chromium-codecs-ffmpeg-extra 100.0.4896.127-0ubuntu0.18.04.1: chromium-codecs-ffmpeg-extra 100.0.4896.127-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic)

chromium-codecs-ffmpeg-extra 100.0.4896.127-0ubuntu0.18.04.1, released January 2, 2023, fixes 34 CVEs in chromium-codecs-ffmpeg-extra. One of them is being exploited (CVE-2022-1364); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEVUnsupported product

CVEs closed

2 rated Critical

Exploited

CVE-2022-1364

Highest CVSS

9.6

Base score, 0 to 10

Highest EPSS

0.1706

97th percentile

Priority of the 34 CVEs

Patch now 1
                                Urgent 2
                                High 21
                                Routine 10

Fixed package versions

Product	Release	Fixed in
chromium-codecs-ffmpeg-extra	Ubuntu 18.04.6 LTS (bionic)	100.0.4896.127-0ubuntu0.18.04.1

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Patch now	CVE-2022-1364	Chromium: CVE-2022-1364: Type Confusion in V8	8.8	0.1392	KEVExploited
Urgent	CVE-2022-1309	Chromium: CVE-2022-1309 Insufficient policy enforcement in developer tools	9.6	0.0089	None reported
Urgent	CVE-2022-1312	Chromium: CVE-2022-1312 Use after free in storage	9.6	0.0064	None reported
High	CVE-2022-1232	Chromium: CVE-2022-1232 Type Confusion in V8	8.8	0.1706	None reported
High	CVE-2022-1134	Chromium: CVE-2022-1134 Type Confusion in V8	8.8	0.0186	None reported
High	CVE-2022-1310	Chromium: CVE-2022-1310 Use after free in regular expressions	8.8	0.0107	None reported
High	CVE-2022-1308	Chromium: CVE-2022-1308 Use after free in BFCache	8.8	0.0098	None reported
High	CVE-2022-1314	Chromium: CVE-2022-1314 Type Confusion in V8	8.8	0.0097	None reported
High	CVE-2022-1125	Chromium: CVE-2022-1125 Use after free in Portals	8.8	0.0093	None reported
High	CVE-2022-1127	Chromium: CVE-2022-1127 Use after free in QR Code Generator	8.8	0.0092	None reported
High	CVE-2022-1131	Chromium: CVE-2022-1131 Use after free in Cast UI	8.8	0.0091	None reported
High	CVE-2022-1133	Chromium: CVE-2022-1133 Use after free in WebRTC	8.8	0.0091	None reported
High	CVE-2022-1313	Chromium: CVE-2022-1313 Use after free in tab groups	8.8	0.0091	None reported
High	CVE-2022-1305	Chromium: CVE-2022-1305 Use after free in storage	8.8	0.0090	None reported
High	CVE-2022-1311	chromium: Use after free in shell in Google Chrome on ChromeOS prior to 100.0.4896.88 allowed a remote attacker to potentially...	8.8	0.0090	None reported
High	CVE-2022-1135	Chromium: CVE-2022-1135 Use after free in Shopping Cart	8.8	0.0089	None reported
High	CVE-2022-1143	Chromium: CVE-2022-1143 Heap buffer overflow in WebUI	8.8	0.0089	None reported
High	CVE-2022-1141	chromium: Use after free in File Manager in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user...	8.8	0.0086	None reported
High	CVE-2022-1130	Chromium: CVE-2022-1130 Insufficient validation of untrusted input in WebOTP	8.1	0.0085	None reported
High	CVE-2022-1142	chromium: Heap buffer overflow in WebUI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user...	8.8	0.0081	None reported
High	CVE-2022-2399	chromium: Use after free in WebGPU in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit hea...	8.8	0.0074	None reported
High	CVE-2022-1144	chromium: Use after free in WebUI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to eng...	8.8	0.0073	None reported
High	CVE-2022-1145	Chromium: CVE-2022-1145 Use after free in Extensions	7.5	0.0068	None reported
High	CVE-2022-1136	Chromium: CVE-2022-1136 Use after free in Tab Strip	8.8	0.0064	None reported
Routine	CVE-2022-1139	Chromium: CVE-2022-1139 Inappropriate implementation in Background Fetch API	6.5	0.0093	None reported

Also fixes CVE-2022-1364

Microsoft Edge Beta 127.0.2651.8
Microsoft Edge Beta
Microsoft Edge Dev 127.0.2651.8
Microsoft Edge Dev
chromium-browser 100.0.4896.127-0ubuntu0.18.04.1
chromium-browser on Ubuntu 18.04.6 LTS (bionic)
chromium-browser-l10n 100.0.4896.127-0ubuntu0.18.04.1
chromium-browser-l10n on Ubuntu 18.04.6 LTS (bionic)
chromium-chromedriver 100.0.4896.127-0ubuntu0.18.04.1
chromium-chromedriver on Ubuntu 18.04.6 LTS (bionic)
chromium-codecs-ffmpeg 100.0.4896.127-0ubuntu0.18.04.1
chromium-codecs-ffmpeg on Ubuntu 18.04.6 LTS (bionic)
DEBIAN-CVE-2022-1364
chromium on Debian 12.15 (bookworm), Debian 13.5 (trixie), Debian 14
DSA-5121-1
chromium on Debian 11.6 (bullseye)

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/linux/ubuntu-bionic-chromium-codecs-ffmpeg-extra-100.0.4896.127-0ubuntu0.18.04.1">chromium-codecs-ffmpeg-extra 100.0.4896.127-0ubuntu0.18.04.1 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.