From predisclosure-applications-bounces@lists.xenproject.org Mon Mar 02 11:50:40 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Mon, 02 Mar 2015 11:50:40 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSOrw-00071b-5Q for archives@lists.xenproject.org; Mon, 02 Mar 2015 11:50:40 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSOrv-00071W-DN for predisclosure-applications@lists.xenproject.org; Mon, 02 Mar 2015 11:50:39 +0000 Received: from [193.109.254.147] by server-12.bemta-14.messagelabs.com id 37/C3-02755-E8E44F45; Mon, 02 Mar 2015 11:50:38 +0000 X-Env-Sender: birin.sanchez@citrix.com X-Msg-Ref: server-9.tower-27.messagelabs.com!1425297037!13886865!1 X-Originating-IP: [66.165.176.63] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogNjYuMTY1LjE3Ni42MyA9PiAzMDYwNDg=\n, received_headers: No Received headers X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 19616 invoked from network); 2 Mar 2015 11:50:38 -0000 Received: from smtp02.citrix.com (HELO SMTP02.CITRIX.COM) (66.165.176.63) by server-9.tower-27.messagelabs.com with RC4-SHA encrypted SMTP; 2 Mar 2015 11:50:38 -0000 X-IronPort-AV: E=Sophos;i="5.09,675,1418083200"; d="scan'208";a="240469791" Message-ID: <54F44E8A.5010708@citrix.com> Date: Mon, 2 Mar 2015 12:50:34 +0100 From: Birin Sanchez User-Agent: Mozilla/5.0 (X11; Linux i686; rv:31.0) Gecko/20100101 Thunderbird/31.4.0 MIME-Version: 1.0 To: X-DLP: MIA2 Subject: [Predisclosure-applications] Test X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org foobar _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Mon Mar 02 11:50:40 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Mon, 02 Mar 2015 11:50:40 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSOrw-00071b-5Q for archives@lists.xenproject.org; Mon, 02 Mar 2015 11:50:40 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSOrv-00071W-DN for predisclosure-applications@lists.xenproject.org; Mon, 02 Mar 2015 11:50:39 +0000 Received: from [193.109.254.147] by server-12.bemta-14.messagelabs.com id 37/C3-02755-E8E44F45; Mon, 02 Mar 2015 11:50:38 +0000 X-Env-Sender: birin.sanchez@citrix.com X-Msg-Ref: server-9.tower-27.messagelabs.com!1425297037!13886865!1 X-Originating-IP: [66.165.176.63] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogNjYuMTY1LjE3Ni42MyA9PiAzMDYwNDg=\n, received_headers: No Received headers X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 19616 invoked from network); 2 Mar 2015 11:50:38 -0000 Received: from smtp02.citrix.com (HELO SMTP02.CITRIX.COM) (66.165.176.63) by server-9.tower-27.messagelabs.com with RC4-SHA encrypted SMTP; 2 Mar 2015 11:50:38 -0000 X-IronPort-AV: E=Sophos;i="5.09,675,1418083200"; d="scan'208";a="240469791" Message-ID: <54F44E8A.5010708@citrix.com> Date: Mon, 2 Mar 2015 12:50:34 +0100 From: Birin Sanchez User-Agent: Mozilla/5.0 (X11; Linux i686; rv:31.0) Gecko/20100101 Thunderbird/31.4.0 MIME-Version: 1.0 To: X-DLP: MIA2 Subject: [Predisclosure-applications] Test X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org foobar _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Mon Mar 02 14:15:54 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Mon, 02 Mar 2015 14:15:54 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSR8T-0001tT-Vd; Mon, 02 Mar 2015 14:15:53 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSR8S-0001su-O9 for predisclosure-applications@lists.xenproject.org; Mon, 02 Mar 2015 14:15:52 +0000 Received: from [85.158.139.211] by server-4.bemta-5.messagelabs.com id A9/13-03164-89074F45; Mon, 02 Mar 2015 14:15:52 +0000 X-Env-Sender: ijackson@chiark.greenend.org.uk X-Msg-Ref: server-4.tower-206.messagelabs.com!1425305751!12371551!1 X-Originating-IP: [212.13.197.229] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 16880 invoked from network); 2 Mar 2015 14:15:51 -0000 Received: from chiark.greenend.org.uk (HELO chiark.greenend.org.uk) (212.13.197.229) by server-4.tower-206.messagelabs.com with AES256-SHA encrypted SMTP; 2 Mar 2015 14:15:51 -0000 Received: by chiark.greenend.org.uk (Debian Exim 4.72 #1) with local (return-path ijackson@chiark.greenend.org.uk) id 1YSR8R-00069L-EC for predisclosure-applications@lists.xenproject.org; Mon, 02 Mar 2015 14:15:51 +0000 From: Ian Jackson Message-ID: <21748.28823.364165.557169@chiark.greenend.org.uk> Date: Mon, 2 Mar 2015 14:15:51 +0000 MIME-Version: 1.0 To: predisclosure-applications@lists.xenproject.org X-Mailer: VM 8.1.0 under 23.2.1 (i486-pc-linux-gnu) Subject: [Predisclosure-applications] Test from outside - xenproject.org X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org do not reply -- Ian Jackson personal email: These opinions are my own. http://www.chiark.greenend.org.uk/~ijackson/ _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Mon Mar 02 14:15:54 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Mon, 02 Mar 2015 14:15:54 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSR8T-0001tT-Vd; Mon, 02 Mar 2015 14:15:53 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSR8S-0001su-O9 for predisclosure-applications@lists.xenproject.org; Mon, 02 Mar 2015 14:15:52 +0000 Received: from [85.158.139.211] by server-4.bemta-5.messagelabs.com id A9/13-03164-89074F45; Mon, 02 Mar 2015 14:15:52 +0000 X-Env-Sender: ijackson@chiark.greenend.org.uk X-Msg-Ref: server-4.tower-206.messagelabs.com!1425305751!12371551!1 X-Originating-IP: [212.13.197.229] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 16880 invoked from network); 2 Mar 2015 14:15:51 -0000 Received: from chiark.greenend.org.uk (HELO chiark.greenend.org.uk) (212.13.197.229) by server-4.tower-206.messagelabs.com with AES256-SHA encrypted SMTP; 2 Mar 2015 14:15:51 -0000 Received: by chiark.greenend.org.uk (Debian Exim 4.72 #1) with local (return-path ijackson@chiark.greenend.org.uk) id 1YSR8R-00069L-EC for predisclosure-applications@lists.xenproject.org; Mon, 02 Mar 2015 14:15:51 +0000 From: Ian Jackson Message-ID: <21748.28823.364165.557169@chiark.greenend.org.uk> Date: Mon, 2 Mar 2015 14:15:51 +0000 MIME-Version: 1.0 To: predisclosure-applications@lists.xenproject.org X-Mailer: VM 8.1.0 under 23.2.1 (i486-pc-linux-gnu) Subject: [Predisclosure-applications] Test from outside - xenproject.org X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org do not reply -- Ian Jackson personal email: These opinions are my own. http://www.chiark.greenend.org.uk/~ijackson/ _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Mon Mar 02 16:05:00 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Mon, 02 Mar 2015 16:05:00 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSSq4-0006Ua-JD; Mon, 02 Mar 2015 16:05:00 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSSq2-0006UC-Jd for predisclosure-applications@lists.xenproject.org; Mon, 02 Mar 2015 16:04:58 +0000 Received: from [85.158.139.211] by server-17.bemta-5.messagelabs.com id 0E/19-03132-92A84F45; Mon, 02 Mar 2015 16:04:57 +0000 X-Env-Sender: bernard@openminds.be X-Msg-Ref: server-11.tower-206.messagelabs.com!1425312296!8263991!1 X-Originating-IP: [195.47.215.47] X-SpamReason: No, hits=0.1 required=7.0 tests=HTML_50_60,HTML_MESSAGE X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 3436 invoked from network); 2 Mar 2015 16:04:56 -0000 Received: from november.openminds.be (HELO november.openminds.be) (195.47.215.47) by server-11.tower-206.messagelabs.com with SMTP; 2 Mar 2015 16:04:56 -0000 Received: from [192.168.20.22] (vpn-001.openminds.be [188.93.102.221]) by november.openminds.be (Postfix) with ESMTPA id 046661210B5D; Mon, 2 Mar 2015 17:04:55 +0100 (CET) From: Bernard Grymonpon Date: Mon, 2 Mar 2015 17:05:01 +0100 Message-Id: To: predisclosure-applications@lists.xenproject.org Mime-Version: 1.0 (Mac OS X Mail 6.6 \(1510\)) X-Mailer: Apple Mail (2.1510) Cc: Frank Louwers Subject: [Predisclosure-applications] Inclusion in the Xen Security pre-disclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============6684928787247101324==" Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org --===============6684928787247101324== Content-Type: multipart/alternative; boundary="Apple-Mail=_8CBED262-2624-4283-99CB-D63E26042ED6" --Apple-Mail=_8CBED262-2624-4283-99CB-D63E26042ED6 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Hi list, we would like to be included in the Xen pre-disclosure list.=20 Name: Opennminds BVBA Domain name: www.openminds.be Brief description: We are a hosting company, currently using Xen as our = main virtualisation platform. Anything for shared hosting (running = inside a Xen VM) up to dedicated servers with multiple VM's on them, use = Xen. We've been using Xen for over 7 years. Required links: Evidence of your status as a service/software provider: = http://www.openminds.be/en/cloud-hosting <- general info on "cloud" = servers, with = http://www.openminds.be/en/cloud-hosting/technical-specifications as a = general page with some quotes and possible layouts. Xen is mentioned on = the page. Evidence of your status as a user/distributor of Xen: see the above = links. We offer fully managed hosting, so we don't provide that much = info on the technical platform on our public website, as our clients = don't really care which technology is used "under the hood". Information about your handling of security problems: our clients = receive (and need to sign) an AUP and SLA, which contain info about = reporting problems, and getting in touch with us concerning = security-issues. These arent publicly available. I have read the policy, understand the needs and requirements to the = embargo periods, and will honour these requirements. =20 I would add the tech@openminds.be address as our contact address. This = is read by our on-call engineers, and already receives other = security-related mail. Feel free to ask for more info if needed. Kind regards, Bernard Grymonpon Openminds BVBA ps: if this mail arrives at the correct list, then the mail address on = http://www.xenproject.org/security-policy.html might be wrong (it misses = the "list." in the domain).=20= --Apple-Mail=_8CBED262-2624-4283-99CB-D63E26042ED6 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii Hi = list,

we would like to be included in the Xen = pre-disclosure list. 

Name: Opennminds = BVBA

Domain name:  www.openminds.be

=
Brief description: We are a hosting company, currently using Xen as = our main virtualisation platform. Anything for shared hosting (running = inside a Xen VM) up to dedicated servers with multiple VM's on them, use = Xen. We've been using Xen for over 7 = years.

Required links:
Evidence of = your status as a service/software provider: http://www.openminds.be/= en/cloud-hosting <- general info on "cloud" servers, = with http://www.openminds.be/en/cloud-hosting/technical-specifications&nbs= p;as a general page with some quotes and possible layouts. Xen is = mentioned on the page.

Evidence of your status as a user/distributor of Xen: see the = above links. We offer fully managed hosting, so we don't provide that = much info on the technical platform on our public website, as our = clients don't really care which technology is used "under the = hood".
Information = about your handling of security problems: our clients receive (and need = to sign) an AUP and SLA, which contain info about reporting problems, = and getting in touch with us concerning security-issues. These arent = publicly available.
I have = read the policy, understand the needs and requirements to the embargo = periods, and will honour these requirements. =  
I would add the tech@openminds.be address as our = contact address. This is read by our on-call engineers, and already = receives other security-related mail.

Feel free to ask for more info if needed.

Kind = regards,
Bernard Grymonpon
Openminds = BVBA

ps: if this mail arrives at the correct = list, then the mail address on http://www.xenproj= ect.org/security-policy.html might be wrong (it misses the = "list." in the domain). 
= --Apple-Mail=_8CBED262-2624-4283-99CB-D63E26042ED6-- --===============6684928787247101324== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications --===============6684928787247101324==-- From predisclosure-applications-bounces@lists.xenproject.org Mon Mar 02 16:05:00 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Mon, 02 Mar 2015 16:05:00 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSSq4-0006Ua-JD; Mon, 02 Mar 2015 16:05:00 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSSq2-0006UC-Jd for predisclosure-applications@lists.xenproject.org; Mon, 02 Mar 2015 16:04:58 +0000 Received: from [85.158.139.211] by server-17.bemta-5.messagelabs.com id 0E/19-03132-92A84F45; Mon, 02 Mar 2015 16:04:57 +0000 X-Env-Sender: bernard@openminds.be X-Msg-Ref: server-11.tower-206.messagelabs.com!1425312296!8263991!1 X-Originating-IP: [195.47.215.47] X-SpamReason: No, hits=0.1 required=7.0 tests=HTML_50_60,HTML_MESSAGE X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 3436 invoked from network); 2 Mar 2015 16:04:56 -0000 Received: from november.openminds.be (HELO november.openminds.be) (195.47.215.47) by server-11.tower-206.messagelabs.com with SMTP; 2 Mar 2015 16:04:56 -0000 Received: from [192.168.20.22] (vpn-001.openminds.be [188.93.102.221]) by november.openminds.be (Postfix) with ESMTPA id 046661210B5D; Mon, 2 Mar 2015 17:04:55 +0100 (CET) From: Bernard Grymonpon Date: Mon, 2 Mar 2015 17:05:01 +0100 Message-Id: To: predisclosure-applications@lists.xenproject.org Mime-Version: 1.0 (Mac OS X Mail 6.6 \(1510\)) X-Mailer: Apple Mail (2.1510) Cc: Frank Louwers Subject: [Predisclosure-applications] Inclusion in the Xen Security pre-disclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============6684928787247101324==" Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org --===============6684928787247101324== Content-Type: multipart/alternative; boundary="Apple-Mail=_8CBED262-2624-4283-99CB-D63E26042ED6" --Apple-Mail=_8CBED262-2624-4283-99CB-D63E26042ED6 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Hi list, we would like to be included in the Xen pre-disclosure list.=20 Name: Opennminds BVBA Domain name: www.openminds.be Brief description: We are a hosting company, currently using Xen as our = main virtualisation platform. Anything for shared hosting (running = inside a Xen VM) up to dedicated servers with multiple VM's on them, use = Xen. We've been using Xen for over 7 years. Required links: Evidence of your status as a service/software provider: = http://www.openminds.be/en/cloud-hosting <- general info on "cloud" = servers, with = http://www.openminds.be/en/cloud-hosting/technical-specifications as a = general page with some quotes and possible layouts. Xen is mentioned on = the page. Evidence of your status as a user/distributor of Xen: see the above = links. We offer fully managed hosting, so we don't provide that much = info on the technical platform on our public website, as our clients = don't really care which technology is used "under the hood". Information about your handling of security problems: our clients = receive (and need to sign) an AUP and SLA, which contain info about = reporting problems, and getting in touch with us concerning = security-issues. These arent publicly available. I have read the policy, understand the needs and requirements to the = embargo periods, and will honour these requirements. =20 I would add the tech@openminds.be address as our contact address. This = is read by our on-call engineers, and already receives other = security-related mail. Feel free to ask for more info if needed. Kind regards, Bernard Grymonpon Openminds BVBA ps: if this mail arrives at the correct list, then the mail address on = http://www.xenproject.org/security-policy.html might be wrong (it misses = the "list." in the domain).=20= --Apple-Mail=_8CBED262-2624-4283-99CB-D63E26042ED6 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii Hi = list,

we would like to be included in the Xen = pre-disclosure list. 

Name: Opennminds = BVBA

Domain name:  www.openminds.be

=
Brief description: We are a hosting company, currently using Xen as = our main virtualisation platform. Anything for shared hosting (running = inside a Xen VM) up to dedicated servers with multiple VM's on them, use = Xen. We've been using Xen for over 7 = years.

Required links:
Evidence of = your status as a service/software provider: http://www.openminds.be/= en/cloud-hosting <- general info on "cloud" servers, = with http://www.openminds.be/en/cloud-hosting/technical-specifications&nbs= p;as a general page with some quotes and possible layouts. Xen is = mentioned on the page.

Evidence of your status as a user/distributor of Xen: see the = above links. We offer fully managed hosting, so we don't provide that = much info on the technical platform on our public website, as our = clients don't really care which technology is used "under the = hood".
Information = about your handling of security problems: our clients receive (and need = to sign) an AUP and SLA, which contain info about reporting problems, = and getting in touch with us concerning security-issues. These arent = publicly available.
I have = read the policy, understand the needs and requirements to the embargo = periods, and will honour these requirements. =  
I would add the tech@openminds.be address as our = contact address. This is read by our on-call engineers, and already = receives other security-related mail.

Feel free to ask for more info if needed.

