Linux · Ubuntu · Package update · November 23, 2021

chromium-codecs-ffmpeg-extra 95.0.4638.69-0ubuntu0.18.04.1: chromium-codecs-ffmpeg-extra 95.0.4638.69-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic)

chromium-codecs-ffmpeg-extra 95.0.4638.69-0ubuntu0.18.04.1, released November 23, 2021, fixes 24 CVEs in chromium-codecs-ffmpeg-extra. 2 of them are being exploited (CVE-2021-38003); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now2 on CISA KEVUnsupported product
CVEs closed
24
1 rated Critical
Exploited
2
CVE-2021-38003
Highest CVSS
9.6
Base score, 0 to 10
Highest EPSS
0.3857
98th percentile

Priority of the 24 CVEs

Patch now 2 Urgent 1 High 14 Routine 7

Fixed package versions

ProductReleaseFixed in
chromium-codecs-ffmpeg-extraUbuntu 18.04.6 LTS (bionic)95.0.4638.69-0ubuntu0.18.04.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Patch now CVE-2021-38003 Chromium: CVE-2021-38003 Inappropriate implementation in V88.8 0.3857 KEVExploited
Patch now CVE-2021-38000 Chromium: CVE-2021-38000 Insufficient validation of untrusted input in Intents6.1 0.0495 KEVExploited
Urgent CVE-2021-38002 Chromium: CVE-2021-38002 Use after free in Web Transport9.6 0.0097 None reported
High CVE-2021-38001 Chromium: CVE-2021-38001 Type Confusion in V88.8 0.2670 None reported
High CVE-2021-37981 Chromium: CVE-2021-37981 Heap buffer overflow in Skia9.6 0.0103 None reported
High CVE-2021-37984 Chromium: CVE-2021-37984 Heap buffer overflow in PDFium8.8 0.0101 None reported
High CVE-2021-37997 Chromium: CVE-2021-37997 Use after free in Sign-In8.8 0.0097 None reported
High CVE-2021-37998 Chromium: CVE-2021-37998 Use after free in Garbage Collection8.8 0.0097 None reported
High CVE-2021-37992 Chromium: CVE-2021-37992 Out of bounds read in WebAudio8.8 0.0096 None reported
High CVE-2021-37986 Chromium: CVE-2021-37986 Heap buffer overflow in Settings8.8 0.0095 None reported
High CVE-2021-37982 Chromium: CVE-2021-37982 Use after free in Incognito8.8 0.0090 None reported
High CVE-2021-37983 Chromium: CVE-2021-37983 Use after free in Dev Tools8.8 0.0090 None reported
High CVE-2021-37985 Chromium: CVE-2021-37985 Use after free in V88.8 0.0090 None reported
High CVE-2021-37987 Chromium: CVE-2021-37987 Use after free in Network APIs8.8 0.0086 None reported
High CVE-2021-37993 Chromium: CVE-2021-37993 Use after free in PDF Accessibility8.8 0.0086 None reported
High CVE-2021-37988 Chromium: CVE-2021-37988 Use after free in Profiles8.8 0.0086 None reported
High CVE-2021-37991 Chromium: CVE-2021-37991 Race in V87.5 0.0079 None reported
Routine CVE-2021-37999 Chromium: CVE-2021-37999 Insufficient data validation in New Tab Page6.1 0.0096 None reported
Routine CVE-2021-38004 chromium: Insufficient policy enforcement in Autofill in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to leak...4.3 0.0087 None reported
Routine CVE-2021-37989 Chromium: CVE-2021-37989 Inappropriate implementation in Blink6.5 0.0082 None reported
Routine CVE-2021-37994 Chromium: CVE-2021-37994 Inappropriate implementation in iFrame Sandbox6.5 0.0082 None reported
Routine CVE-2021-37995 Chromium: CVE-2021-37995 Inappropriate implementation in WebApp Installer6.5 0.0081 None reported
Routine CVE-2021-37990 Chromium: CVE-2021-37990 Inappropriate implementation in WebView5.5 0.0061 None reported
Routine CVE-2021-37996 Chromium: CVE-2021-37996 Insufficient validation of untrusted input in Downloads5.5 0.0059 None reported
Showing 1 to 24 of 24 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.