chromium-codecs-ffmpeg-extra 66.0.3359.139-0ubuntu0.18.04.3: chromium-codecs-ffmpeg-extra 66.0.3359.139-0ubuntu0.18.04.3 for Ubuntu 18.04.6 LTS (bionic)

chromium-codecs-ffmpeg-extra 66.0.3359.139-0ubuntu0.18.04.3, released June 27, 2019, fixes 34 CVEs in chromium-codecs-ffmpeg-extra. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.

RoutineUnsupported product

CVEs closed

None rated Critical

Exploited

None reported

Highest CVSS

n/a

No CVSS score published

Highest EPSS

0.0919

95th percentile

Priority of the 34 CVEs

Patch now 0
                                Urgent 0
                                High 0
                                Routine 34

Fixed package versions

Product	Release	Fixed in
chromium-codecs-ffmpeg-extra	Ubuntu 18.04.6 LTS (bionic)	66.0.3359.139-0ubuntu0.18.04.3

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Routine	CVE-2018-6092	chromium-browser: An integer overflow on 32-bit systems in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacke...	n/a	0.0919	None reported
Routine	CVE-2018-6085	chromium-browser: Re-entry of a destructor in Networking Disk Cache in Google Chrome prior to 66.0.3359.117 allowed a remote attacker t...	n/a	0.0356	None reported
Routine	CVE-2018-6087	chromium-browser: A use-after-free in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrar...	n/a	0.0345	None reported
Routine	CVE-2018-6086	chromium-browser: A double-eviction in the Incognito mode cache that lead to a user-after-free in Networking Disk Cache in Google Chrom...	n/a	0.0335	None reported
Routine	CVE-2018-6090	chromium-browser: An integer overflow that lead to a heap buffer-overflow in Skia in Google Chrome prior to 66.0.3359.117 allowed a rem...	n/a	0.0327	None reported
Routine	CVE-2018-6101	chromium-browser: A lack of host validation in DevTools in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute ar...	n/a	0.0266	None reported
Routine	CVE-2018-6111	chromium-browser: An object lifetime issue in the developer tools network handler in Google Chrome prior to 66.0.3359.117 allowed a loc...	n/a	0.0258	None reported
Routine	CVE-2018-6088	chromium-browser: An iterator-invalidation bug in PDFium in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute a...	n/a	0.0242	None reported
Routine	CVE-2018-6091	chromium-browser: Service Workers can intercept any request made by an <embed> or <object> tag in Fetch API in Google Chrom...	n/a	0.0214	None reported
Routine	CVE-2018-6117	chromium-browser: Confusing settings in Autofill in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to obtain potentiall...	n/a	0.0191	None reported
Routine	CVE-2018-6118	chromium-browser: A double-eviction in the Incognito mode cache that lead to a user-after-free in cache in Google Chrome prior to 66.0....	n/a	0.0191	None reported
Routine	CVE-2018-6106	chromium-browser: An asynchronous generator may return an incorrect state in V8 in Google Chrome prior to 66.0.3359.117 allowing a remo...	n/a	0.0172	None reported
Routine	CVE-2018-6094	chromium-browser: Inline metadata in GarbageCollection in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentially...	n/a	0.0162	None reported
Routine	CVE-2018-6089	chromium-browser: A lack of CORS checks, after a Service Worker redirected to a cross-origin PDF, in Service Worker in Google Chrome pr...	n/a	0.0160	None reported
Routine	CVE-2018-6093	chromium-browser: Insufficient origin checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-o...	n/a	0.0160	None reported
Routine	CVE-2018-6099	chromium-browser: A lack of CORS checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak limited cros...	n/a	0.0160	None reported
Routine	CVE-2018-6095	chromium-browser: Inappropriate dismissal of file picker on keyboard events in Blink in Google Chrome prior to 66.0.3359.117 allowed a...	n/a	0.0158	None reported
Routine	CVE-2018-6112	chromium-browser: Making URLs clickable and allowing them to be styled in DevTools in Google Chrome prior to 66.0.3359.117 allowed a re...	n/a	0.0156	None reported
Routine	CVE-2018-6103	chromium-browser: A stagnant permission prompt in Prompts in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to bypass p...	n/a	0.0149	None reported
Routine	CVE-2018-6096	chromium-browser: A JavaScript focused window could overlap the fullscreen notification in Fullscreen in Google Chrome prior to 66.0.33...	n/a	0.0149	None reported
Routine	CVE-2018-6108	chromium-browser: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote...	n/a	0.0145	None reported
Routine	CVE-2018-6114	chromium-browser: Incorrect enforcement of CSP for <object> tags in Blink in Google Chrome prior to 66.0.3359.117 allowed a remot...	n/a	0.0144	None reported
Routine	CVE-2018-6097	chromium-browser: Incorrect handling of asynchronous methods in Fullscreen in Google Chrome on macOS prior to 66.0.3359.117 allowed a r...	n/a	0.0143	None reported
Routine	CVE-2018-6113	chromium-browser: Improper handling of pending navigation entries in Navigation in Google Chrome on iOS prior to 66.0.3359.117 allowed...	n/a	0.0143	None reported
Routine	CVE-2018-6098	chromium-browser: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote...	n/a	0.0142	None reported

Also fixes CVE-2018-6092

chromium-browser 66.0.3359.139-0ubuntu0.18.04.3
chromium-browser on Ubuntu 18.04.6 LTS (bionic)
chromium-browser-l10n 66.0.3359.139-0ubuntu0.18.04.3
chromium-browser-l10n on Ubuntu 18.04.6 LTS (bionic)
chromium-chromedriver 66.0.3359.139-0ubuntu0.18.04.3
chromium-chromedriver on Ubuntu 18.04.6 LTS (bionic)
chromium-codecs-ffmpeg 66.0.3359.139-0ubuntu0.18.04.3
chromium-codecs-ffmpeg on Ubuntu 18.04.6 LTS (bionic)

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/linux/ubuntu-bionic-chromium-codecs-ffmpeg-extra-66.0.3359.139-0ubuntu0.18.04.3">chromium-codecs-ffmpeg-extra 66.0.3359.139-0ubuntu0.18.04.3 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.