Kind = regards,
Bernard Grymonpon
Openminds = BVBA

ps: if this mail arrives at the correct = list, then the mail address on http://www.xenproj= ect.org/security-policy.html might be wrong (it misses the = "list." in the domain). 
= --Apple-Mail=_8CBED262-2624-4283-99CB-D63E26042ED6-- --===============6684928787247101324== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications --===============6684928787247101324==-- From predisclosure-applications-bounces@lists.xenproject.org Mon Mar 02 19:40:17 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Mon, 02 Mar 2015 19:40:17 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSWCP-0001zL-5l; Mon, 02 Mar 2015 19:40:17 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSWCO-0001zB-BE for predisclosure-applications@lists.xenproject.org; Mon, 02 Mar 2015 19:40:16 +0000 Received: from [85.158.139.211] by server-6.bemta-5.messagelabs.com id 3E/EE-03165-F9CB4F45; Mon, 02 Mar 2015 19:40:15 +0000 X-Env-Sender: nate@chunkhost.com X-Msg-Ref: server-5.tower-206.messagelabs.com!1425325212!12411953!1 X-Originating-IP: [209.85.192.177] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 27690 invoked from network); 2 Mar 2015 19:40:14 -0000 Received: from mail-pd0-f177.google.com (HELO mail-pd0-f177.google.com) (209.85.192.177) by server-5.tower-206.messagelabs.com with RC4-SHA encrypted SMTP; 2 Mar 2015 19:40:14 -0000 Received: by pdbft15 with SMTP id ft15so16107897pdb.2 for ; Mon, 02 Mar 2015 11:40:12 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:content-type:content-transfer-encoding :subject:date:message-id:cc:to:mime-version; bh=9qFS7eDgJxXXJ/KNxXu+eJl70sdSeaUt/m/OxBLD9Vc=; b=bH8PQqJnDXSqgOCChJ5efIaGvvVD7O/vWjaVtcRZHSJ5+V2oorc6RafnAQGqfweRs/ ixe6DkiJOLmfM6wqHdGLd7If8bfUuc8OwMPfexINmvtGsnT7RWsP8h3i1n4Hsnbw+vWh GY7DiN/khTCyx5gCNiCz9fzbWT/EFnEmNG51x3wQZ4BZDYmyZ5JdV1yDTBZH64faRiGA AOOin/OnZ08mBp0incXvVt5LJQMCkS318SF/Gq3EQolPA+f+G6+uU0GbrpWwvQHG7/89 Eo5piWq1AdmLb7rLNXl3zTRKpsAj3OtTUcV8rMGILvIUG9s9KJIW5slzLBzkBJw3Egb1 9Nag== X-Gm-Message-State: ALoCoQkOBe4D848UpHc+GA3NiWAY/RuesSDqNJfEeyY8JDLPokumVvgsbWgNRRjndEylF3hO6nFc X-Received: by 10.70.136.164 with SMTP id qb4mr49185791pdb.145.1425325212629; Mon, 02 Mar 2015 11:40:12 -0800 (PST) Received: from [10.0.1.10] ([192.69.243.2]) by mx.google.com with ESMTPSA id a14sm12706287pbu.51.2015.03.02.11.40.11 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Mon, 02 Mar 2015 11:40:12 -0800 (PST) From: Nathaniel Daiger Date: Mon, 2 Mar 2015 11:40:10 -0800 Message-Id: <718EDFE6-E9AC-4455-8DF7-54D990E6E4AA@chunkhost.com> To: predisclosure-applications@lists.xenproject.org Mime-Version: 1.0 (Mac OS X Mail 8.1 \(1993\)) X-Mailer: Apple Mail (2.1993) Cc: security@chunkhost.com Subject: [Predisclosure-applications] ChunkHost Application X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org - The name of your organization ChunkHost - Domain name(s) which you use to provide Xen software/services chunkhost.com - A brief description of why you fit the criteria We're a public VPS service that uses Xen for virtualization. - Link(s) to current public web pages, belonging to your organisation, for each of following pieces of information: - Evidence of your status as a service/software provider: https://chunkhost.com - If you are a public hosting provider, your public rates or how to get a quote https://chunkhost.com/prices/ - Evidence of your status as a user/distributor of Xen: We only sell virtual machines that use Xen as the hypervisor. - Statements about, or descriptions of, your eligible production services or released software, from which it is immediately evident that they use Xen. We mention Xen many times in our FAQ: https://chunkhost.com/faq - Information about your handling of security problems: - Your invitation to members of the public, who discover security problems with your products/services, to report them in confidence to you; https://chunkhost.com/contact - A statement to the effect that you have read this policy and agree to abide by the terms for inclusion in the list, specifically the requirements to regarding confidentiality during an embargo period We have read and understand the security policy. We will abide by the terms, specifically and especially the confidentiality agreement. - The single (non-personal) email alias you wish added to the predisclosure list. security@chunkhost.com Thanks! Nate ChunkHost _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Mon Mar 02 19:40:17 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Mon, 02 Mar 2015 19:40:17 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSWCP-0001zL-5l; Mon, 02 Mar 2015 19:40:17 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSWCO-0001zB-BE for predisclosure-applications@lists.xenproject.org; Mon, 02 Mar 2015 19:40:16 +0000 Received: from [85.158.139.211] by server-6.bemta-5.messagelabs.com id 3E/EE-03165-F9CB4F45; Mon, 02 Mar 2015 19:40:15 +0000 X-Env-Sender: nate@chunkhost.com X-Msg-Ref: server-5.tower-206.messagelabs.com!1425325212!12411953!1 X-Originating-IP: [209.85.192.177] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 27690 invoked from network); 2 Mar 2015 19:40:14 -0000 Received: from mail-pd0-f177.google.com (HELO mail-pd0-f177.google.com) (209.85.192.177) by server-5.tower-206.messagelabs.com with RC4-SHA encrypted SMTP; 2 Mar 2015 19:40:14 -0000 Received: by pdbft15 with SMTP id ft15so16107897pdb.2 for ; Mon, 02 Mar 2015 11:40:12 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:content-type:content-transfer-encoding :subject:date:message-id:cc:to:mime-version; bh=9qFS7eDgJxXXJ/KNxXu+eJl70sdSeaUt/m/OxBLD9Vc=; b=bH8PQqJnDXSqgOCChJ5efIaGvvVD7O/vWjaVtcRZHSJ5+V2oorc6RafnAQGqfweRs/ ixe6DkiJOLmfM6wqHdGLd7If8bfUuc8OwMPfexINmvtGsnT7RWsP8h3i1n4Hsnbw+vWh GY7DiN/khTCyx5gCNiCz9fzbWT/EFnEmNG51x3wQZ4BZDYmyZ5JdV1yDTBZH64faRiGA AOOin/OnZ08mBp0incXvVt5LJQMCkS318SF/Gq3EQolPA+f+G6+uU0GbrpWwvQHG7/89 Eo5piWq1AdmLb7rLNXl3zTRKpsAj3OtTUcV8rMGILvIUG9s9KJIW5slzLBzkBJw3Egb1 9Nag== X-Gm-Message-State: ALoCoQkOBe4D848UpHc+GA3NiWAY/RuesSDqNJfEeyY8JDLPokumVvgsbWgNRRjndEylF3hO6nFc X-Received: by 10.70.136.164 with SMTP id qb4mr49185791pdb.145.1425325212629; Mon, 02 Mar 2015 11:40:12 -0800 (PST) Received: from [10.0.1.10] ([192.69.243.2]) by mx.google.com with ESMTPSA id a14sm12706287pbu.51.2015.03.02.11.40.11 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Mon, 02 Mar 2015 11:40:12 -0800 (PST) From: Nathaniel Daiger Date: Mon, 2 Mar 2015 11:40:10 -0800 Message-Id: <718EDFE6-E9AC-4455-8DF7-54D990E6E4AA@chunkhost.com> To: predisclosure-applications@lists.xenproject.org Mime-Version: 1.0 (Mac OS X Mail 8.1 \(1993\)) X-Mailer: Apple Mail (2.1993) Cc: security@chunkhost.com Subject: [Predisclosure-applications] ChunkHost Application X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org - The name of your organization ChunkHost - Domain name(s) which you use to provide Xen software/services chunkhost.com - A brief description of why you fit the criteria We're a public VPS service that uses Xen for virtualization. - Link(s) to current public web pages, belonging to your organisation, for each of following pieces of information: - Evidence of your status as a service/software provider: https://chunkhost.com - If you are a public hosting provider, your public rates or how to get a quote https://chunkhost.com/prices/ - Evidence of your status as a user/distributor of Xen: We only sell virtual machines that use Xen as the hypervisor. - Statements about, or descriptions of, your eligible production services or released software, from which it is immediately evident that they use Xen. We mention Xen many times in our FAQ: https://chunkhost.com/faq - Information about your handling of security problems: - Your invitation to members of the public, who discover security problems with your products/services, to report them in confidence to you; https://chunkhost.com/contact - A statement to the effect that you have read this policy and agree to abide by the terms for inclusion in the list, specifically the requirements to regarding confidentiality during an embargo period We have read and understand the security policy. We will abide by the terms, specifically and especially the confidentiality agreement. - The single (non-personal) email alias you wish added to the predisclosure list. security@chunkhost.com Thanks! Nate ChunkHost _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Mon Mar 02 20:10:41 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Mon, 02 Mar 2015 20:10:41 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSWfo-0005LG-Uo; Mon, 02 Mar 2015 20:10:40 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSWfn-0005L6-JP for predisclosure-applications@lists.xenproject.org; Mon, 02 Mar 2015 20:10:40 +0000 Received: from [85.158.137.68] by server-17.bemta-3.messagelabs.com id 2B/C0-02896-EB3C4F45; Mon, 02 Mar 2015 20:10:38 +0000 X-Env-Sender: lucas.vianna@locaweb.com.br X-Msg-Ref: server-3.tower-31.messagelabs.com!1425327036!12422862!1 X-Originating-IP: [200.234.205.15] X-SpamReason: No, hits=0.3 required=7.0 tests=HTML_60_70,HTML_MESSAGE X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 19562 invoked from network); 2 Mar 2015 20:10:36 -0000 Received: from teeny0001-12.locaweb.com.br (HELO teeny0001-12.locaweb.com.br) (200.234.205.15) by server-3.tower-31.messagelabs.com with SMTP; 2 Mar 2015 20:10:36 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=lwita2014; d=locaweb.com.br; h=From:To:Subject:Date:Message-ID:Content-Type:MIME-Version; bh=M48R5R924e/t7kot5rrJ+abmtSJm2er8REBuT7YNW1A=; b=Y1QTX/QujHTXmU2OM6kSFDLdqe4IqoPjRYs4GrfbqsWpQhSuNWjg4iJdc3RGsKTUbriGNTLvq74k 09RwtslfNdbB+J6ee7MJa3lYe2+rGqK79nhTmq/Q+UzZc6SRYoPx0xXfXej1im62Ez2m5FXcsXB9 7yjS0ZlOERxOk2SvVEI= DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=lwita2014; d=locaweb.com.br; b=VAM9jYiM40clcMO4VqQFG9+B1dbOuoivQtT6EkAg/g3tcgCKaXf6R5fAb/B0xzkYTqxgCGGzK5DE e/mAmP60ROR093CNxogD50ta8epPj4Rrv2pChWzc0McIjMJq6kcZM1x0G+TE2zETj8tMOXepR1kV duUYoFQRqYN/Np29KX0=; Received: from teeny0002.correio.biz (127.0.0.1) by teeny0001-10.locaweb.com.br id huj0va1oiqck for ; Mon, 2 Mar 2015 17:02:59 -0300 (envelope-from ) Received: from outlook.locaweb.com.br (unknown [186.202.31.40]) by teeny0002.correio.biz (Postfix) with ESMTP id F244E20441 for ; Mon, 2 Mar 2015 17:02:58 -0300 (BRT) Received: from SRVEXCHMBX02.fabrica.locaweb.com.br ([fe80::b155:e372:b255:418d]) by LWHUBCAS-EX0003.fabrica.locaweb.com.br ([186.202.31.40]) with mapi id 14.03.0181.006; Mon, 2 Mar 2015 17:10:34 -0300 From: Lucas Vianna To: "predisclosure-applications@lists.xenproject.org" Thread-Topic: Xen Security Pre-disclosure list Thread-Index: AQHQVSTwFzL6nez/IkyBJTEz4CAftg== Date: Mon, 2 Mar 2015 20:10:33 +0000 Message-ID: <50814C7C-F533-4810-8E24-43DAA9B08407@locaweb.com.br> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [186.202.96.24] MIME-Version: 1.0 X-CMAE-Score: 0 X-CMAE-Analysis: v=2.1 cv=G4ySErU5 c=1 sm=1 tr=0 a=duZQY4qU6zIC89IGxEeLOQ==:117 a=VM7MXBOAAAAA:8 a=HMDWBQi7DlUA:10 a=xqWC_Br6kY4A:10 a=emO1SXQWCLwA:10 a=YSsXlP5BAAAA:8 a=VhHYrJf3AAAA:8 a=F5TrVGWVu87-H6ANeAEA:9 a=v_Li5vp7cJ_lTEd6:21 a=pJMm8cVgxjoATQwU:21 a=QEXdDO2ut3YA:10 a=k3XKj-ZGPP0A:10 a=sZSqGeW6BXUA:10 a=3GNa8BB1Bx8A:10 a=Eg7fh1eVDxFpNOuqxFgA:9 a=r5q-o000q5wg_kfI:21 a=5rcMpAq84ZdsAOck:21 a=lR_avZ3pykBYLlyO:21 a=_W_S_7VecoQA:10 Subject: [Predisclosure-applications] Xen Security Pre-disclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============1799794138930618316==" Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org --===============1799794138930618316== Content-Language: en-US Content-Type: multipart/alternative; boundary="_000_50814C7CF53348108E2443DAA9B08407locawebcombr_" --_000_50814C7CF53348108E2443DAA9B08407locawebcombr_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGksDQoNCndlIHdvdWxkIGxpa2UgdG8gYmUgaW5jbHVkZWQgb24gdGhlIHByZS1kaXNjbG9zdXJl IGxpc3QuDQoNCk5hbWU6IExvY2F3ZWINCkRvbWFpbiBuYW1lOiBsb2Nhd2ViLmNvbS5icjxodHRw Oi8vbG9jYXdlYi5jb20uYnI+IC8gcHVibGljY2xvdWQuY29tLmJyPGh0dHA6Ly9wdWJsaWNjbG91 ZC5jb20uYnI+DQpCcmllZiBkZXNjcmlwdGlvbjogTG9jYXdlYiBpcyBvbmUgb2YgdGhlIGJpZ2dl c3QgSG9zdGluZyBjb21wYW55IGluIEJyYXppbCwgcHJvdmlkaW5nIGRlZGljYXRlZCBhbmQgc2hh cmVkLWhvc3Rpbmcgc2VydmVycyB1c2luZyBYZW4gcGxhdGZvcm0gYXMgZGVmYXVsdC4NCg0KRXZp ZGVuY2Ugb2YgeW91ciBzdGF0dXMgYXMgYSBzZXJ2aWNlL3NvZnR3YXJlIHByb3ZpZGVyOiBodHRw Oi8vd3d3LmxvY2F3ZWIuY29tLmJyL3Byb2R1dG9zL2Nsb3VkLXNlcnZlci9wbGFub3MtcHJvLmh0 bWwgLXRlY2huaWNhbCBpbmZvIGFuZCByYXRlcyAocHQtQlIpDQpFdmlkZW5jZSBvZiB5b3VyIHN0 YXR1cyBhcyBhIHVzZXIvZGlzdHJpYnV0b3Igb2YgWGVuOiAgV2Ugb2ZmZXIgYSBmdWxsIG1hbmFn ZWQgaG9zdGluZyBzZXJ2aWNlLCB0aGVyZWZvcmUgdGhlIHVzZXIgY2FuIGluc3RhbGwgdGhlIFhl blNlcnZlciBUb29sIGZyb20gdGhlIGFkbWluaXN0cmF0aXZlIHBhbmVsLiBJZiBpdCBpcyBuZWNl c3NhcnkgSSBjYW4gc2VuZCBhIHByaW50IHNjcmVlbi4NCg0KSW5mb3JtYXRpb24gYWJvdXQgeW91 ciBoYW5kbGluZyBvZiBzZWN1cml0eSBwcm9ibGVtczogT3VyIGN1c3RvbWVycyBjYW4gZ2V0dGlu ZyBpbiB0b3VjaCB0aHJvdWdoIHRoZSBhYnVzZSBkZXBhcnRtZW50IChhYnVzZUBsb2Nhd2JlLmNv bS5icjxtYWlsdG86YWJ1c2VAbG9jYXdiZS5jb20uYnI+KS4gQmVzaWRlcyB0aGlzIHdlIHByb3Zp ZGUgc29tZSBjaGFubmVscyB0byBjb21tdW5pY2F0ZSB3aXRoIG91ciBjdXN0b21lcnMsIHN1Y2gg YXMgQ2hhdCwgRW1haWwgYW5kIHBvc3Qgb24gb3VyIG9mZmljaWFsIGJsb2cgKGkuZTogaHR0cDov L2Jsb2cubG9jYXdlYi5jb20uYnIvc2VndXJhbmNhL25vc3NvLXBvc2ljaW9uYW1lbnRvLWEtcmVz cGVpdG8tZG8taGVhcnRibGVlZC8pLg0KTW9yZSBpbmZvcm1hdGlvbiBhYm91dCBvdXIgcG9saWNp ZXMgYXJlIGF2YWlsYWJsZSBpbiB0aGUgY3VzdG9tZXIgY29udHJhY3QuIFBhZ2U6IGh0dHA6Ly93 d3cubG9jYXdlYi5jb20uYnIvc29icmUtbG9jYXdlYi9jb250cmF0b3MtcG9saXRpY2FzLmh0bWws IExpbms6ICJDbG91ZCBDb21wdXRpbmcgZSBTZXJ2aWRvcmVzIERlZGljYWRvcyINCg0KSSByZWFk IHRoZSBwb2xpY3ksIHVuZGVyc3RhbmQgdGhlIHJlcXVpcmVtZW50cyB0byB0aGUgZW1iYXJnbyBw ZXJpb2RzLCBhbmQgd2lsbCBob25vdXIgdGhlc2UgcmVxdWlyZW1lbnRzLg0KDQpUaGUgc2luZ2xl IChub24tcGVyc29uYWwpIGVtYWlsIGFsaWFzIHlvdSB3aXNoIGFkZGVkIHRvIHRoZSBwcmVkaXNj bG9zdXJlIGxpc3Q6IHNlYy1saWRlcmVzQGxvY2F3ZWIuY29tLmJyPG1haWx0bzpzZWMtbGlkZXJl c0Bsb2Nhd2ViLmNvbS5icj4uIFRoaXMgaXMgcmVhZCBqdXN0IGZvciB0aHJlZSBlbmdpbmVlcnMg cmVzcG9uc2libGUgZm9yIHZ1bG5lcmFiaWxpdGllcyBhbmFseXNpcy4NCg0KUGxlYXNlLCBsZXQg bWUga25vdyBpZiBzb21lIGFkZGl0aW9uYWwgaW5mb3JtYXRpb24gaXMgbmVlZGVkLg0KDQpyZWdh cmRzLA0KDQpMdWNhcyBWaWFubmENCkxvY2F3ZWIg4oCTIHd3dy5sb2Nhd2ViLmNvbS5icjxodHRw