Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 368655 - <www-client/chromium-12.0.433.38: Multiple Vulnerabilities (CVE-2011-{2169,2170,2171})
Summary: <www-client/chromium-12.0.433.38: Multiple Vulnerabilities (CVE-2011-{2169,21...
Status: RESOLVED INVALID
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All All
: Normal normal
Assignee: Gentoo Security
URL: http://googlechromereleases.blogspot....
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-05-25 06:31 UTC by Benedikt Böhm (RETIRED)
Modified: 2011-05-25 06:52 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Benedikt Böhm (RETIRED) gentoo-dev 2011-05-25 06:31:50 UTC 
- Google Chrome OS before R12 0.12.433.38 Beta allows local users to gain privileges by creating a /var/lib/chromeos-aliases.conf file and placing commands in it.

- Google Chrome OS before R12 0.12.433.38 Beta, when Guest mode is enabled, does not prevent changes on the about:flags page, which has unspecified impact and local attack vectors.

- Unspecified vulnerability in the dbugs package in Google Chrome OS before R12 0.12.433.38 Beta has unknown impact and attack vectors.
Comment 1 Benedikt Böhm (RETIRED) gentoo-dev 2011-05-25 06:33:07 UTC 
uhm .. just noticed this is about Chrome OS, not Chrome itself. Should be checked anyway.
Comment 2 Paweł Hajdan, Jr. (RETIRED) gentoo-dev 2011-05-25 06:52:08 UTC 
We don't ship any of that code in Gentoo. Thank you for checking though, and feel free to ask me if you have more questions.