Linux · 
Ubuntu · Package update · February 7, 2018
Ubuntu · Package update · February 7, 2018chromium-codecs-ffmpeg-extra 62.0.3202.62-0ubuntu0.17.10.1380: chromium-codecs-ffmpeg-extra 62.0.3202.62-0ubuntu0.17.10.1380 for Ubuntu 18.04.6 LTS (bionic)
chromium-codecs-ffmpeg-extra 62.0.3202.62-0ubuntu0.17.10.1380, released February 7, 2018, fixes 20 CVEs in chromium-codecs-ffmpeg-extra. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.
RoutineUnsupported product
CVEs closed
20
None rated Critical
Exploited
0
None reported
Highest CVSS
n/a
No CVSS score published
Highest EPSS
0.0515
92nd percentile
Priority of the 20 CVEs
Patch now 0
Urgent 0
High 0
Routine 20
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| chromium-codecs-ffmpeg-extra | Ubuntu 18.04.6 LTS (bionic) | 62.0.3202.62-0ubuntu0.17.10.1380 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Routine | CVE-2017-5124 | chromium-browser: Incorrect application of sandboxing in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to inje... | n/a | 0.0515 | None reported |
| Routine | CVE-2017-5130 | chromium-browser: An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other... | n/a | 0.0271 | None reported |
| Routine | CVE-2017-5133 | chromium-browser: Off-by-one read/write on the heap in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to corrup... | n/a | 0.0196 | None reported |
| Routine | CVE-2017-15394 | chromium-browser: Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to per... | n/a | 0.0185 | None reported |
| Routine | CVE-2017-5125 | chromium-codecs-ffmpeg: Heap buffer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit... | n/a | 0.0170 | None reported |
| Routine | CVE-2017-15388 | chromium-browser: Iteration through non-finite points in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perfo... | n/a | 0.0164 | None reported |
| Routine | CVE-2017-5127 | chromium-browser: Use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap... | n/a | 0.0164 | None reported |
| Routine | CVE-2017-5132 | chromium-browser: Inappropriate implementation in V8 in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially ex... | n/a | 0.0156 | None reported |
| Routine | CVE-2017-5128 | chromium-browser: Heap buffer overflow in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit... | n/a | 0.0156 | None reported |
| Routine | CVE-2017-15386 | chromium-browser: Incorrect implementation in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the conte... | n/a | 0.0152 | None reported |
| Routine | CVE-2017-5129 | chromium-browser: A use after free in WebAudio in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an... | n/a | 0.0143 | None reported |
| Routine | CVE-2017-15387 | chromium-browser: Insufficient enforcement of Content Security Policy in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote... | n/a | 0.0138 | None reported |
| Routine | CVE-2017-15393 | chromium-browser: Insufficient Policy Enforcement in Devtools remote debugging in Google Chrome prior to 62.0.3202.62 allowed a remote... | n/a | 0.0136 | None reported |
| Routine | CVE-2017-5131 | chromium-browser: An integer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit h... | n/a | 0.0136 | None reported |
| Routine | CVE-2017-5126 | chromium-browser: A use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit he... | n/a | 0.0134 | None reported |
| Routine | CVE-2017-15389 | chromium-browser: An insufficient watchdog timer in navigation in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoo... | n/a | 0.0131 | None reported |
| Routine | CVE-2017-15391 | chromium-browser: Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to acc... | n/a | 0.0131 | None reported |
| Routine | CVE-2017-15395 | chromium-browser: A use after free in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit hea... | n/a | 0.0126 | None reported |
| Routine | CVE-2017-15390 | chromium-browser: Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perfor... | n/a | 0.0124 | None reported |
| Routine | CVE-2017-15392 | chromium-browser: Insufficient data validation in V8 in Google Chrome prior to 62.0.3202.62 allowed an attacker who can write to the Wi... | n/a | 0.0079 | None reported |
Showing 1 to 20 of 20
1
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.