Oi8vd3d3LmxvY2F3ZWIuY29tLmJyLz4NCg0K --_000_50814C7CF53348108E2443DAA9B08407locawebcombr_ Content-Type: text/html; charset="utf-8" Content-ID: <55EA3399CA72B14BB5FCB9E5438BBA45@fabrica.locaweb.com.br> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KSGksDQo8ZGl2IGNsYXNzPSIiPjxi ciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj53ZSB3b3VsZCBsaWtlIHRvIGJlIGlu Y2x1ZGVkIG9uIHRoZSBwcmUtZGlzY2xvc3VyZSBsaXN0LjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48 YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+TmFtZTogTG9jYXdlYjwvZGl2Pg0K PGRpdiBjbGFzcz0iIj5Eb21haW4gbmFtZTogPGEgaHJlZj0iaHR0cDovL2xvY2F3ZWIuY29tLmJy IiBjbGFzcz0iIj5sb2Nhd2ViLmNvbS5icjwvYT4mbmJzcDsvDQo8YSBocmVmPSJodHRwOi8vcHVi bGljY2xvdWQuY29tLmJyIiBjbGFzcz0iIj5wdWJsaWNjbG91ZC5jb20uYnI8L2E+PC9kaXY+DQo8 ZGl2IGNsYXNzPSIiPkJyaWVmIGRlc2NyaXB0aW9uOiBMb2Nhd2ViIGlzIG9uZSBvZiB0aGUgYmln Z2VzdCBIb3N0aW5nIGNvbXBhbnkgaW4gQnJhemlsLCBwcm92aWRpbmcgZGVkaWNhdGVkIGFuZCBz aGFyZWQtaG9zdGluZyBzZXJ2ZXJzIHVzaW5nIFhlbiBwbGF0Zm9ybSBhcyBkZWZhdWx0LjwvZGl2 Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+RXZp ZGVuY2Ugb2YgeW91ciBzdGF0dXMgYXMgYSBzZXJ2aWNlL3NvZnR3YXJlIHByb3ZpZGVyOiZuYnNw OzxhIGhyZWY9Imh0dHA6Ly93d3cubG9jYXdlYi5jb20uYnIvcHJvZHV0b3MvY2xvdWQtc2VydmVy L3BsYW5vcy1wcm8uaHRtbCIgY2xhc3M9IiI+aHR0cDovL3d3dy5sb2Nhd2ViLmNvbS5ici9wcm9k dXRvcy9jbG91ZC1zZXJ2ZXIvcGxhbm9zLXByby5odG1sPC9hPiZuYnNwOy10ZWNobmljYWwgaW5m byBhbmQgcmF0ZXMgKHB0LUJSKTwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5FdmlkZW5jZSBvZiB5b3Vy IHN0YXR1cyBhcyBhIHVzZXIvZGlzdHJpYnV0b3Igb2YgWGVuOiAmbmJzcDtXZSBvZmZlciBhIGZ1 bGwgbWFuYWdlZCBob3N0aW5nIHNlcnZpY2UsIHRoZXJlZm9yZSB0aGUgdXNlciBjYW4gaW5zdGFs bCB0aGUgWGVuU2VydmVyIFRvb2wgZnJvbSB0aGUgYWRtaW5pc3RyYXRpdmUgcGFuZWwuIElmIGl0 IGlzIG5lY2Vzc2FyeSBJIGNhbiBzZW5kIGEgcHJpbnQgc2NyZWVuLjwvZGl2Pg0KPGRpdiBjbGFz cz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+SW5mb3JtYXRpb24gYWJv dXQgeW91ciBoYW5kbGluZyBvZiBzZWN1cml0eSBwcm9ibGVtczogT3VyIGN1c3RvbWVycyBjYW4g Z2V0dGluZyBpbiB0b3VjaCB0aHJvdWdoIHRoZSBhYnVzZSBkZXBhcnRtZW50ICg8YSBocmVmPSJt YWlsdG86YWJ1c2VAbG9jYXdiZS5jb20uYnIiIGNsYXNzPSIiPmFidXNlQGxvY2F3YmUuY29tLmJy PC9hPikuIEJlc2lkZXMgdGhpcyB3ZSBwcm92aWRlIHNvbWUgY2hhbm5lbHMgdG8gY29tbXVuaWNh dGUNCiB3aXRoIG91ciBjdXN0b21lcnMsIHN1Y2ggYXMgQ2hhdCwgRW1haWwgYW5kIHBvc3Qgb24g b3VyIG9mZmljaWFsIGJsb2cgKGkuZTombmJzcDs8YSBocmVmPSJodHRwOi8vYmxvZy5sb2Nhd2Vi LmNvbS5ici9zZWd1cmFuY2Evbm9zc28tcG9zaWNpb25hbWVudG8tYS1yZXNwZWl0by1kby1oZWFy dGJsZWVkLyIgY2xhc3M9IiI+aHR0cDovL2Jsb2cubG9jYXdlYi5jb20uYnIvc2VndXJhbmNhL25v c3NvLXBvc2ljaW9uYW1lbnRvLWEtcmVzcGVpdG8tZG8taGVhcnRibGVlZC88L2E+KS48L2Rpdj4N CjxkaXYgY2xhc3M9IiI+TW9yZSBpbmZvcm1hdGlvbiBhYm91dCBvdXIgcG9saWNpZXMgYXJlIGF2 YWlsYWJsZSBpbiB0aGUgY3VzdG9tZXIgY29udHJhY3QuIFBhZ2U6DQo8YSBocmVmPSJodHRwOi8v d3d3LmxvY2F3ZWIuY29tLmJyL3NvYnJlLWxvY2F3ZWIvY29udHJhdG9zLXBvbGl0aWNhcy5odG1s IiBjbGFzcz0iIj4NCmh0dHA6Ly93d3cubG9jYXdlYi5jb20uYnIvc29icmUtbG9jYXdlYi9jb250 cmF0b3MtcG9saXRpY2FzLmh0bWw8L2E+LCBMaW5rOiAmcXVvdDtDbG91ZCBDb21wdXRpbmcgZSBT ZXJ2aWRvcmVzIERlZGljYWRvcyZxdW90OzwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9 IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+SSByZWFkIHRoZSBwb2xpY3ksIHVuZGVyc3RhbmQg dGhlIHJlcXVpcmVtZW50cyB0byB0aGUgZW1iYXJnbyBwZXJpb2RzLCBhbmQgd2lsbCBob25vdXIg dGhlc2UgcmVxdWlyZW1lbnRzLiZuYnNwOyZuYnNwOzwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIg Y2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPlRoZSBzaW5n bGUgKG5vbi1wZXJzb25hbCkgZW1haWwgYWxpYXMgeW91IHdpc2ggYWRkZWQgdG8gdGhlIHByZWRp c2Nsb3N1cmUgbGlzdDoNCjxhIGhyZWY9Im1haWx0bzpzZWMtbGlkZXJlc0Bsb2Nhd2ViLmNvbS5i ciIgY2xhc3M9IiI+c2VjLWxpZGVyZXNAbG9jYXdlYi5jb20uYnI8L2E+LiBUaGlzIGlzIHJlYWQg anVzdCBmb3IgdGhyZWUgZW5naW5lZXJzIHJlc3BvbnNpYmxlIGZvciB2dWxuZXJhYmlsaXRpZXMg YW5hbHlzaXMuPC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9k aXY+DQo8ZGl2IGNsYXNzPSIiPlBsZWFzZSwgbGV0IG1lIGtub3cgaWYgc29tZSBhZGRpdGlvbmFs IGluZm9ybWF0aW9uIGlzIG5lZWRlZC48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIi Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPnJlZ2FyZHMsPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxi ciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YiBzdHlsZT0ib3JwaGFuczogMjsg dGV4dC1hbGlnbjogLXdlYmtpdC1hdXRvOyB3aWRvd3M6IDI7IGZvbnQtZmFtaWx5OiBDYWxpYnJp LCBzYW5zLXNlcmlmOyBmb250LXNpemU6IDExcHQ7IiBjbGFzcz0iIj48c3BhbiBzdHlsZT0iY29s b3I6IHJnYigzMSwgNzMsIDEyNSk7ICIgY2xhc3M9IiI+THVjYXMgVmlhbm5hPC9zcGFuPjwvYj48 L2Rpdj4NCjxkaXYgYXBwbGUtY29udGVudC1lZGl0ZWQ9InRydWUiIGNsYXNzPSIiPg0KPGRpdiBz dHlsZT0iY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlh bnQ6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsg bGluZS1oZWlnaHQ6IG5vcm1hbDsgb3JwaGFuczogMjsgdGV4dC1hbGlnbjogLXdlYmtpdC1hdXRv OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5v cm1hbDsgd2lkb3dzOiAyOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXNpemUtYWRq dXN0OiBhdXRvOyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IG1hcmdpbjogMGNtIDBj bSAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21h bicsIHNlcmlmOyAiIGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGlj YTsgICIgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMC4wMDAxcHQ7IGZv bnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7ICIgY2xhc3M9 IiI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgdGV4dC1hbGln bjogLXdlYmtpdC1hdXRvOyBjb2xvcjogcmdiKDMxLCA3MywgMTI1KTsiIGNsYXNzPSIiPkxvY2F3 ZWIg4oCTPGIgY2xhc3M9IiI+Jm5ic3A7PC9iPjwvc3Bhbj48YiBzdHlsZT0iZm9udC1zaXplOiAx MXB0OyB0ZXh0LWFsaWduOiAtd2Via2l0LWF1dG87IiBjbGFzcz0iIj48c3BhbiBzdHlsZT0iY29s b3I6IHJnYigzMSwgNzMsIDEyNSk7ICIgY2xhc3M9IiI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJjb2xvcjogcHVycGxlOyIgY2xhc3M9IiI+PGEgaHJlZj0iaHR0cDovL3d3dy5sb2Nhd2ViLmNv bS5ici8iIHN0eWxlPSJjb2xvcjogcHVycGxlOyAiIGNsYXNzPSIiPnd3dy5sb2Nhd2ViLmNvbS5i cjwvYT48L3NwYW4+PC9zcGFuPjwvYj48L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxi ciBjbGFzcz0iIj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_50814C7CF53348108E2443DAA9B08407locawebcombr_-- --===============1799794138930618316== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications --===============1799794138930618316==-- From predisclosure-applications-bounces@lists.xenproject.org Mon Mar 02 20:10:41 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Mon, 02 Mar 2015 20:10:41 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSWfo-0005LG-Uo; Mon, 02 Mar 2015 20:10:40 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSWfn-0005L6-JP for predisclosure-applications@lists.xenproject.org; Mon, 02 Mar 2015 20:10:40 +0000 Received: from [85.158.137.68] by server-17.bemta-3.messagelabs.com id 2B/C0-02896-EB3C4F45; Mon, 02 Mar 2015 20:10:38 +0000 X-Env-Sender: lucas.vianna@locaweb.com.br X-Msg-Ref: server-3.tower-31.messagelabs.com!1425327036!12422862!1 X-Originating-IP: [200.234.205.15] X-SpamReason: No, hits=0.3 required=7.0 tests=HTML_60_70,HTML_MESSAGE X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 19562 invoked from network); 2 Mar 2015 20:10:36 -0000 Received: from teeny0001-12.locaweb.com.br (HELO teeny0001-12.locaweb.com.br) (200.234.205.15) by server-3.tower-31.messagelabs.com with SMTP; 2 Mar 2015 20:10:36 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=lwita2014; d=locaweb.com.br; h=From:To:Subject:Date:Message-ID:Content-Type:MIME-Version; bh=M48R5R924e/t7kot5rrJ+abmtSJm2er8REBuT7YNW1A=; b=Y1QTX/QujHTXmU2OM6kSFDLdqe4IqoPjRYs4GrfbqsWpQhSuNWjg4iJdc3RGsKTUbriGNTLvq74k 09RwtslfNdbB+J6ee7MJa3lYe2+rGqK79nhTmq/Q+UzZc6SRYoPx0xXfXej1im62Ez2m5FXcsXB9 7yjS0ZlOERxOk2SvVEI= DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=lwita2014; d=locaweb.com.br; b=VAM9jYiM40clcMO4VqQFG9+B1dbOuoivQtT6EkAg/g3tcgCKaXf6R5fAb/B0xzkYTqxgCGGzK5DE e/mAmP60ROR093CNxogD50ta8epPj4Rrv2pChWzc0McIjMJq6kcZM1x0G+TE2zETj8tMOXepR1kV duUYoFQRqYN/Np29KX0=; Received: from teeny0002.correio.biz (127.0.0.1) by teeny0001-10.locaweb.com.br id huj0va1oiqck for ; Mon, 2 Mar 2015 17:02:59 -0300 (envelope-from ) Received: from outlook.locaweb.com.br (unknown [186.202.31.40]) by teeny0002.correio.biz (Postfix) with ESMTP id F244E20441 for ; Mon, 2 Mar 2015 17:02:58 -0300 (BRT) Received: from SRVEXCHMBX02.fabrica.locaweb.com.br ([fe80::b155:e372:b255:418d]) by LWHUBCAS-EX0003.fabrica.locaweb.com.br ([186.202.31.40]) with mapi id 14.03.0181.006; Mon, 2 Mar 2015 17:10:34 -0300 From: Lucas Vianna To: "predisclosure-applications@lists.xenproject.org" Thread-Topic: Xen Security Pre-disclosure list Thread-Index: AQHQVSTwFzL6nez/IkyBJTEz4CAftg== Date: Mon, 2 Mar 2015 20:10:33 +0000 Message-ID: <50814C7C-F533-4810-8E24-43DAA9B08407@locaweb.com.br> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [186.202.96.24] MIME-Version: 1.0 X-CMAE-Score: 0 X-CMAE-Analysis: v=2.1 cv=G4ySErU5 c=1 sm=1 tr=0 a=duZQY4qU6zIC89IGxEeLOQ==:117 a=VM7MXBOAAAAA:8 a=HMDWBQi7DlUA:10 a=xqWC_Br6kY4A:10 a=emO1SXQWCLwA:10 a=YSsXlP5BAAAA:8 a=VhHYrJf3AAAA:8 a=F5TrVGWVu87-H6ANeAEA:9 a=v_Li5vp7cJ_lTEd6:21 a=pJMm8cVgxjoATQwU:21 a=QEXdDO2ut3YA:10 a=k3XKj-ZGPP0A:10 a=sZSqGeW6BXUA:10 a=3GNa8BB1Bx8A:10 a=Eg7fh1eVDxFpNOuqxFgA:9 a=r5q-o000q5wg_kfI:21 a=5rcMpAq84ZdsAOck:21 a=lR_avZ3pykBYLlyO:21 a=_W_S_7VecoQA:10 Subject: [Predisclosure-applications] Xen Security Pre-disclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============1799794138930618316==" Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org --===============1799794138930618316== Content-Language: en-US Content-Type: multipart/alternative; boundary="_000_50814C7CF53348108E2443DAA9B08407locawebcombr_" --_000_50814C7CF53348108E2443DAA9B08407locawebcombr_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGksDQoNCndlIHdvdWxkIGxpa2UgdG8gYmUgaW5jbHVkZWQgb24gdGhlIHByZS1kaXNjbG9zdXJl IGxpc3QuDQoNCk5hbWU6IExvY2F3ZWINCkRvbWFpbiBuYW1lOiBsb2Nhd2ViLmNvbS5icjxodHRw Oi8vbG9jYXdlYi5jb20uYnI+IC8gcHVibGljY2xvdWQuY29tLmJyPGh0dHA6Ly9wdWJsaWNjbG91 ZC5jb20uYnI+DQpCcmllZiBkZXNjcmlwdGlvbjogTG9jYXdlYiBpcyBvbmUgb2YgdGhlIGJpZ2dl c3QgSG9zdGluZyBjb21wYW55IGluIEJyYXppbCwgcHJvdmlkaW5nIGRlZGljYXRlZCBhbmQgc2hh cmVkLWhvc3Rpbmcgc2VydmVycyB1c2luZyBYZW4gcGxhdGZvcm0gYXMgZGVmYXVsdC4NCg0KRXZp ZGVuY2Ugb2YgeW91ciBzdGF0dXMgYXMgYSBzZXJ2aWNlL3NvZnR3YXJlIHByb3ZpZGVyOiBodHRw Oi8vd3d3LmxvY2F3ZWIuY29tLmJyL3Byb2R1dG9zL2Nsb3VkLXNlcnZlci9wbGFub3MtcHJvLmh0 bWwgLXRlY2huaWNhbCBpbmZvIGFuZCByYXRlcyAocHQtQlIpDQpFdmlkZW5jZSBvZiB5b3VyIHN0 YXR1cyBhcyBhIHVzZXIvZGlzdHJpYnV0b3Igb2YgWGVuOiAgV2Ugb2ZmZXIgYSBmdWxsIG1hbmFn ZWQgaG9zdGluZyBzZXJ2aWNlLCB0aGVyZWZvcmUgdGhlIHVzZXIgY2FuIGluc3RhbGwgdGhlIFhl blNlcnZlciBUb29sIGZyb20gdGhlIGFkbWluaXN0cmF0aXZlIHBhbmVsLiBJZiBpdCBpcyBuZWNl c3NhcnkgSSBjYW4gc2VuZCBhIHByaW50IHNjcmVlbi4NCg0KSW5mb3JtYXRpb24gYWJvdXQgeW91 ciBoYW5kbGluZyBvZiBzZWN1cml0eSBwcm9ibGVtczogT3VyIGN1c3RvbWVycyBjYW4gZ2V0dGlu ZyBpbiB0b3VjaCB0aHJvdWdoIHRoZSBhYnVzZSBkZXBhcnRtZW50IChhYnVzZUBsb2Nhd2JlLmNv bS5icjxtYWlsdG86YWJ1c2VAbG9jYXdiZS5jb20uYnI+KS4gQmVzaWRlcyB0aGlzIHdlIHByb3Zp ZGUgc29tZSBjaGFubmVscyB0byBjb21tdW5pY2F0ZSB3aXRoIG91ciBjdXN0b21lcnMsIHN1Y2gg YXMgQ2hhdCwgRW1haWwgYW5kIHBvc3Qgb24gb3VyIG9mZmljaWFsIGJsb2cgKGkuZTogaHR0cDov L2Jsb2cubG9jYXdlYi5jb20uYnIvc2VndXJhbmNhL25vc3NvLXBvc2ljaW9uYW1lbnRvLWEtcmVz cGVpdG8tZG8taGVhcnRibGVlZC8pLg0KTW9yZSBpbmZvcm1hdGlvbiBhYm91dCBvdXIgcG9saWNp ZXMgYXJlIGF2YWlsYWJsZSBpbiB0aGUgY3VzdG9tZXIgY29udHJhY3QuIFBhZ2U6IGh0dHA6Ly93 d3cubG9jYXdlYi5jb20uYnIvc29icmUtbG9jYXdlYi9jb250cmF0b3MtcG9saXRpY2FzLmh0bWws IExpbms6ICJDbG91ZCBDb21wdXRpbmcgZSBTZXJ2aWRvcmVzIERlZGljYWRvcyINCg0KSSByZWFk IHRoZSBwb2xpY3ksIHVuZGVyc3RhbmQgdGhlIHJlcXVpcmVtZW50cyB0byB0aGUgZW1iYXJnbyBw ZXJpb2RzLCBhbmQgd2lsbCBob25vdXIgdGhlc2UgcmVxdWlyZW1lbnRzLg0KDQpUaGUgc2luZ2xl IChub24tcGVyc29uYWwpIGVtYWlsIGFsaWFzIHlvdSB3aXNoIGFkZGVkIHRvIHRoZSBwcmVkaXNj bG9zdXJlIGxpc3Q6IHNlYy1saWRlcmVzQGxvY2F3ZWIuY29tLmJyPG1haWx0bzpzZWMtbGlkZXJl c0Bsb2Nhd2ViLmNvbS5icj4uIFRoaXMgaXMgcmVhZCBqdXN0IGZvciB0aHJlZSBlbmdpbmVlcnMg cmVzcG9uc2libGUgZm9yIHZ1bG5lcmFiaWxpdGllcyBhbmFseXNpcy4NCg0KUGxlYXNlLCBsZXQg bWUga25vdyBpZiBzb21lIGFkZGl0aW9uYWwgaW5mb3JtYXRpb24gaXMgbmVlZGVkLg0KDQpyZWdh cmRzLA0KDQpMdWNhcyBWaWFubmENCkxvY2F3ZWIg4oCTIHd3dy5sb2Nhd2ViLmNvbS5icjxodHRw Oi8vd3d3LmxvY2F3ZWIuY29tLmJyLz4NCg0K --_000_50814C7CF53348108E2443DAA9B08407locawebcombr_ Content-Type: text/html; charset="utf-8" Content-ID: <55EA3399CA72B14BB5FCB9E5438BBA45@fabrica.locaweb.com.br> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KSGksDQo8ZGl2IGNsYXNzPSIiPjxi ciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj53ZSB3b3VsZCBsaWtlIHRvIGJlIGlu Y2x1ZGVkIG9uIHRoZSBwcmUtZGlzY2xvc3VyZSBsaXN0LjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48 YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+TmFtZTogTG9jYXdlYjwvZGl2Pg0K PGRpdiBjbGFzcz0iIj5Eb21haW4gbmFtZTogPGEgaHJlZj0iaHR0cDovL2xvY2F3ZWIuY29tLmJy IiBjbGFzcz0iIj5sb2Nhd2ViLmNvbS5icjwvYT4mbmJzcDsvDQo8YSBocmVmPSJodHRwOi8vcHVi bGljY2xvdWQuY29tLmJyIiBjbGFzcz0iIj5wdWJsaWNjbG91ZC5jb20uYnI8L2E+PC9kaXY+DQo8 ZGl2IGNsYXNzPSIiPkJyaWVmIGRlc2NyaXB0aW9uOiBMb2Nhd2ViIGlzIG9uZSBvZiB0aGUgYmln Z2VzdCBIb3N0aW5nIGNvbXBhbnkgaW4gQnJhemlsLCBwcm92aWRpbmcgZGVkaWNhdGVkIGFuZCBz aGFyZWQtaG9zdGluZyBzZXJ2ZXJzIHVzaW5nIFhlbiBwbGF0Zm9ybSBhcyBkZWZhdWx0LjwvZGl2 Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+RXZp ZGVuY2Ugb2YgeW91ciBzdGF0dXMgYXMgYSBzZXJ2aWNlL3NvZnR3YXJlIHByb3ZpZGVyOiZuYnNw OzxhIGhyZWY9Imh0dHA6Ly93d3cubG9jYXdlYi5jb20uYnIvcHJvZHV0b3MvY2xvdWQtc2VydmVy L3BsYW5vcy1wcm8uaHRtbCIgY2xhc3M9IiI+aHR0cDovL3d3dy5sb2Nhd2ViLmNvbS5ici9wcm9k dXRvcy9jbG91ZC1zZXJ2ZXIvcGxhbm9zLXByby5odG1sPC9hPiZuYnNwOy10ZWNobmljYWwgaW5m byBhbmQgcmF0ZXMgKHB0LUJSKTwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5FdmlkZW5jZSBvZiB5b3Vy IHN0YXR1cyBhcyBhIHVzZXIvZGlzdHJpYnV0b3Igb2YgWGVuOiAmbmJzcDtXZSBvZmZlciBhIGZ1 bGwgbWFuYWdlZCBob3N0aW5nIHNlcnZpY2UsIHRoZXJlZm9yZSB0aGUgdXNlciBjYW4gaW5zdGFs bCB0aGUgWGVuU2VydmVyIFRvb2wgZnJvbSB0aGUgYWRtaW5pc3RyYXRpdmUgcGFuZWwuIElmIGl0 IGlzIG5lY2Vzc2FyeSBJIGNhbiBzZW5kIGEgcHJpbnQgc2NyZWVuLjwvZGl2Pg0KPGRpdiBjbGFz cz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+SW5mb3JtYXRpb24gYWJv dXQgeW91ciBoYW5kbGluZyBvZiBzZWN1cml0eSBwcm9ibGVtczogT3VyIGN1c3RvbWVycyBjYW4g Z2V0dGluZyBpbiB0b3VjaCB0aHJvdWdoIHRoZSBhYnVzZSBkZXBhcnRtZW50ICg8YSBocmVmPSJt YWlsdG86YWJ1c2VAbG9jYXdiZS5jb20uYnIiIGNsYXNzPSIiPmFidXNlQGxvY2F3YmUuY29tLmJy PC9hPikuIEJlc2lkZXMgdGhpcyB3ZSBwcm92aWRlIHNvbWUgY2hhbm5lbHMgdG8gY29tbXVuaWNh dGUNCiB3aXRoIG91ciBjdXN0b21lcnMsIHN1Y2ggYXMgQ2hhdCwgRW1haWwgYW5kIHBvc3Qgb24g b3VyIG9mZmljaWFsIGJsb2cgKGkuZTombmJzcDs8YSBocmVmPSJodHRwOi8vYmxvZy5sb2Nhd2Vi