Linux · 
Ubuntu · Package update · January 8, 2021
Ubuntu · Package update · January 8, 2021chromium-codecs-ffmpeg 87.0.4280.66-0ubuntu0.18.04.1: chromium-codecs-ffmpeg 87.0.4280.66-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic)
chromium-codecs-ffmpeg 87.0.4280.66-0ubuntu0.18.04.1, released January 8, 2021, fixes 22 CVEs in chromium-codecs-ffmpeg. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.
RoutineUnsupported product
CVEs closed
22
None rated Critical
Exploited
0
None reported
Highest CVSS
4.3
Base score, 0 to 10
Highest EPSS
0.0257
85th percentile
Priority of the 22 CVEs
Patch now 0
Urgent 0
High 0
Routine 22
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| chromium-codecs-ffmpeg | Ubuntu 18.04.6 LTS (bionic) | 87.0.4280.66-0ubuntu0.18.04.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Routine | CVE-2020-16012 | Firefox ESR and 1 other: Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote… | 4.3 | 0.0257 | None reported |
| Routine | CVE-2020-16025 | chromium-browser: Heap buffer overflow in clipboard in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromise... | n/a | 0.0233 | None reported |
| Routine | CVE-2020-16024 | chromium-browser: Heap buffer overflow in UI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the r... | n/a | 0.0195 | None reported |
| Routine | CVE-2020-16014 | chromium-browser: Use after free in PPAPI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the rend... | n/a | 0.0114 | None reported |
| Routine | CVE-2020-16015 | chromium-browser: Insufficient data validation in WASM in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially... | n/a | 0.0114 | None reported |
| Routine | CVE-2020-16018 | chromium-browser: Use after free in payments in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the r... | n/a | 0.0114 | None reported |
| Routine | CVE-2020-16026 | chromium-browser: Use after free in WebRTC in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap... | n/a | 0.0114 | None reported |
| Routine | CVE-2020-16029 | chromium-browser: Inappropriate implementation in PDFium in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to bypass nav... | n/a | 0.0108 | None reported |
| Routine | CVE-2020-16023 | chromium-browser: Use after free in WebCodecs in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit h... | n/a | 0.0103 | None reported |
| Routine | CVE-2020-16035 | chromium-browser: Insufficient data validation in cros-disks in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attack... | n/a | 0.0101 | None reported |
| Routine | CVE-2020-16027 | chromium-browser: Insufficient policy enforcement in developer tools in Google Chrome prior to 87.0.4280.66 allowed an attacker who con... | n/a | 0.0096 | None reported |
| Routine | CVE-2020-16028 | chromium-browser: Heap buffer overflow in WebRTC in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploi... | n/a | 0.0094 | None reported |
| Routine | CVE-2020-16019 | chromium-browser: Inappropriate implementation in filesystem in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attack... | n/a | 0.0088 | None reported |
| Routine | CVE-2020-16020 | chromium-browser: Inappropriate implementation in cryptohome in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attack... | n/a | 0.0087 | None reported |
| Routine | CVE-2020-16022 | chromium-browser: Insufficient policy enforcement in networking in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to pot... | n/a | 0.0084 | None reported |
| Routine | CVE-2020-16033 | chromium-browser: Inappropriate implementation in WebUSB in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof secu... | n/a | 0.0082 | None reported |
| Routine | CVE-2020-16036 | chromium-browser: Inappropriate implementation in cookies in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to bypass co... | n/a | 0.0077 | None reported |
| Routine | CVE-2020-16030 | chromium-browser: Insufficient data validation in Blink in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to inject arbi... | n/a | 0.0075 | None reported |
| Routine | CVE-2020-16031 | chromium-chromedriver: Insufficient data validation in UI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof the cont... | n/a | 0.0070 | None reported |
| Routine | CVE-2020-16032 | chromium-browser: Insufficient data validation in sharing in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof the... | n/a | 0.0066 | None reported |
| Routine | CVE-2020-16021 | chromium-browser: Race in image burner in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised... | n/a | 0.0064 | None reported |
| Routine | CVE-2020-16034 | chromium-browser: Inappropriate implementation in WebRTC in Google Chrome prior to 87.0.4280.66 allowed a local attacker to bypass poli... | n/a | 0.0057 | None reported |
Showing 1 to 22 of 22
1
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.