Security-sensitive ChromeOS packages
This is a list of security-sensitive Portage packages that the ChromeOS team should strive to update quickly in the event of a security bug in them.
On an incoming security bug report, the ChromeOS security sheriff should ideally update the package themselves, or find an owner that can commit to updating the package quickly, namely before the end of their sheriff shift. Bear in mind that sometimes there will be no upstream fix for the bug, in which case the package should be updated as soon as a fix is available.
- The package has to be a third-party package (i.e. nothing from
- The kernel doesn't count.
net-wireless/bluez(hopefully this is going away soon)