LmNvbS5ici9zZWd1cmFuY2Evbm9zc28tcG9zaWNpb25hbWVudG8tYS1yZXNwZWl0by1kby1oZWFy dGJsZWVkLyIgY2xhc3M9IiI+aHR0cDovL2Jsb2cubG9jYXdlYi5jb20uYnIvc2VndXJhbmNhL25v c3NvLXBvc2ljaW9uYW1lbnRvLWEtcmVzcGVpdG8tZG8taGVhcnRibGVlZC88L2E+KS48L2Rpdj4N CjxkaXYgY2xhc3M9IiI+TW9yZSBpbmZvcm1hdGlvbiBhYm91dCBvdXIgcG9saWNpZXMgYXJlIGF2 YWlsYWJsZSBpbiB0aGUgY3VzdG9tZXIgY29udHJhY3QuIFBhZ2U6DQo8YSBocmVmPSJodHRwOi8v d3d3LmxvY2F3ZWIuY29tLmJyL3NvYnJlLWxvY2F3ZWIvY29udHJhdG9zLXBvbGl0aWNhcy5odG1s IiBjbGFzcz0iIj4NCmh0dHA6Ly93d3cubG9jYXdlYi5jb20uYnIvc29icmUtbG9jYXdlYi9jb250 cmF0b3MtcG9saXRpY2FzLmh0bWw8L2E+LCBMaW5rOiAmcXVvdDtDbG91ZCBDb21wdXRpbmcgZSBT ZXJ2aWRvcmVzIERlZGljYWRvcyZxdW90OzwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9 IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+SSByZWFkIHRoZSBwb2xpY3ksIHVuZGVyc3RhbmQg dGhlIHJlcXVpcmVtZW50cyB0byB0aGUgZW1iYXJnbyBwZXJpb2RzLCBhbmQgd2lsbCBob25vdXIg dGhlc2UgcmVxdWlyZW1lbnRzLiZuYnNwOyZuYnNwOzwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIg Y2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPlRoZSBzaW5n bGUgKG5vbi1wZXJzb25hbCkgZW1haWwgYWxpYXMgeW91IHdpc2ggYWRkZWQgdG8gdGhlIHByZWRp c2Nsb3N1cmUgbGlzdDoNCjxhIGhyZWY9Im1haWx0bzpzZWMtbGlkZXJlc0Bsb2Nhd2ViLmNvbS5i ciIgY2xhc3M9IiI+c2VjLWxpZGVyZXNAbG9jYXdlYi5jb20uYnI8L2E+LiBUaGlzIGlzIHJlYWQg anVzdCBmb3IgdGhyZWUgZW5naW5lZXJzIHJlc3BvbnNpYmxlIGZvciB2dWxuZXJhYmlsaXRpZXMg YW5hbHlzaXMuPC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9k aXY+DQo8ZGl2IGNsYXNzPSIiPlBsZWFzZSwgbGV0IG1lIGtub3cgaWYgc29tZSBhZGRpdGlvbmFs IGluZm9ybWF0aW9uIGlzIG5lZWRlZC48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIi Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPnJlZ2FyZHMsPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxi ciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YiBzdHlsZT0ib3JwaGFuczogMjsg dGV4dC1hbGlnbjogLXdlYmtpdC1hdXRvOyB3aWRvd3M6IDI7IGZvbnQtZmFtaWx5OiBDYWxpYnJp LCBzYW5zLXNlcmlmOyBmb250LXNpemU6IDExcHQ7IiBjbGFzcz0iIj48c3BhbiBzdHlsZT0iY29s b3I6IHJnYigzMSwgNzMsIDEyNSk7ICIgY2xhc3M9IiI+THVjYXMgVmlhbm5hPC9zcGFuPjwvYj48 L2Rpdj4NCjxkaXYgYXBwbGUtY29udGVudC1lZGl0ZWQ9InRydWUiIGNsYXNzPSIiPg0KPGRpdiBz dHlsZT0iY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlh bnQ6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsg bGluZS1oZWlnaHQ6IG5vcm1hbDsgb3JwaGFuczogMjsgdGV4dC1hbGlnbjogLXdlYmtpdC1hdXRv OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5v cm1hbDsgd2lkb3dzOiAyOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXNpemUtYWRq dXN0OiBhdXRvOyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IG1hcmdpbjogMGNtIDBj bSAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21h bicsIHNlcmlmOyAiIGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGlj YTsgICIgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMC4wMDAxcHQ7IGZv bnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7ICIgY2xhc3M9 IiI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgdGV4dC1hbGln bjogLXdlYmtpdC1hdXRvOyBjb2xvcjogcmdiKDMxLCA3MywgMTI1KTsiIGNsYXNzPSIiPkxvY2F3 ZWIg4oCTPGIgY2xhc3M9IiI+Jm5ic3A7PC9iPjwvc3Bhbj48YiBzdHlsZT0iZm9udC1zaXplOiAx MXB0OyB0ZXh0LWFsaWduOiAtd2Via2l0LWF1dG87IiBjbGFzcz0iIj48c3BhbiBzdHlsZT0iY29s b3I6IHJnYigzMSwgNzMsIDEyNSk7ICIgY2xhc3M9IiI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJjb2xvcjogcHVycGxlOyIgY2xhc3M9IiI+PGEgaHJlZj0iaHR0cDovL3d3dy5sb2Nhd2ViLmNv bS5ici8iIHN0eWxlPSJjb2xvcjogcHVycGxlOyAiIGNsYXNzPSIiPnd3dy5sb2Nhd2ViLmNvbS5i cjwvYT48L3NwYW4+PC9zcGFuPjwvYj48L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxi ciBjbGFzcz0iIj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_50814C7CF53348108E2443DAA9B08407locawebcombr_-- --===============1799794138930618316== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications --===============1799794138930618316==-- From predisclosure-applications-bounces@lists.xenproject.org Mon Mar 02 20:50:34 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Mon, 02 Mar 2015 20:50:34 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSXIP-0002TV-UM; Mon, 02 Mar 2015 20:50:33 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSXIO-0002TQ-Jv for predisclosure-applications@lists.xenproject.org; Mon, 02 Mar 2015 20:50:32 +0000 Received: from [85.158.139.211] by server-17.bemta-5.messagelabs.com id A9/D1-03132-71DC4F45; Mon, 02 Mar 2015 20:50:31 +0000 X-Env-Sender: security@rimuhosting.com X-Msg-Ref: server-11.tower-206.messagelabs.com!1425329430!8319494!1 X-Originating-IP: [206.123.102.5] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 7133 invoked from network); 2 Mar 2015 20:50:31 -0000 Received: from mail.rimuhosting.com (HELO mail.rimuhosting.com) (206.123.102.5) by server-11.tower-206.messagelabs.com with SMTP; 2 Mar 2015 20:50:31 -0000 Received: from mail.rimuhosting.com (localhost [127.0.0.1]) by mail.rimuhosting.com (Postfix) with ESMTP id 2D20B60787 for ; Mon, 2 Mar 2015 20:50:30 +0000 (UTC) Received: from pgb-mbp-retina.local (122-61-249-170.jetstream.xtra.co.nz [122.61.249.170]) by mail.rimuhosting.com (Postfix) with ESMTPSA id A9D74605D5 for ; Mon, 2 Mar 2015 20:50:29 +0000 (UTC) Message-ID: <54F4CD12.5010608@rimuhosting.com> Date: Tue, 03 Mar 2015 09:50:26 +1300 From: Peter Bryant User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: predisclosure-applications@lists.xenproject.org Subject: [Predisclosure-applications] Application for predisclosure list membership X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org Per http://www.xenproject.org/security-policy.html The name of your organization: Rimuhosting Ltd Domain name(s) which you use to provide Xen software/services: http://rimuhosting.com A brief description of why you fit the criteria: We are a public Xen-based hosting provider If not all of your products/services use Xen, a list of (some of) your products/services (or categories thereof) which do. All our virtual machine (http://launchtimevps.com) hosting options are Xen-based. Evidence of your status as a service/software provider: http://rimuhosting.com/order/v2orderstart.jsp Information about your handling of security problems: http://rimuhosting.com/terms.jsp#rrid-securitypolicy A statement to the effect that you have read this policy and agree to abide by the terms for inclusion in the list, specifically the requirements to regarding confidentiality during an embargo period We have read this policy and agree to abide by its terms for inclusion in the list. Specifically the requirements regarding confidentiality during the embargo period. The single (non-personal) email alias you wish added to the predisclosure list. Please use: security@rimuhosting.com Regards, Peter Bryant http://ri.mu Startups start here. DNS. Hosting. Web development. Email hosting. Offsite backups. Monitoring and alerting. _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Mon Mar 02 20:50:34 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Mon, 02 Mar 2015 20:50:34 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSXIP-0002TV-UM; Mon, 02 Mar 2015 20:50:33 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSXIO-0002TQ-Jv for predisclosure-applications@lists.xenproject.org; Mon, 02 Mar 2015 20:50:32 +0000 Received: from [85.158.139.211] by server-17.bemta-5.messagelabs.com id A9/D1-03132-71DC4F45; Mon, 02 Mar 2015 20:50:31 +0000 X-Env-Sender: security@rimuhosting.com X-Msg-Ref: server-11.tower-206.messagelabs.com!1425329430!8319494!1 X-Originating-IP: [206.123.102.5] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 7133 invoked from network); 2 Mar 2015 20:50:31 -0000 Received: from mail.rimuhosting.com (HELO mail.rimuhosting.com) (206.123.102.5) by server-11.tower-206.messagelabs.com with SMTP; 2 Mar 2015 20:50:31 -0000 Received: from mail.rimuhosting.com (localhost [127.0.0.1]) by mail.rimuhosting.com (Postfix) with ESMTP id 2D20B60787 for ; Mon, 2 Mar 2015 20:50:30 +0000 (UTC) Received: from pgb-mbp-retina.local (122-61-249-170.jetstream.xtra.co.nz [122.61.249.170]) by mail.rimuhosting.com (Postfix) with ESMTPSA id A9D74605D5 for ; Mon, 2 Mar 2015 20:50:29 +0000 (UTC) Message-ID: <54F4CD12.5010608@rimuhosting.com> Date: Tue, 03 Mar 2015 09:50:26 +1300 From: Peter Bryant User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: predisclosure-applications@lists.xenproject.org Subject: [Predisclosure-applications] Application for predisclosure list membership X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org Per http://www.xenproject.org/security-policy.html The name of your organization: Rimuhosting Ltd Domain name(s) which you use to provide Xen software/services: http://rimuhosting.com A brief description of why you fit the criteria: We are a public Xen-based hosting provider If not all of your products/services use Xen, a list of (some of) your products/services (or categories thereof) which do. All our virtual machine (http://launchtimevps.com) hosting options are Xen-based. Evidence of your status as a service/software provider: http://rimuhosting.com/order/v2orderstart.jsp Information about your handling of security problems: http://rimuhosting.com/terms.jsp#rrid-securitypolicy A statement to the effect that you have read this policy and agree to abide by the terms for inclusion in the list, specifically the requirements to regarding confidentiality during an embargo period We have read this policy and agree to abide by its terms for inclusion in the list. Specifically the requirements regarding confidentiality during the embargo period. The single (non-personal) email alias you wish added to the predisclosure list. Please use: security@rimuhosting.com Regards, Peter Bryant http://ri.mu Startups start here. DNS. Hosting. Web development. Email hosting. Offsite backups. Monitoring and alerting. _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Mon Mar 02 23:17:45 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Mon, 02 Mar 2015 23:17:45 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSZar-000313-GZ; Mon, 02 Mar 2015 23:17:45 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSZaq-00030T-7o for predisclosure-applications@lists.xenproject.org; Mon, 02 Mar 2015 23:17:44 +0000 Received: from [85.158.137.68] by server-12.bemta-3.messagelabs.com id D0/AB-02881-79FE4F45; Mon, 02 Mar 2015 23:17:43 +0000 X-Env-Sender: nathan@gt.net X-Msg-Ref: server-9.tower-31.messagelabs.com!1425338260!8666675!1 X-Originating-IP: [208.70.244.21] X-SpamReason: No, hits=0.8 required=7.0 tests=BODY_RANDOM_LONG, HTML_60_70,HTML_MESSAGE X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 2037 invoked from network); 2 Mar 2015 23:17:42 -0000 Received: from gossamer.nmsrv.com (HELO gossamer.nmsrv.com) (208.70.244.21) by server-9.tower-31.messagelabs.com with DHE-RSA-AES256-SHA encrypted SMTP; 2 Mar 2015 23:17:42 -0000 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=gt.net; h=from:to:subject :date:message-id:mime-version:content-type; s=mail; bh=dmGm/jL/W j9W4am+oKh0EJ54t74=; b=ccWH4EQZr2qVyFiEmK1FYNTXSonMQTW9J4FLwx3EE FTu18VKWYTlcOLBiRpQVzg3AiMBcMp38ubKYor1lNbM5u1DbWLPJxtpvRur1dcAB wMCYrBjkPrBCH+xhXOU5vpmFdicvbwNVJmAelybY1XFigCw2CSlGcoH5jFzNMSxB nM= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gt.net; h=from:to:subject :date:message-id:mime-version:content-type; q=dns; s=mail; b=d4k 9x1iDka+Q/HGEmYugkbBHqwZzZQNdXuEoNd+7LMpHmDTK/g2RWjCVCjSvUeK1QFi +KAWak/+e0YhwwsG4beDytrpwpcOK1PxV6S/XQGHw2iTiU3SKxQSI8KZ4TeIIQOb MEAH6vfNaCRqIGlT+ZlS0brcVqJthPmFQAgwpsAk= Received: (qmail 31305 invoked from network); 2 Mar 2015 23:17:38 -0000 X-AntiVirus: Clean Received: from gateway.gossamer-threads.com (HELO nathanwindows) (nathan@gt.net@208.70.247.145) by gossamer.nmsrv.com with ESMTPSA (DHE-RSA-AES256-GCM-SHA384 encrypted); 2 Mar 2015 23:17:38 -0000 From: "Nathan March" To: Date: Mon, 2 Mar 2015 15:17:35 -0800 Message-ID: <0df701d0553f$113ac830$33b05890$@gt.net> MIME-Version: 1.0 X-Mailer: Microsoft Outlook 15.0 Thread-Index: AdBVPnaRCXnaoMs5T7W7eBWzSwZdJQ== Content-Language: en-us Subject: [Predisclosure-applications] Pre-disclosure list application for gt.net X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============4143873700753775546==" Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org This is a multipart message in MIME format. --===============4143873700753775546== Content-Type: multipart/alternative; boundary="----=_NextPart_000_0DF8_01D054FC.0317AF40" Content-Language: en-us This is a multipart message in MIME format. ------=_NextPart_000_0DF8_01D054FC.0317AF40 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Hi, =20 Would like to apply for access to the predisclosure list please. =20 Name: Gossamer Threads Inc =20 Domain: https://gt.net/=20 =20 Description: We're a managed hosting company running approximately 100 = xen dom0's. We maintain our own packages / patchsets for most core apps = and as a managed provider are responsible for security (customers do not = get root). This includes xen, we build our own packages + deployments = from source onto gentoo (hence list access would make patch days much = easier + quicker to roll out) =20 Evidence of status: Our pricing varies as we design servers to meet = customer needs, but a typical fully managed VM is in the $250/month. = Client setups vary widely from single VMs to custom clouds where a = customer can spin up/down VMs on their reserved hypervisors at no cost. =20 Security handling: Typically this is just done via our support systems = in the rare event an issue is reported by a customer. Outside contact = typically comes into our abuse@gt.net address when that rarely happens = (we've very proactive about monitoring our IP space for any signs of = outgoing abusive traffic). =20 I've read and have no problem abiding by embargo rules, and as a member = of the security community understand the reasons :). I personally = subscribe to + monitor all the xen mailing lists, we also provide open = public mirrors at http://www.gossamer-threads.com/lists/xen/ =20 Alias to add: noc@gt.net =20 Let me know if you've got any questions. Thanks for the consideration! =20 - Nathan =20 -- Nathan March GT.net https://gt.net/ Tel: (604) 687-5804 Fax: (604) 687-5806 =20 ------=_NextPart_000_0DF8_01D054FC.0317AF40 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable

