chrome prior to 81.0.4044.138 allowed a remote attacker to potentially exploit heap... | n/a | 0.0197 | None reported |
| Routine | CVE-2020-6462 | chromium-browser: Use after free in task scheduling in Google Chrome prior to 81.0.4044.129 allowed a remote attacker who had compromis... | n/a | 0.0140 | None reported |
| Routine | CVE-2020-6461 | chromium-browser: Use after free in storage in Google Chrome prior to 81.0.4044.129 allowed a remote attacker who had compromised the r... | n/a | 0.0121 | None reported |
Showing 1 to 4 of 4
1
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.