Hi,

 

Would like = to apply for access to the predisclosure list please.

 

Name: = Gossamer Threads Inc

 

Domain: https://gt.net/

 

Description: = We're a managed hosting company running approximately 100 xen dom0's. We = maintain our own packages / patchsets for most core apps and as a = managed provider are responsible for security (customers do not get = root). This includes xen, we build our own packages + deployments from = source onto gentoo (hence list access would make patch days much easier = + quicker to roll out)

 

Evidence of = status: Our pricing=C2=A0 varies as we design servers to meet customer = needs, but a typical fully managed VM is in the $250/month. Client = setups vary widely from single VMs to custom clouds where a customer can = spin up/down VMs on their reserved hypervisors at no = cost.

 

Security handling: Typically this is just done via our = support systems in the rare event an issue is reported by a customer. = Outside contact typically comes into our abuse@gt.net address when that = rarely happens (we've very proactive about monitoring our IP space for = any signs of outgoing abusive traffic).

 

I've read = and have no problem abiding by embargo rules, and as a member of the = security community understand the reasons :). I personally subscribe to = + monitor all the xen mailing lists, we also provide open public mirrors = at http://www.gossamer-threads.com/lists/xen/

 

Alias to = add: noc@gt.net

 

Let me know = if you've got any questions. Thanks for the = consideration!

 

- = Nathan

 

--

Nathan March = <nathan@gt.net>

GT.net = https://gt.net/

Tel: (604) 687-5804 = Fax: (604) 687-5806

 

------=_NextPart_000_0DF8_01D054FC.0317AF40-- --===============4143873700753775546== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications --===============4143873700753775546==-- From predisclosure-applications-bounces@lists.xenproject.org Mon Mar 02 23:17:45 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Mon, 02 Mar 2015 23:17:45 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSZar-000313-GZ; Mon, 02 Mar 2015 23:17:45 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSZaq-00030T-7o for predisclosure-applications@lists.xenproject.org; Mon, 02 Mar 2015 23:17:44 +0000 Received: from [85.158.137.68] by server-12.bemta-3.messagelabs.com id D0/AB-02881-79FE4F45; Mon, 02 Mar 2015 23:17:43 +0000 X-Env-Sender: nathan@gt.net X-Msg-Ref: server-9.tower-31.messagelabs.com!1425338260!8666675!1 X-Originating-IP: [208.70.244.21] X-SpamReason: No, hits=0.8 required=7.0 tests=BODY_RANDOM_LONG, HTML_60_70,HTML_MESSAGE X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 2037 invoked from network); 2 Mar 2015 23:17:42 -0000 Received: from gossamer.nmsrv.com (HELO gossamer.nmsrv.com) (208.70.244.21) by server-9.tower-31.messagelabs.com with DHE-RSA-AES256-SHA encrypted SMTP; 2 Mar 2015 23:17:42 -0000 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=gt.net; h=from:to:subject :date:message-id:mime-version:content-type; s=mail; bh=dmGm/jL/W j9W4am+oKh0EJ54t74=; b=ccWH4EQZr2qVyFiEmK1FYNTXSonMQTW9J4FLwx3EE FTu18VKWYTlcOLBiRpQVzg3AiMBcMp38ubKYor1lNbM5u1DbWLPJxtpvRur1dcAB wMCYrBjkPrBCH+xhXOU5vpmFdicvbwNVJmAelybY1XFigCw2CSlGcoH5jFzNMSxB nM= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gt.net; h=from:to:subject :date:message-id:mime-version:content-type; q=dns; s=mail; b=d4k 9x1iDka+Q/HGEmYugkbBHqwZzZQNdXuEoNd+7LMpHmDTK/g2RWjCVCjSvUeK1QFi +KAWak/+e0YhwwsG4beDytrpwpcOK1PxV6S/XQGHw2iTiU3SKxQSI8KZ4TeIIQOb MEAH6vfNaCRqIGlT+ZlS0brcVqJthPmFQAgwpsAk= Received: (qmail 31305 invoked from network); 2 Mar 2015 23:17:38 -0000 X-AntiVirus: Clean Received: from gateway.gossamer-threads.com (HELO nathanwindows) (nathan@gt.net@208.70.247.145) by gossamer.nmsrv.com with ESMTPSA (DHE-RSA-AES256-GCM-SHA384 encrypted); 2 Mar 2015 23:17:38 -0000 From: "Nathan March" To: Date: Mon, 2 Mar 2015 15:17:35 -0800 Message-ID: <0df701d0553f$113ac830$33b05890$@gt.net> MIME-Version: 1.0 X-Mailer: Microsoft Outlook 15.0 Thread-Index: AdBVPnaRCXnaoMs5T7W7eBWzSwZdJQ== Content-Language: en-us Subject: [Predisclosure-applications] Pre-disclosure list application for gt.net X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============4143873700753775546==" Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org This is a multipart message in MIME format. --===============4143873700753775546== Content-Type: multipart/alternative; boundary="----=_NextPart_000_0DF8_01D054FC.0317AF40" Content-Language: en-us This is a multipart message in MIME format. ------=_NextPart_000_0DF8_01D054FC.0317AF40 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Hi, =20 Would like to apply for access to the predisclosure list please. =20 Name: Gossamer Threads Inc =20 Domain: https://gt.net/=20 =20 Description: We're a managed hosting company running approximately 100 = xen dom0's. We maintain our own packages / patchsets for most core apps = and as a managed provider are responsible for security (customers do not = get root). This includes xen, we build our own packages + deployments = from source onto gentoo (hence list access would make patch days much = easier + quicker to roll out) =20 Evidence of status: Our pricing varies as we design servers to meet = customer needs, but a typical fully managed VM is in the $250/month. = Client setups vary widely from single VMs to custom clouds where a = customer can spin up/down VMs on their reserved hypervisors at no cost. =20 Security handling: Typically this is just done via our support systems = in the rare event an issue is reported by a customer. Outside contact = typically comes into our abuse@gt.net address when that rarely happens = (we've very proactive about monitoring our IP space for any signs of = outgoing abusive traffic). =20 I've read and have no problem abiding by embargo rules, and as a member = of the security community understand the reasons :). I personally = subscribe to + monitor all the xen mailing lists, we also provide open = public mirrors at http://www.gossamer-threads.com/lists/xen/ =20 Alias to add: noc@gt.net =20 Let me know if you've got any questions. Thanks for the consideration! =20 - Nathan =20 -- Nathan March GT.net https://gt.net/ Tel: (604) 687-5804 Fax: (604) 687-5806 =20 ------=_NextPart_000_0DF8_01D054FC.0317AF40 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable

Hi,

 

Would like = to apply for access to the predisclosure list please.

 

Name: = Gossamer Threads Inc

 

Domain: https://gt.net/

 

Description: = We're a managed hosting company running approximately 100 xen dom0's. We = maintain our own packages / patchsets for most core apps and as a = managed provider are responsible for security (customers do not get = root). This includes xen, we build our own packages + deployments from = source onto gentoo (hence list access would make patch days much easier = + quicker to roll out)

 

Evidence of = status: Our pricing=C2=A0 varies as we design servers to meet customer = needs, but a typical fully managed VM is in the $250/month. Client = setups vary widely from single VMs to custom clouds where a customer can = spin up/down VMs on their reserved hypervisors at no = cost.

 

Security handling: Typically this is just done via our = support systems in the rare event an issue is reported by a customer. = Outside contact typically comes into our abuse@gt.net address when that = rarely happens (we've very proactive about monitoring our IP space for = any signs of outgoing abusive traffic).

 

I've read = and have no problem abiding by embargo rules, and as a member of the = security community understand the reasons :). I personally subscribe to = + monitor all the xen mailing lists, we also provide open public mirrors = at http://www.gossamer-threads.com/lists/xen/

 

Alias to = add: noc@gt.net

 

Let me know = if you've got any questions. Thanks for the = consideration!

 

- = Nathan

 

--

Nathan March = <nathan@gt.net>

GT.net = https://gt.net/

Tel: (604) 687-5804 = Fax: (604) 687-5806

 

------=_NextPart_000_0DF8_01D054FC.0317AF40-- --===============4143873700753775546== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications --===============4143873700753775546==-- From predisclosure-applications-bounces@lists.xenproject.org Tue Mar 03 16:10:34 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Tue, 03 Mar 2015 16:10:34 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSpP0-000756-Bh; Tue, 03 Mar 2015 16:10:34 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSpOy-00074v-Ns for predisclosure-applications@lists.xenproject.org; Tue, 03 Mar 2015 16:10:32 +0000 Received: from [193.109.254.147] by server-8.bemta-14.messagelabs.com id 51/A3-03168-8FCD5F45; Tue, 03 Mar 2015 16:10:32 +0000 X-Env-Sender: ijc@xen.org X-Msg-Ref: server-6.tower-27.messagelabs.com!1425399031!14319351!1 X-Originating-IP: [212.110.190.137] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 16271 invoked from network); 3 Mar 2015 16:10:31 -0000 Received: from benson.vm.bytemark.co.uk (HELO benson.vm.bytemark.co.uk) (212.110.190.137) by server-6.tower-27.messagelabs.com with AES256-SHA encrypted SMTP; 3 Mar 2015 16:10:31 -0000 Received: from [185.25.64.249] (helo=kazak) by benson.vm.bytemark.co.uk with esmtpsa (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.72) (envelope-from ) id 1YSpOw-0000JI-Hd; Tue, 03 Mar 2015 16:10:30 +0000 Message-ID: <1425399029.25940.51.camel@xen.org> From: Ian Campbell To: Nathan March Date: Tue, 03 Mar 2015 16:10:29 +0000 In-Reply-To: <0df701d0553f$113ac830$33b05890$@gt.net> References: <0df701d0553f$113ac830$33b05890$@gt.net> X-Mailer: Evolution 3.12.9-1+b1 Mime-Version: 1.0 Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Pre-disclosure list application for gt.net X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org On Mon, 2015-03-02 at 15:17 -0800, Nathan March wrote: > Would like to apply for access to the predisclosure list please. Hi, Thank you for your application. The security policy[0] requires "Link(s) to current public web pages, belonging to your organisation," for each piece of information, which you have not provided here for * Evidence of your status as a service/software provider: * Evidence of your status as a user/distributor of Xen: * Information about your handling of security problems: Please can you provide these links so that we may continue to process your application. Note that as regards pricing the policy includes "or how to get a quote". Please could you also clarify the scope of your noc@ alias. It is intended that predisclosures go to a small team dedicated to handling incoming security issues, rather than a large team of system administrators. Thanks, Ian. [0] http://www.xenproject.org/security-policy.html _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Tue Mar 03 16:10:34 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Tue, 03 Mar 2015 16:10:34 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSpP0-000756-Bh; Tue, 03 Mar 2015 16:10:34 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSpOy-00074v-Ns for predisclosure-applications@lists.xenproject.org; Tue, 03 Mar 2015 16:10:32 +0000 Received: from [193.109.254.147] by server-8.bemta-14.messagelabs.com id 51/A3-03168-8FCD5F45; Tue, 03 Mar 2015 16:10:32 +0000 X-Env-Sender: ijc@xen.org X-Msg-Ref: server-6.tower-27.messagelabs.com!1425399031!14319351!1 X-Originating-IP: [212.110.190.137] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 16271 invoked from network); 3 Mar 2015 16:10:31 -0000 Received: from benson.vm.bytemark.co.uk (HELO benson.vm.bytemark.co.uk) (212.110.190.137) by server-6.tower-27.messagelabs.com with AES256-SHA encrypted SMTP; 3 Mar 2015 16:10:31 -0000 Received: from [185.25.64.249] (helo=kazak) by benson.vm.bytemark.co.uk with esmtpsa (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.72) (envelope-from ) id 1YSpOw-0000JI-Hd; Tue, 03 Mar 2015 16:10:30 +0000 Message-ID: <1425399029.25940.51.camel@xen.org> From: Ian Campbell To: Nathan March Date: Tue, 03 Mar 2015 16:10:29 +0000 In-Reply-To: <0df701d0553f$113ac830$33b05890$@gt.net> References: <0df701d0553f$113ac830$33b05890$@gt.net> X-Mailer: Evolution 3.12.9-1+b1 Mime-Version: 1.0 Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Pre-disclosure list application for gt.net X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org On Mon, 2015-03-02 at 15:17 -0800, Nathan March wrote: > Would like to apply for access to the predisclosure list please. Hi, Thank you for your application. The security policy[0] requires "Link(s) to current public web pages, belonging to your organisation," for each piece of information, which you have not provided here for * Evidence of your status as a service/software provider: * Evidence of your status as a user/distributor of Xen: * Information about your handling of security problems: Please can you provide these links so that we may continue to process your application. Note that as regards pricing the policy includes "or how to get a quote". Please could you also clarify the scope of your noc@ alias. It is intended that predisclosures go to a small team dedicated to handling incoming security issues, rather than a large team of system administrators. Thanks, Ian. [0] http://www.xenproject.org/security-policy.html _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Tue Mar 03 16:10:37 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Tue, 03 Mar 2015 16:10:37 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSpP3-00075d-CV; Tue, 03 Mar 2015 16:10:37 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSpP2-00075P-5w for predisclosure-applications@lists.xenproject.org; Tue, 03 Mar 2015 16:10:36 +0000 Received: from [85.158.139.211] by server-1.bemta-5.messagelabs.com id 62/54-25903-BFCD5F45; Tue, 03 Mar 2015 16:10:35 +0000 X-Env-Sender: ijc@xen.org X-Msg-Ref: server-5.tower-206.messagelabs.com!1425399033!12679870!1 X-Originating-IP: [212.110.190.137] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 457 invoked from network); 3 Mar 2015 16:10:34 -0000 Received: from benson.vm.bytemark.co.uk (HELO benson.vm.bytemark.co.uk) (212.110.190.137) by server-5.tower-206.messagelabs.com with AES256-SHA encrypted SMTP; 3 Mar 2015 16:10:34 -0000 Received: from [185.25.64.249] (helo=kazak) by benson.vm.bytemark.co.uk with esmtpsa (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.72) (envelope-from ) id 1YSpOy-0000JN-Nc; Tue, 03 Mar 2015 16:10:32 +0000 Message-ID: <1425399031.25940.52.camel@xen.org> From: Ian Campbell To: Lucas Vianna Date: Tue, 03 Mar 2015 16:10:31 +0000 In-Reply-To: <50814C7C-F533-4810-8E24-43DAA9B08407@locaweb.com.br> References: <50814C7C-F533-4810-8E24-43DAA9B08407@locaweb.com.br> X-Mailer: Evolution 3.12.9-1+b1 Mime-Version: 1.0 Cc: "predisclosure-applications@lists.xenproject.org" Subject: Re: [Predisclosure-applications] Xen Security Pre-disclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org On Mon, 2015-03-02 at 20:10 +0000, Lucas Vianna wrote: > we would like to be included on the pre-disclosure list. Hi, Thank you for your application. The security policy[0] requires "Link(s) to current public web pages, belonging to your organisation," for each piece of information. This is missing in the case of "Evidence of your status as a user/distributor of Xen". The policy also says "If the pages are long and/or PDFs are involved, your email should say which part of the pages and documents are relevant." which is particularly relevant when it is necessary for us to use a translation service. Please could you let us know which section of your "Cloud Computing e Servidores Dedicados" document contains: Your invitation to members of the public, who discover security problems with your products/services, to report them in confidence to you;" and Specifically, the contact information (email addresses or other contact instructions) which such a member of the public should use. Please can you provide this information so that we may continue to process your application. Thanks, Ian. [0] http://www.xenproject.org/security-policy.html _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Tue Mar 03 16:10:37 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Tue, 03 Mar 2015 16:10:37 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSpP3-00075d-CV; Tue, 03 Mar 2015 16:10:37 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSpP2-00075P-5w for predisclosure-applications@lists.xenproject.org; Tue, 03 Mar 2015 16:10:36 +0000 Received: from [85.158.139.211] by server-1.bemta-5.messagelabs.com id 62/54-25903-BFCD5F45; Tue, 03 Mar 2015 16:10:35 +0000 X-Env-Sender: ijc@xen.org X-Msg-Ref: server-5.tower-206.messagelabs.com!1425399033!12679870!1 X-Originating-IP: [212.110.190.137] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 457 invoked from network); 3 Mar 2015 16:10:34 -0000 Received: from benson.vm.bytemark.co.uk (HELO benson.vm.bytemark.co.uk) (212.110.190.137) by server-5.tower-206.messagelabs.com with AES256-SHA encrypted SMTP; 3 Mar 2015 16:10:34 -0000 Received: from [185.25.64.249] (helo=kazak) by benson.vm.bytemark.co.uk with esmtpsa (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.72) (envelope-from ) id 1YSpOy-0000JN-Nc; Tue, 03 Mar 2015 16:10:32 +0000 Message-ID: <1425399031.25940.52.camel@xen.org> From: Ian Campbell To: Lucas Vianna Date: Tue, 03 Mar 2015 16:10:31 +0000 In-Reply-To: <50814C7C-F533-4810-8E24-43DAA9B08407@locaweb.com.br> References: <50814C7C-F533-4810-8E24-43DAA9B08407@locaweb.com.br> X-Mailer: Evolution 3.12.9-1+b1 Mime-Version: 1.0 Cc: "predisclosure-applications@lists.xenproject.org" Subject: Re: [Predisclosure-applications] Xen Security Pre-disclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org On Mon, 2015-03-02 at 20:10 +0000, Lucas Vianna wrote: > we would like to be included on the pre-disclosure list. Hi, Thank you for your application. The security policy[0] requires "Link(s) to current public web pages, belonging to your organisation," for each piece of information. This is missing in the case of "Evidence of your status as a user/distributor of Xen". The policy also says "If the pages are long and/or PDFs are involved, your email should say which part of the pages and documents are relevant." which is particularly relevant when it is necessary for us to use a translation service. Please could you let us know which section of your "Cloud Computing e Servidores Dedicados" document contains: Your invitation to members of the public, who discover security problems with your products/services, to report them in confidence to you;" and Specifically, the contact information (email addresses or other contact instructions) which such a member of the public should use. Please can you provide this information so that we may continue to process your application. Thanks, Ian. [0] http://www.xenproject.org/security-policy.html _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Tue Mar 03 16:10:38 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Tue, 03 Mar 2015 16:10:38 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSpP4-000761-DD; Tue, 03 Mar 2015 16:10:38 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSpP2-00075Y-Q9 for predisclosure-applications@lists.xenproject.org; Tue, 03 Mar 2015 16:10:36 +0000 Received: from [85.158.139.211] by server-4.bemta-5.messagelabs.com id 84/53-03164-CFCD5F45; Tue, 03 Mar 2015 16:10:36 +0000 X-Env-Sender: ijc@xen.org X-Msg-Ref: server-15.tower-206.messagelabs.com!1425399035!9347910!1 X-Originating-IP: [212.110.190.137] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 32316 invoked from network); 3 Mar 2015 16:10:35 -0000 Received: from benson.vm.bytemark.co.uk (HELO benson.vm.bytemark.co.uk) (212.110.190.137) by server-15.tower-206.messagelabs.com with AES256-SHA encrypted SMTP; 3 Mar 2015 16:10:35 -0000 Received: from [185.25.64.249] (helo=kazak) by benson.vm.bytemark.co.uk with esmtpsa (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.72) (envelope-from ) id 1YSpP0-0000JS-RP; Tue, 03 Mar 2015 16:10:34 +0000 Message-ID: <1425399033.25940.53.camel@xen.org> From: Ian Campbell To: Bernard Grymonpon Date: Tue, 03 Mar 2015 16:10:33 +0000 In-Reply-To: References: X-Mailer: Evolution 3.12.9-1+b1 Mime-Version: 1.0 Cc: predisclosure-applications@lists.xenproject.org, Frank Louwers Subject: Re: [Predisclosure-applications] Inclusion in the Xen Security pre-disclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org On Mon, 2015-03-02 at 17:05 +0100, Bernard Grymonpon wrote: > we would like to be included in the Xen pre-disclosure list. Thank you for your application. The security policy[0] requires "Link(s) to current public web pages, belonging to your organisation," for each piece of information. Please could you point us to the page which describes how one can obtain a quote from you. With regards to "Your invitation to members of the public, who discover security problems with your products/services, to report them in confidence to you;" and "Specifically, the contact information (email addresses or other contact instructions) which such a member of the public should use." please can you point us to such a page. I'm afraid that the policy requires this. Please can you provide this information so that we may continue to process your application. Please could you also clarify the scope of your tech@ alias. It is intended that predisclosures go to a small team dedicated to handling incoming security issues, rather than a large team of system administrators. Thanks, Ian. [0] http://www.xenproject.org/security-policy.html _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Tue Mar 03 16:10:38 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Tue, 03 Mar 2015 16:10:38 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSpP4-000761-DD; Tue, 03 Mar 2015 16:10:38 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSpP2-00075Y-Q9 for predisclosure-applications@lists.xenproject.org; Tue, 03 Mar 2015 16:10:36 +0000 Received: from [85.158.139.211] by server-4.bemta-5.messagelabs.com id 84/53-03164-CFCD5F45; Tue, 03 Mar 2015 16:10:36 +0000 X-Env-Sender: ijc@xen.org X-Msg-Ref: server-15.tower-206.messagelabs.com!1425399035!9347910!1 X-Originating-IP: [212.110.190.137] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 32316 invoked from network); 3 Mar 2015 16:10:35 -0000 Received: from benson.vm.bytemark.co.uk (HELO benson.vm.bytemark.co.uk) (212.110.190.137) by server-15.tower-206.messagelabs.com with AES256-SHA encrypted SMTP; 3 Mar 2015 16:10:35 -0000 Received: from [185.25.64.249] (helo=kazak) by benson.vm.bytemark.co.uk with esmtpsa (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.72) (envelope-from ) id 1YSpP0-0000JS-RP; Tue, 03 Mar 2015 16:10:34 +0000 Message-ID: <1425399033.25940.53.camel@xen.org> From: Ian Campbell To: Bernard Grymonpon Date: Tue, 03 Mar 2015 16:10:33 +0000 In-Reply-To: References: X-Mailer: Evolution 3.12.9-1+b1 Mime-Version: 1.0 Cc: predisclosure-applications@lists.xenproject.org, Frank Louwers Subject: Re: [Predisclosure-applications] Inclusion in the Xen Security pre-disclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org On Mon, 2015-03-02 at 17:05 +0100, Bernard Grymonpon wrote: > we would like to be included in the Xen pre-disclosure list. Thank you for your application. The security policy[0] requires "Link(s) to current public web pages, belonging to your organisation," for each piece of information. Please could you point us to the page which describes how one can obtain a quote from you. With regards to "Your invitation to members of the public, who discover security problems with your products/services, to report them in confidence to you;" and "Specifically, the contact information (email addresses or other contact instructions) which such a member of the public should use." please can you point us to such a page. I'm afraid that the policy requires this. Please can you provide this information so that we may continue to process your application. Please could you also clarify the scope of your tech@ alias. It is intended that predisclosures go to a small team dedicated to handling incoming security issues, rather than a large team of system administrators. Thanks, Ian. [0] http://www.xenproject.org/security-policy.html _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Tue Mar 03 16:10:40 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Tue, 03 Mar 2015 16:10:40 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSpP6-00076j-E0; Tue, 03 Mar 2015 16:10:40 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSpP5-00076I-B8 for predisclosure-applications@lists.xenproject.org; Tue, 03 Mar 2015 16:10:39 +0000 Received: from [85.158.137.68] by server-17.bemta-3.messagelabs.com id 00/03-02896-EFCD5F45; Tue, 03 Mar 2015 16:10:38 +0000 X-Env-Sender: ijc@xen.org X-Msg-Ref: server-5.tower-31.messagelabs.com!1425399037!12739259!1 X-Originating-IP: [212.110.190.137] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 648 invoked from network); 3 Mar 2015 16:10:37 -0000 Received: from benson.vm.bytemark.co.uk (HELO benson.vm.bytemark.co.uk) (212.110.190.137) by server-5.tower-31.messagelabs.com with AES256-SHA encrypted SMTP; 3 Mar 2015 16:10:37 -0000 Received: from [185.25.64.249] (helo=kazak) by benson.vm.bytemark.co.uk with esmtpsa (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.72) (envelope-from ) id 1YSpP3-0000JX-7k; Tue, 03 Mar 2015 16:10:37 +0000 Message-ID: <1425399036.25940.54.camel@xen.org> From: Ian Campbell To: Peter Bryant Date: Tue, 03 Mar 2015 16:10:36 +0000 In-Reply-To: <54F4CD12.5010608@rimuhosting.com> References: <54F4CD12.5010608@rimuhosting.com> X-Mailer: Evolution 3.12.9-1+b1 Mime-Version: 1.0 Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Application for predisclosure list membership X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org On Tue, 2015-03-03 at 09:50 +1300, Peter Bryant wrote: > > Please use: > > security@rimuhosting.com Thanks. Your application appears to all be in order and you have been subscribed to the predisclosure list. I have sent copies of the existing embargoed issues 119, 120, 121, 122 and 123. _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Tue Mar 03 16:10:40 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Tue, 03 Mar 2015 16:10:40 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSpP6-00076j-E0; Tue, 03 Mar 2015 16:10:40 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSpP5-00076I-B8 for predisclosure-applications@lists.xenproject.org; Tue, 03 Mar 2015 16:10:39 +0000 Received: from [85.158.137.68] by server-17.bemta-3.messagelabs.com id 00/03-02896-EFCD5F45; Tue, 03 Mar 2015 16:10:38 +0000 X-Env-Sender: ijc@xen.org X-Msg-Ref: server-5.tower-31.messagelabs.com!1425399037!12739259!1 X-Originating-IP: [212.110.190.137] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 648 invoked from network); 3 Mar 2015 16:10:37 -0000 Received: from benson.vm.bytemark.co.uk (HELO benson.vm.bytemark.co.uk) (212.110.190.137) by server-5.tower-31.messagelabs.com with AES256-SHA encrypted SMTP; 3 Mar 2015 16:10:37 -0000 Received: from [185.25.64.249] (helo=kazak) by benson.vm.bytemark.co.uk with esmtpsa (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.72) (envelope-from ) id 1YSpP3-0000JX-7k; Tue, 03 Mar 2015 16:10:37 +0000 Message-ID: <1425399036.25940.54.camel@xen.org> From: Ian Campbell To: Peter Bryant Date: Tue, 03 Mar 2015 16:10:36 +0000 In-Reply-To: <54F4CD12.5010608@rimuhosting.com> References: <54F4CD12.5010608@rimuhosting.com> X-Mailer: Evolution 3.12.9-1+b1 Mime-Version: 1.0 Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Application for predisclosure list membership X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org On Tue, 2015-03-03 at 09:50 +1300, Peter Bryant wrote: > > Please use: > > security@rimuhosting.com Thanks. Your application appears to all be in order and you have been subscribed to the predisclosure list. I have sent copies of the existing embargoed issues 119, 120, 121, 122 and 123. _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Tue Mar 03 16:10:43 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Tue, 03 Mar 2015 16:10:43 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSpP9-00077j-Er; Tue, 03 Mar 2015 16:10:43 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSpP7-000775-Ib for predisclosure-applications@lists.xenproject.org; Tue, 03 Mar 2015 16:10:41 +0000 Received: from [85.158.139.211] by server-3.bemta-5.messagelabs.com id F8/5B-02994-00DD5F45; Tue, 03 Mar 2015 16:10:40 +0000 X-Env-Sender: ijc@xen.org X-Msg-Ref: server-7.tower-206.messagelabs.com!1425399040!12740930!1 X-Originating-IP: [212.110.190.137] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 22512 invoked from network); 3 Mar 2015 16:10:40 -0000 Received: from benson.vm.bytemark.co.uk (HELO benson.vm.bytemark.co.uk) (212.110.190.137) by server-7.tower-206.messagelabs.com with AES256-SHA encrypted SMTP; 3 Mar 2015 16:10:40 -0000 Received: from [185.25.64.249] (helo=kazak) by benson.vm.bytemark.co.uk with esmtpsa (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.72) (envelope-from ) id 1YSpP5-0000Jc-RW; Tue, 03 Mar 2015 16:10:40 +0000 Message-ID: <1425399038.25940.55.camel@xen.org> From: Ian Campbell To: Nathaniel Daiger Date: Tue, 03 Mar 2015 16:10:38 +0000 In-Reply-To: <718EDFE6-E9AC-4455-8DF7-54D990E6E4AA@chunkhost.com> References: <718EDFE6-E9AC-4455-8DF7-54D990E6E4AA@chunkhost.com> X-Mailer: Evolution 3.12.9-1+b1 Mime-Version: 1.0 Cc: predisclosure-applications@lists.xenproject.org, security@chunkhost.com Subject: Re: [Predisclosure-applications] ChunkHost Application X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org On Mon, 2015-03-02 at 11:40 -0800, Nathaniel Daiger wrote: > - The single (non-personal) email alias you wish added to the > predisclosure list. > > security@chunkhost.com Thanks. Your application appears to all be in order and you have been subscribed to the predisclosure list. I have sent copies of the existing embargoed issues 119, 120, 121, 122 and 123. _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Tue Mar 03 16:10:43 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Tue, 03 Mar 2015 16:10:43 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSpP9-00077j-Er; Tue, 03 Mar 2015 16:10:43 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSpP7-000775-Ib for predisclosure-applications@lists.xenproject.org; Tue, 03 Mar 2015 16:10:41 +0000 Received: from [85.158.139.211] by server-3.bemta-5.messagelabs.com id F8/5B-02994-00DD5F45; Tue, 03 Mar 2015 16:10:40 +0000 X-Env-Sender: ijc@xen.org X-Msg-Ref: server-7.tower-206.messagelabs.com!1425399040!12740930!1 X-Originating-IP: [212.110.190.137] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 22512 invoked from network); 3 Mar 2015 16:10:40 -0000 Received: from benson.vm.bytemark.co.uk (HELO benson.vm.bytemark.co.uk) (212.110.190.137) by server-7.tower-206.messagelabs.com with AES256-SHA encrypted SMTP; 3 Mar 2015 16:10:40 -0000 Received: from [185.25.64.249] (helo=kazak) by benson.vm.bytemark.co.uk with esmtpsa (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.72) (envelope-from ) id 1YSpP5-0000Jc-RW; Tue, 03 Mar 2015 16:10:40 +0000 Message-ID: <1425399038.25940.55.camel@xen.org> From: Ian Campbell To: Nathaniel Daiger Date: Tue, 03 Mar 2015 16:10:38 +0000 In-Reply-To: <718EDFE6-E9AC-4455-8DF7-54D990E6E4AA@chunkhost.com> References: <718EDFE6-E9AC-4455-8DF7-54D990E6E4AA@chunkhost.com> X-Mailer: Evolution 3.12.9-1+b1 Mime-Version: 1.0 Cc: predisclosure-applications@lists.xenproject.org, security@chunkhost.com Subject: Re: [Predisclosure-applications] ChunkHost Application X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org On Mon, 2015-03-02 at 11:40 -0800, Nathaniel Daiger wrote: > - The single (non-personal) email alias you wish added to the > predisclosure list. > > security@chunkhost.com Thanks. Your application appears to all be in order and you have been subscribed to the predisclosure list. I have sent copies of the existing embargoed issues 119, 120, 121, 122 and 123. _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Tue Mar 03 17:56:36 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Tue, 03 Mar 2015 17:56:36 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSr3c-00039P-RM; Tue, 03 Mar 2015 17:56:36 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSr3b-00039K-L7 for predisclosure-applications@lists.xenproject.org; Tue, 03 Mar 2015 17:56:35 +0000 Received: from [85.158.137.68] by server-1.bemta-3.messagelabs.com id 6B/7C-10942-2D5F5F45; Tue, 03 Mar 2015 17:56:34 +0000 X-Env-Sender: gjo@google.com X-Msg-Ref: server-11.tower-31.messagelabs.com!1425405393!12749817!1 X-Originating-IP: [209.85.220.178] X-SpamReason: No, hits=0.8 required=7.0 tests=BODY_RANDOM_LONG, RCVD_BY_IP X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 27027 invoked from network); 3 Mar 2015 17:56:34 -0000 Received: from mail-vc0-f178.google.com (HELO mail-vc0-f178.google.com) (209.85.220.178) by server-11.tower-31.messagelabs.com with RC4-SHA encrypted SMTP; 3 Mar 2015 17:56:34 -0000 Received: by mail-vc0-f178.google.com with SMTP id hq11so13840678vcb.9 for ; Tue, 03 Mar 2015 09:56:32 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:date:message-id:subject:from:to:cc:content-type; bh=YP0cdFBOzUsRn1GWdGy5YO8BbUvr3nyl69q4mFxev1Y=; b=GGjRQfRCIG8e+4PGdLihVlyW6XztQx/SpkBHomY1A5yC3cevDHpwIdC6ui5fC/CoRf kA8E4hkPjtR5Neppv264Wxs1YXuN2J/bP3Yti2Vy8BJ812EGx0LF2OajiOX8O7K7QWbY R6LO9IgA77zhqn9wiX/UQ87K0/CYzDSiqTQJL2F7hg9XciYQ7xMd/UYA9s6Y2xCU4/+u EsV9jyGpCr206ZaIOunLP+P9JooP5IHf6C87RYOm1Ra8EIAxQKWfwtHm/1dzFlRQyPZA 9P8vGfOQ9wg5NRV2cSfzqTjd6d5iVB0zXrIQnSnwnLvE3g7AyigWMM8Lmw7m/Kd1ZT+O CNsQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:date:message-id:subject:from:to:cc :content-type; bh=YP0cdFBOzUsRn1GWdGy5YO8BbUvr3nyl69q4mFxev1Y=; b=mfMCI6ilkjB38qKxPgYzwh8DDYekrYaggCD2aIwrZHdRXSF2t1UyyqEIPQ99hbXQpb lAvQ2gx91SefnzZMGRDTKZheQdC0jmgq9VW9QKjgcBt+0VasLTXM81kX4Fp39SKwxb9w w+/oZmTK3XDwp8IwHkk5bp3EkQsdMVfcOXp2lzME6e46LhKgBN/ope0WP+KmgL/TaEd+ KyZU+drVPQ+UjWnSyQzhwyDnbFslBlZ3wezVZOXBd0BsWtTYhPRt35PuNWJuCzvoIhuM 0TfDcYrCKHoQBKs/ZL0tMeQLGhi1md008vJz24uAPPq5Z54K0FKOuhwPuY8nhWZXR1DF KovA== X-Gm-Message-State: ALoCoQm4TMkBF2TT7oQWCPbTZE1cds9UuQlg7yO4eJm81dfgy9Ma2h4fkczrAZJ2qSNL9MDpETSg MIME-Version: 1.0 X-Received: by 10.52.176.1 with SMTP id ce1mr4814848vdc.63.1425405391993; Tue, 03 Mar 2015 09:56:31 -0800 (PST) Received: by 10.52.181.73 with HTTP; Tue, 3 Mar 2015 09:56:31 -0800 (PST) Date: Tue, 3 Mar 2015 17:56:31 +0000 Message-ID: From: Gerard Oskamp To: predisclosure-applications@lists.xenproject.org Cc: Guido Trotter , xen-security-advisory Subject: [Predisclosure-applications] Google pre-disclosure application X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org Hi, Per the application procedure published at http://www.xenproject.org/security-policy.html, I'd like to request inclusion of Google on the pre-disclosure list. We have a large internal deployment of Xen virtual machines, mentioned at https://code.google.com/p/ganeti/wiki/GanetiFAQ#How_is_Ganeti_used_internally_at_Google? . We also develop Ganeti (http://www.ganeti.org/), an open-source cluster virtual server management software tool, which has had support for Xen since its first open source release in 2007. Proof of ongoing, active development can be seen in its Git repository at http://git.ganeti.org/?p=ganeti.git;a=summary. Finally, we're also a member of the Xen project (http://www.xenproject.org/project-members/59-google.html). Information about our handling of security problems and how to report them can be found at https://www.google.com/intl/en/about/company/security.html. We agree to the terms as listed in the Xen security policy for inclusion on this list, and will keep security advisories confidential during the embargo period as requested. Please use xen-security-advisory@google.com (a dedicated alias only available to employees directly involved in maintaining our Xen fleet and its security) for the pre-disclosure list. I believe this satisfies all requirements listed for inclusion, please let me know if there is anything unclear or missing. Thank you for your consideration, Gerard Oskamp Ganeti SRE Google _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Tue Mar 03 17:56:36 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Tue, 03 Mar 2015 17:56:36 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSr3c-00039P-RM; Tue, 03 Mar 2015 17:56:36 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSr3b-00039K-L7 for predisclosure-applications@lists.xenproject.org; Tue, 03 Mar 2015 17:56:35 +0000 Received: from [85.158.137.68] by server-1.bemta-3.messagelabs.com id 6B/7C-10942-2D5F5F45; Tue, 03 Mar 2015 17:56:34 +0000 X-Env-Sender: gjo@google.com X-Msg-Ref: server-11.tower-31.messagelabs.com!1425405393!12749817!1 X-Originating-IP: [209.85.220.178] X-SpamReason: No, hits=0.8 required=7.0 tests=BODY_RANDOM_LONG, RCVD_BY_IP X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 27027 invoked from network); 3 Mar 2015 17:56:34 -0000 Received: from mail-vc0-f178.google.com (HELO mail-vc0-f178.google.com) (209.85.220.178) by server-11.tower-31.messagelabs.com with RC4-SHA encrypted SMTP; 3 Mar 2015 17:56:34 -0000 Received: by mail-vc0-f178.google.com with SMTP id hq11so13840678vcb.9 for ; Tue, 03 Mar 2015 09:56:32 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:date:message-id:subject:from:to:cc:content-type; bh=YP0cdFBOzUsRn1GWdGy5YO8BbUvr3nyl69q4mFxev1Y=; b=GGjRQfRCIG8e+4PGdLihVlyW6XztQx/SpkBHomY1A5yC3cevDHpwIdC6ui5fC/CoRf kA8E4hkPjtR5Neppv264Wxs1YXuN2J/bP3Yti2Vy8BJ812EGx0LF2OajiOX8O7K7QWbY R6LO9IgA77zhqn9wiX/UQ87K0/CYzDSiqTQJL2F7hg9XciYQ7xMd/UYA9s6Y2xCU4/+u EsV9jyGpCr206ZaIOunLP+P9JooP5IHf6C87RYOm1Ra8EIAxQKWfwtHm/1dzFlRQyPZA 9P8vGfOQ9wg5NRV2cSfzqTjd6d5iVB0zXrIQnSnwnLvE3g7AyigWMM8Lmw7m/Kd1ZT+O CNsQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:date:message-id:subject:from:to:cc :content-type; bh=YP0cdFBOzUsRn1GWdGy5YO8BbUvr3nyl69q4mFxev1Y=; b=mfMCI6ilkjB38qKxPgYzwh8DDYekrYaggCD2aIwrZHdRXSF2t1UyyqEIPQ99hbXQpb lAvQ2gx91SefnzZMGRDTKZheQdC0jmgq9VW9QKjgcBt+0VasLTXM81kX4Fp39SKwxb9w w+/oZmTK3XDwp8IwHkk5bp3EkQsdMVfcOXp2lzME6e46LhKgBN/ope0WP+KmgL/TaEd+ KyZU+drVPQ+UjWnSyQzhwyDnbFslBlZ3wezVZOXBd0BsWtTYhPRt35PuNWJuCzvoIhuM 0TfDcYrCKHoQBKs/ZL0tMeQLGhi1md008vJz24uAPPq5Z54K0FKOuhwPuY8nhWZXR1DF KovA== X-Gm-Message-State: ALoCoQm4TMkBF2TT7oQWCPbTZE1cds9UuQlg7yO4eJm81dfgy9Ma2h4fkczrAZJ2qSNL9MDpETSg MIME-Version: 1.0 X-Received: by 10.52.176.1 with SMTP id ce1mr4814848vdc.63.1425405391993; Tue, 03 Mar 2015 09:56:31 -0800 (PST) Received: by 10.52.181.73 with HTTP; Tue, 3 Mar 2015 09:56:31 -0800 (PST) Date: Tue, 3 Mar 2015 17:56:31 +0000 Message-ID: From: Gerard Oskamp To: predisclosure-applications@lists.xenproject.org Cc: Guido Trotter , xen-security-advisory Subject: [Predisclosure-applications] Google pre-disclosure application X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org Hi, Per the application procedure published at http://www.xenproject.org/security-policy.html, I'd like to request inclusion of Google on the pre-disclosure list. We have a large internal deployment of Xen virtual machines, mentioned at https://code.google.com/p/ganeti/wiki/GanetiFAQ#How_is_Ganeti_used_internally_at_Google? . We also develop Ganeti (http://www.ganeti.org/), an open-source cluster virtual server management software tool, which has had support for Xen since its first open source release in 2007. Proof of ongoing, active development can be seen in its Git repository at http://git.ganeti.org/?p=ganeti.git;a=summary. Finally, we're also a member of the Xen project (http://www.xenproject.org/project-members/59-google.html). Information about our handling of security problems and how to report them can be found at https://www.google.com/intl/en/about/company/security.html. We agree to the terms as listed in the Xen security policy for inclusion on this list, and will keep security advisories confidential during the embargo period as requested. Please use xen-security-advisory@google.com (a dedicated alias only available to employees directly involved in maintaining our Xen fleet and its security) for the pre-disclosure list. I believe this satisfies all requirements listed for inclusion, please let me know if there is anything unclear or missing. Thank you for your consideration, Gerard Oskamp Ganeti SRE Google _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Tue Mar 03 20:04:37 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Tue, 03 Mar 2015 20:04:37 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSt3V-0008NI-U7; Tue, 03 Mar 2015 20:04:37 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSt3U-0008ND-12 for predisclosure-applications@lists.xenproject.org; Tue, 03 Mar 2015 20:04:36 +0000 Received: from [85.158.137.68] by server-10.bemta-3.messagelabs.com id E5/05-02745-3D316F45; Tue, 03 Mar 2015 20:04:35 +0000 X-Env-Sender: nathan@gt.net X-Msg-Ref: server-3.tower-31.messagelabs.com!1425413072!12809223!1 X-Originating-IP: [208.70.244.21] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 26750 invoked from network); 3 Mar 2015 20:04:34 -0000 Received: from gossamer.nmsrv.com (HELO gossamer.nmsrv.com) (208.70.244.21) by server-3.tower-31.messagelabs.com with DHE-RSA-AES256-SHA encrypted SMTP; 3 Mar 2015 20:04:34 -0000 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=gt.net; h=from:to:cc :references:in-reply-to:subject:date:message-id:mime-version :content-type:content-transfer-encoding; s=mail; bh=LrWnDR4EAvij j+sKIOpR6I7x7mc=; b=VkVDzEkew8YOFukPDrvRQ4e16gXiuV12kACNrFpOvX7k Kw7BiSAqyXnJrFraDQAzKhqMk1b7SCUkZeSaHoHLnXcpnToNmVeQQ8FXCGy7HF9F jXZgIi6UDOVFTCEul7HCf2BMtCGNPx+t5y33lkcnTFy7l8JBmxRVHJ9AsArp/J8= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gt.net; h=from:to:cc :references:in-reply-to:subject:date:message-id:mime-version :content-type:content-transfer-encoding; q=dns; s=mail; b=XP9NLg yRA82EbprHelntOYWO4o6MUDy5CoHaSvONrGea6ffQjuHUKVFR8E6sbEc31nnu1c ldL2knNBkxSJfTlVedCVeooLTvDorL1049+6+L+taBDe8h8V+KzSZb3O2tpFHyJO zSkYCwkUA3lbOoEuzIz5h2l8YVyO/40ne1vHQ= Received: (qmail 26368 invoked from network); 3 Mar 2015 20:04:31 -0000 X-AntiVirus: Clean Received: from gateway.gossamer-threads.com (HELO nathanwindows) (nathan@gt.net@208.70.247.145) by gossamer.nmsrv.com with ESMTPSA (DHE-RSA-AES256-GCM-SHA384 encrypted); 3 Mar 2015 20:04:31 -0000 From: "Nathan March" To: "'Ian Campbell'" References: <0df701d0553f$113ac830$33b05890$@gt.net> <1425399029.25940.51.camel@xen.org> In-Reply-To: <1425399029.25940.51.camel@xen.org> Date: Tue, 3 Mar 2015 12:04:31 -0800 Message-ID: <103001d055ed$42e7c500$c8b74f00$@gt.net> MIME-Version: 1.0 X-Mailer: Microsoft Outlook 15.0 Thread-Index: AQKACgIG/4e5T4y78BOZ0SMHY+pKiQJXpFIym5jddWA= Content-Language: en-us Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Pre-disclosure list application for gt.net X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org Hi Ian, The noc@gt.net address goes only to our me (noc manager) and our CEO. * Evidence of your status as a service/software provider: * Evidence of your status as a user/distributor of Xen: https://gt.net/cloud/ * Information about your handling of security problems: Security contact details are listed on both our contact + support pages: http://gt.net/contact/ http://gt.net/support/ - Nathan > -----Original Message----- > From: Ian Campbell [mailto:ijc@xen.org] > Sent: Tuesday, March 3, 2015 8:10 AM > To: Nathan March > Cc: predisclosure-applications@lists.xenproject.org > Subject: Re: [Predisclosure-applications] Pre-disclosure list application for > gt.net > > On Mon, 2015-03-02 at 15:17 -0800, Nathan March wrote: > > Would like to apply for access to the predisclosure list please. > > Hi, > > Thank you for your application. > > The security policy[0] requires "Link(s) to current public web pages, > belonging to your organisation," for each piece of information, which you > have not provided here for > * Evidence of your status as a service/software provider: > * Evidence of your status as a user/distributor of Xen: > * Information about your handling of security problems: > > Please can you provide these links so that we may continue to process your > application. Note that as regards pricing the policy includes "or how to get a > quote". > > Please could you also clarify the scope of your noc@ alias. It is intended that > predisclosures go to a small team dedicated to handling incoming security > issues, rather than a large team of system administrators. > > Thanks, > Ian. > > [0] http://www.xenproject.org/security-policy.html _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Tue Mar 03 20:04:37 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Tue, 03 Mar 2015 20:04:37 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSt3V-0008NI-U7; Tue, 03 Mar 2015 20:04:37 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSt3U-0008ND-12 for predisclosure-applications@lists.xenproject.org; Tue, 03 Mar 2015 20:04:36 +0000 Received: from [85.158.137.68] by server-10.bemta-3.messagelabs.com id E5/05-02745-3D316F45; Tue, 03 Mar 2015 20:04:35 +0000 X-Env-Sender: nathan@gt.net X-Msg-Ref: server-3.tower-31.messagelabs.com!1425413072!12809223!1 X-Originating-IP: [208.70.244.21] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 26750 invoked from network); 3 Mar 2015 20:04:34 -0000 Received: from gossamer.nmsrv.com (HELO gossamer.nmsrv.com) (208.70.244.21) by server-3.tower-31.messagelabs.com with DHE-RSA-AES256-SHA encrypted SMTP; 3 Mar 2015 20:04:34 -0000 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=gt.net; h=from:to:cc :references:in-reply-to:subject:date:message-id:mime-version :content-type:content-transfer-encoding; s=mail; bh=LrWnDR4EAvij j+sKIOpR6I7x7mc=; b=VkVDzEkew8YOFukPDrvRQ4e16gXiuV12kACNrFpOvX7k Kw7BiSAqyXnJrFraDQAzKhqMk1b7SCUkZeSaHoHLnXcpnToNmVeQQ8FXCGy7HF9F jXZgIi6UDOVFTCEul7HCf2BMtCGNPx+t5y33lkcnTFy7l8JBmxRVHJ9AsArp/J8= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gt.net; h=from:to:cc :references:in-reply-to:subject:date:message-id:mime-version :content-type:content-transfer-encoding; q=dns; s=mail; b=XP9NLg yRA82EbprHelntOYWO4o6MUDy5CoHaSvONrGea6ffQjuHUKVFR8E6sbEc31nnu1c ldL2knNBkxSJfTlVedCVeooLTvDorL1049+6+L+taBDe8h8V+KzSZb3O2tpFHyJO zSkYCwkUA3lbOoEuzIz5h2l8YVyO/40ne1vHQ= Received: (qmail 26368 invoked from network); 3 Mar 2015 20:04:31 -0000 X-AntiVirus: Clean Received: from gateway.gossamer-threads.com (HELO nathanwindows) (nathan@gt.net@208.70.247.145) by gossamer.nmsrv.com with ESMTPSA (DHE-RSA-AES256-GCM-SHA384 encrypted); 3 Mar 2015 20:04:31 -0000 From: "Nathan March" To: "'Ian Campbell'" References: <0df701d0553f$113ac830$33b05890$@gt.net> <1425399029.25940.51.camel@xen.org> In-Reply-To: <1425399029.25940.51.camel@xen.org> Date: Tue, 3 Mar 2015 12:04:31 -0800 Message-ID: <103001d055ed$42e7c500$c8b74f00$@gt.net> MIME-Version: 1.0 X-Mailer: Microsoft Outlook 15.0 Thread-Index: AQKACgIG/4e5T4y78BOZ0SMHY+pKiQJXpFIym5jddWA= Content-Language: en-us Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Pre-disclosure list application for gt.net X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org Hi Ian, The noc@gt.net address goes only to our me (noc manager) and our CEO. * Evidence of your status as a service/software provider: * Evidence of your status as a user/distributor of Xen: https://gt.net/cloud/ * Information about your handling of security problems: Security contact details are listed on both our contact + support pages: http://gt.net/contact/ http://gt.net/support/ - Nathan > -----Original Message----- > From: Ian Campbell [mailto:ijc@xen.org] > Sent: Tuesday, March 3, 2015 8:10 AM > To: Nathan March > Cc: predisclosure-applications@lists.xenproject.org > Subject: Re: [Predisclosure-applications] Pre-disclosure list application for > gt.net > > On Mon, 2015-03-02 at 15:17 -0800, Nathan March wrote: > > Would like to apply for access to the predisclosure list please. > > Hi, > > Thank you for your application. > > The security policy[0] requires "Link(s) to current public web pages, > belonging to your organisation," for each piece of information, which you > have not provided here for > * Evidence of your status as a service/software provider: > * Evidence of your status as a user/distributor of Xen: > * Information about your handling of security problems: > > Please can you provide these links so that we may continue to process your > application. Note that as regards pricing the policy includes "or how to get a > quote". > > Please could you also clarify the scope of your noc@ alias. It is intended that > predisclosures go to a small team dedicated to handling incoming security > issues, rather than a large team of system administrators. > > Thanks, > Ian. > > [0] http://www.xenproject.org/security-policy.html _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Tue Mar 03 22:25:19 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Tue, 03 Mar 2015 22:25:19 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSvFe-0006jb-Ps; Tue, 03 Mar 2015 22:25:18 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSvFc-0006jW-Kg for predisclosure-applications@lists.xenproject.org; Tue, 03 Mar 2015 22:25:17 +0000 Received: from [193.109.254.147] by server-12.bemta-14.messagelabs.com id 4F/8E-02755-CC436F45; Tue, 03 Mar 2015 22:25:16 +0000 X-Env-Sender: lucas.vianna@locaweb.com.br X-Msg-Ref: server-13.tower-27.messagelabs.com!1425421513!14425091!1 X-Originating-IP: [200.234.205.7] X-SpamReason: No, hits=0.1 required=7.0 tests=HTML_50_60,HTML_MESSAGE X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 27085 invoked from network); 3 Mar 2015 22:25:13 -0000 Received: from teeny0001-4.locaweb.com.br (HELO teeny0001-4.locaweb.com.br) (200.234.205.7) by server-13.tower-27.messagelabs.com with SMTP; 3 Mar 2015 22:25:13 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=lwita2014; d=locaweb.com.br; h=From:To:CC:Subject:Date:Message-ID:References:In-Reply-To:Content-Type:MIME-Version; bh=0Ags7fdRGTYeonRQWU3rWKCCwRZpFfNIbcy6wnewWf4=; b=X2GssWh23AVhhqteXnDj9/ryvSPdUV8nMREIZyzzCbVodS7puzbkbT1/RBOq0co3/+qTHsTIvfY7 +0IAJRnznaMEEOAegh6M7FXInuA+e60LtGLV133Ts/iEzm2hmdBNW40VDclzI1KfTzNK7Eeg9tPA nsEIQZctHxj42RY1Twc= DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=lwita2014; d=locaweb.com.br; b=qAO1mQ00Hqz1S2grZzbave+Wv5QFzBplPU3SOBGCjzuwpx6wBxUSLlQRAbTKxOzBabTV329iD5X5 9EAzVy3EjC8s+7PuXwv/v/VhlwoeGt7q2WbnF5AJ3N//3+dKcf2dS/s+rNgZuVYPWv1aUS6UmdeM 6uAvFrP9NFgfVA+BX20=; Received: from teeny0001.correio.biz (127.0.0.1) by teeny0001-1.locaweb.com.br id huoqck1oingp for ; Tue, 3 Mar 2015 19:25:11 -0300 (envelope-from ) Received: from outlook.locaweb.com.br (unknown [186.202.31.28]) by teeny0001.correio.biz (Postfix) with ESMTP id DBC013FD7C; Tue, 3 Mar 2015 19:25:11 -0300 (BRT) Received: from SRVEXCHMBX02.fabrica.locaweb.com.br ([fe80::b155:e372:b255:418d]) by LWHUBCAS-EX02.fabrica.locaweb.com.br ([186.202.31.28]) with mapi id 14.03.0181.006; Tue, 3 Mar 2015 19:25:11 -0300 From: Lucas Vianna To: Ian Campbell Thread-Topic: [Predisclosure-applications] Xen Security Pre-disclosure list Thread-Index: AQHQVSTwFzL6nez/IkyBJTEz4CAftp0LISWAgABorQA= Date: Tue, 3 Mar 2015 22:25:10 +0000 Message-ID: <9B38A1D1-4C5B-4BF3-B432-EC22415535AC@locaweb.com.br> References: <50814C7C-F533-4810-8E24-43DAA9B08407@locaweb.com.br> <1425399031.25940.52.camel@xen.org> In-Reply-To: <1425399031.25940.52.camel@xen.org> Accept-Language: en-US, pt-BR Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [186.202.96.24] MIME-Version: 1.0 X-CMAE-Score: 0 X-CMAE-Analysis: v=2.1 cv=EppcrEsA c=1 sm=1 tr=0 a=fIT4S8viIIA9WYb0egJ9ow==:117 a=VM7MXBOAAAAA:8 a=HMDWBQi7DlUA:10 a=xqWC_Br6kY4A:10 a=emO1SXQWCLwA:10 a=mLnsDVdbAAAA:8 a=cWRNjhkoAAAA:8 a=Jcf_kMeDlY7WxzzBZoAA:9 a=QEXdDO2ut3YA:10 a=8ej9Xoy03xUA:10 a=tr1o4XKT38AA:10 a=gV5MEypgwpYA:10 a=_2isxqcS72dHZ6T7kJEA:9 a=6MuBb_zUA4yPiJ3g:21 a=_W_S_7VecoQA:10 Cc: "predisclosure-applications@lists.xenproject.org" Subject: Re: [Predisclosure-applications] Xen Security Pre-disclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============8493981882811655665==" Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org --===============8493981882811655665== Content-Language: en-US Content-Type: multipart/alternative; boundary="_000_9B38A1D14C5B4BF3B432EC22415535AClocawebcombr_" --_000_9B38A1D14C5B4BF3B432EC22415535AClocawebcombr_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgSWFuLA0KDQotIEV2aWRlbmNlIG9mIHlvdXIgc3RhdHVzIGFzIGEgdXNlci9kaXN0cmlidXRv ciBvZiBYZW46DQoNCk9uIG91ciBvZmZpY2lhbCB3aWtpIHdlIGhhdmUgc29tZSBkb2N1bWVudGF0 aW9ucyBtZW50aW9uaW5nIHRoZSBwbGF0Zm9ybSBYZW4uDQpodHRwOi8vd2lraS5sb2Nhd2ViLmNv bS5ici9wdC1ici9DYXRlZ29yaWE6Q2xvdWRfU2VydmVyX1BybyAocHQtQlIpDQpodHRwOi8vd2lr aS5sb2Nhd2ViLmNvbS5ici9pbmRleC5waHAvQWRtaW5pc3RyYSVDMyVBNyVDMyVBM29fLV9BJUMz JUE3JUMzJUI1ZXNfLV9BdHVhbGl6YSVDMyVBNyVDMyVBM29fZG9fWGVuX1Rvb2xzPGh0dHA6Ly93 aWtpLmxvY2F3ZWIuY29tLmJyL2luZGV4LnBocC9BZG1pbmlzdHJhw6fDo29fLV9Bw6fDtWVzXy1f QXR1YWxpemHDp8Ojb19kb19YZW5fVG9vbHM+IChwdC1CUikNCg0KLSBJbmZvcm1hdGlvbiBhYm91 dCB5b3VyIGhhbmRsaW5nIG9mIHNlY3VyaXR5IHByb2JsZW1zOg0KDQpTZWN1cml0eSBjb250YWN0 IGRldGFpbHMgaXMgbWVudGlvbmVkIG9uIG91ciBpbmZvcm1hdGlvbiBwb2xpY3kuIFNlY3Rpb24g 4oCcVnVsbmVyYWJpbGlkYWRlIGRlIHNlZ3VyYW7Dp2HigJ0gLT4gU2VjdXJpdHkgVnVsbmVyYWJp bGl0eS4NCmh0dHA6Ly93d3cubG9jYXdlYi5jb20uYnIvc29icmUtbG9jYXdlYi9jb250cmF0b3Mt cG9saXRpY2FzL3BvbGl0aWNhLXVzby1pbmZvcm1hY29lcy5odG1sIChwdC1CUikNCg0KVGhhbmtz LA0KDQpMdWNhcw0KDQoNCk9uIE1hciAzLCAyMDE1LCBhdCAxOjEwIFBNLCBJYW4gQ2FtcGJlbGwg PGlqY0B4ZW4ub3JnPG1haWx0bzppamNAeGVuLm9yZz4+IHdyb3RlOg0KDQpPbiBNb24sIDIwMTUt MDMtMDIgYXQgMjA6MTAgKzAwMDAsIEx1Y2FzIFZpYW5uYSB3cm90ZToNCndlIHdvdWxkIGxpa2Ug dG8gYmUgaW5jbHVkZWQgb24gdGhlIHByZS1kaXNjbG9zdXJlIGxpc3QuDQoNCkhpLA0KDQpUaGFu ayB5b3UgZm9yIHlvdXIgYXBwbGljYXRpb24uDQoNClRoZSBzZWN1cml0eSBwb2xpY3lbMF0gcmVx dWlyZXMgIkxpbmsocykgdG8gY3VycmVudCBwdWJsaWMgd2ViIHBhZ2VzLA0KYmVsb25naW5nIHRv IHlvdXIgb3JnYW5pc2F0aW9uLCIgZm9yIGVhY2ggcGllY2Ugb2YgaW5mb3JtYXRpb24uICBUaGlz IGlzDQptaXNzaW5nIGluIHRoZSBjYXNlIG9mICJFdmlkZW5jZSBvZiB5b3VyIHN0YXR1cyBhcyBh IHVzZXIvZGlzdHJpYnV0b3Igb2YNClhlbiIuDQoNClRoZSBwb2xpY3kgYWxzbyBzYXlzICJJZiB0 aGUgcGFnZXMgYXJlIGxvbmcgYW5kL29yIFBERnMgYXJlIGludm9sdmVkLA0KeW91ciBlbWFpbCBz aG91bGQgc2F5IHdoaWNoIHBhcnQgb2YgdGhlIHBhZ2VzIGFuZCBkb2N1bWVudHMgYXJlDQpyZWxl dmFudC4iIHdoaWNoIGlzIHBhcnRpY3VsYXJseSByZWxldmFudCB3aGVuIGl0IGlzIG5lY2Vzc2Fy eSBmb3IgdXMgdG8NCnVzZSBhIHRyYW5zbGF0aW9uIHNlcnZpY2UuIFBsZWFzZSBjb3VsZCB5b3Ug bGV0IHVzIGtub3cgd2hpY2ggc2VjdGlvbiBvZg0KeW91ciAiQ2xvdWQgQ29tcHV0aW5nIGUgU2Vy dmlkb3JlcyBEZWRpY2Fkb3MiIGRvY3VtZW50IGNvbnRhaW5zOg0KDQogICAgICAgWW91ciBpbnZp dGF0aW9uIHRvIG1lbWJlcnMgb2YgdGhlIHB1YmxpYywgd2hvIGRpc2NvdmVyIHNlY3VyaXR5DQog ICAgICAgcHJvYmxlbXMgd2l0aCB5b3VyIHByb2R1Y3RzL3NlcnZpY2VzLCB0byByZXBvcnQgdGhl bSBpbg0KICAgICAgIGNvbmZpZGVuY2UgdG8geW91OyIgYW5kDQogICAgICAgU3BlY2lmaWNhbGx5 LCB0aGUgY29udGFjdCBpbmZvcm1hdGlvbiAoZW1haWwgYWRkcmVzc2VzIG9yIG90aGVyDQogICAg ICAgY29udGFjdCBpbnN0cnVjdGlvbnMpIHdoaWNoIHN1Y2ggYSBtZW1iZXIgb2YgdGhlIHB1Ymxp YyBzaG91bGQNCiAgICAgICB1c2UuDQoNClBsZWFzZSBjYW4geW91IHByb3ZpZGUgdGhpcyBpbmZv cm1hdGlvbiBzbyB0aGF0IHdlIG1heSBjb250aW51ZSB0bw0KcHJvY2VzcyB5b3VyIGFwcGxpY2F0 aW9uLg0KDQpUaGFua3MsDQpJYW4uDQoNClswXSBodHRwOi8vd3d3LnhlbnByb2plY3Qub3JnL3Nl Y3VyaXR5LXBvbGljeS5odG1sDQoNCg0KDQoNCg== --_000_9B38A1D14C5B4BF3B432EC22415535AClocawebcombr_ Content-Type: text/html; charset="utf-8" Content-ID: <1842DAB855EF5548A63FBB6281FC2A22@fabrica.locaweb.com.br> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KSGkgSWFuLA0KPGRpdiBjbGFzcz0i Ij48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+LSBFdmlkZW5jZSBvZiB5b3Vy IHN0YXR1cyBhcyBhIHVzZXIvZGlzdHJpYnV0b3Igb2YmbmJzcDtYZW46Jm5ic3A7PC9kaXY+DQo8 ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5PbiBvdXIg b2ZmaWNpYWwgd2lraSB3ZSBoYXZlIHNvbWUgZG9jdW1lbnRhdGlvbnMgbWVudGlvbmluZyB0aGUg cGxhdGZvcm0gWGVuLjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YSBocmVmPSJodHRwOi8vd2lraS5s b2Nhd2ViLmNvbS5ici9wdC1ici9DYXRlZ29yaWE6Q2xvdWRfU2VydmVyX1BybyIgY2xhc3M9IiI+ aHR0cDovL3dpa2kubG9jYXdlYi5jb20uYnIvcHQtYnIvQ2F0ZWdvcmlhOkNsb3VkX1NlcnZlcl9Q cm88L2E+Jm5ic3A7KHB0LUJSKTwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YSBocmVmPSJodHRwOi8v d2lraS5sb2Nhd2ViLmNvbS5ici9pbmRleC5waHAvQWRtaW5pc3RyYcOnw6NvXy1fQcOnw7Vlc18t X0F0dWFsaXphw6fDo29fZG9fWGVuX1Rvb2xzIiBjbGFzcz0iIj5odHRwOi8vd2lraS5sb2Nhd2Vi LmNvbS5ici9pbmRleC5waHAvQWRtaW5pc3RyYSVDMyVBNyVDMyVBM29fLV9BJUMzJUE3JUMzJUI1 ZXNfLV9BdHVhbGl6YSVDMyVBNyVDMyVBM29fZG9fWGVuX1Rvb2xzPC9hPiZuYnNwOyhwdC1CUik8 L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIi Pi0gSW5mb3JtYXRpb24gYWJvdXQgeW91ciBoYW5kbGluZyBvZiBzZWN1cml0eSBwcm9ibGVtczo8 L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIi PlNlY3VyaXR5IGNvbnRhY3QgZGV0YWlscyBpcyBtZW50aW9uZWQgb24gb3VyIGluZm9ybWF0aW9u IHBvbGljeS4gU2VjdGlvbiDigJxWdWxuZXJhYmlsaWRhZGUgZGUgc2VndXJhbsOnYeKAnSAtJmd0 OyBTZWN1cml0eSBWdWxuZXJhYmlsaXR5LjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YSBocmVmPSJo dHRwOi8vd3d3LmxvY2F3ZWIuY29tLmJyL3NvYnJlLWxvY2F3ZWIvY29udHJhdG9zLXBvbGl0aWNh cy9wb2xpdGljYS11c28taW5mb3JtYWNvZXMuaHRtbCIgY2xhc3M9IiI+aHR0cDovL3d3dy5sb2Nh d2ViLmNvbS5ici9zb2JyZS1sb2Nhd2ViL2NvbnRyYXRvcy1wb2xpdGljYXMvcG9saXRpY2EtdXNv LWluZm9ybWFjb2VzLmh0bWw8L2E+Jm5ic3A7KHB0LUJSKTwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48 YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+VGhhbmtzLDwvZGl2Pg0KPGRpdiBj bGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+THVjYXM8L2Rpdj4N CjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBj bGFzcz0iIj4NCjxkaXY+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYg Y2xhc3M9IiI+T24gTWFyIDMsIDIwMTUsIGF0IDE6MTAgUE0sIElhbiBDYW1wYmVsbCAmbHQ7PGEg aHJlZj0ibWFpbHRvOmlqY0B4ZW4ub3JnIiBjbGFzcz0iIj5pamNAeGVuLm9yZzwvYT4mZ3Q7IHdy b3RlOjwvZGl2Pg0KPGJyIGNsYXNzPSJBcHBsZS1pbnRlcmNoYW5nZS1uZXdsaW5lIj4NCjxkaXYg Y2xhc3M9IiI+T24gTW9uLCAyMDE1LTAzLTAyIGF0IDIwOjEwICYjNDM7MDAwMCwgTHVjYXMgVmlh bm5hIHdyb3RlOjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIi PndlIHdvdWxkIGxpa2UgdG8gYmUgaW5jbHVkZWQgb24gdGhlIHByZS1kaXNjbG9zdXJlIGxpc3Qu PGJyIGNsYXNzPSIiPg0KPC9ibG9ja3F1b3RlPg0KPGJyIGNsYXNzPSIiPg0KSGksPGJyIGNsYXNz PSIiPg0KPGJyIGNsYXNzPSIiPg0KVGhhbmsgeW91IGZvciB5b3VyIGFwcGxpY2F0aW9uLjxiciBj bGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NClRoZSBzZWN1cml0eSBwb2xpY3lbMF0gcmVxdWlyZXMg JnF1b3Q7TGluayhzKSB0byBjdXJyZW50IHB1YmxpYyB3ZWIgcGFnZXMsPGJyIGNsYXNzPSIiPg0K YmVsb25naW5nIHRvIHlvdXIgb3JnYW5pc2F0aW9uLCZxdW90OyBmb3IgZWFjaCBwaWVjZSBvZiBp bmZvcm1hdGlvbi4gJm5ic3A7VGhpcyBpczxiciBjbGFzcz0iIj4NCm1pc3NpbmcgaW4gdGhlIGNh c2Ugb2YgJnF1b3Q7RXZpZGVuY2Ugb2YgeW91ciBzdGF0dXMgYXMgYSB1c2VyL2Rpc3RyaWJ1dG9y IG9mPGJyIGNsYXNzPSIiPg0KWGVuJnF1b3Q7LjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4N ClRoZSBwb2xpY3kgYWxzbyBzYXlzICZxdW90O0lmIHRoZSBwYWdlcyBhcmUgbG9uZyBhbmQvb3Ig UERGcyBhcmUgaW52b2x2ZWQsPGJyIGNsYXNzPSIiPg0KeW91ciBlbWFpbCBzaG91bGQgc2F5IHdo aWNoIHBhcnQgb2YgdGhlIHBhZ2VzIGFuZCBkb2N1bWVudHMgYXJlPGJyIGNsYXNzPSIiPg0KcmVs ZXZhbnQuJnF1b3Q7IHdoaWNoIGlzIHBhcnRpY3VsYXJseSByZWxldmFudCB3aGVuIGl0IGlzIG5l Y2Vzc2FyeSBmb3IgdXMgdG88YnIgY2xhc3M9IiI+DQp1c2UgYSB0cmFuc2xhdGlvbiBzZXJ2aWNl LiBQbGVhc2UgY291bGQgeW91IGxldCB1cyBrbm93IHdoaWNoIHNlY3Rpb24gb2Y8YnIgY2xhc3M9 IiI+DQp5b3VyICZxdW90O0Nsb3VkIENvbXB1dGluZyBlIFNlcnZpZG9yZXMgRGVkaWNhZG9zJnF1 b3Q7IGRvY3VtZW50IGNvbnRhaW5zOjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCiZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO1lvdXIgaW52aXRhdGlvbiB0byBt ZW1iZXJzIG9mIHRoZSBwdWJsaWMsIHdobyBkaXNjb3ZlciBzZWN1cml0eTxiciBjbGFzcz0iIj4N CiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO3Byb2JsZW1zIHdpdGgg eW91ciBwcm9kdWN0cy9zZXJ2aWNlcywgdG8gcmVwb3J0IHRoZW0gaW48YnIgY2xhc3M9IiI+DQom bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtjb25maWRlbmNlIHRvIHlv dTsmcXVvdDsgYW5kPGJyIGNsYXNzPSIiPg0KJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7U3BlY2lmaWNhbGx5LCB0aGUgY29udGFjdCBpbmZvcm1hdGlvbiAoZW1haWwg YWRkcmVzc2VzIG9yIG90aGVyPGJyIGNsYXNzPSIiPg0KJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Y29udGFjdCBpbnN0cnVjdGlvbnMpIHdoaWNoIHN1Y2ggYSBtZW1i ZXIgb2YgdGhlIHB1YmxpYyBzaG91bGQ8YnIgY2xhc3M9IiI+DQombmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDt1c2UuPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0K UGxlYXNlIGNhbiB5b3UgcHJvdmlkZSB0aGlzIGluZm9ybWF0aW9uIHNvIHRoYXQgd2UgbWF5IGNv bnRpbnVlIHRvPGJyIGNsYXNzPSIiPg0KcHJvY2VzcyB5b3VyIGFwcGxpY2F0aW9uLjxiciBjbGFz cz0iIj4NCjxiciBjbGFzcz0iIj4NClRoYW5rcyw8YnIgY2xhc3M9IiI+DQpJYW4uPGJyIGNsYXNz PSIiPg0KPGJyIGNsYXNzPSIiPg0KWzBdIDxhIGhyZWY9Imh0dHA6Ly93d3cueGVucHJvamVjdC5v cmcvc2VjdXJpdHktcG9saWN5Lmh0bWwiIGNsYXNzPSIiPmh0dHA6Ly93d3cueGVucHJvamVjdC5v cmcvc2VjdXJpdHktcG9saWN5Lmh0bWw8L2E+PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0K PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rp dj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_9B38A1D14C5B4BF3B432EC22415535AClocawebcombr_-- --===============8493981882811655665== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications --===============8493981882811655665==-- From predisclosure-applications-bounces@lists.xenproject.org Tue Mar 03 22:25:19 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Tue, 03 Mar 2015 22:25:19 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSvFe-0006jb-Ps; Tue, 03 Mar 2015 22:25:18 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YSvFc-0006jW-Kg for predisclosure-applications@lists.xenproject.org; Tue, 03 Mar 2015 22:25:17 +0000 Received: from [193.109.254.147] by server-12.bemta-14.messagelabs.com id 4F/8E-02755-CC436F45; Tue, 03 Mar 2015 22:25:16 +0000 X-Env-Sender: lucas.vianna@locaweb.com.br X-Msg-Ref: server-13.tower-27.messagelabs.com!1425421513!14425091!1 X-Originating-IP: [200.234.205.7] X-SpamReason: No, hits=0.1 required=7.0 tests=HTML_50_60,HTML_MESSAGE X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 27085 invoked from network); 3 Mar 2015 22:25:13 -0000 Received: from teeny0001-4.locaweb.com.br (HELO teeny0001-4.locaweb.com.br) (200.234.205.7) by server-13.tower-27.messagelabs.com with SMTP; 3 Mar 2015 22:25:13 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=lwita2014; d=locaweb.com.br; h=From:To:CC:Subject:Date:Message-ID:References:In-Reply-To:Content-Type:MIME-Version; bh=0Ags7fdRGTYeonRQWU3rWKCCwRZpFfNIbcy6wnewWf4=; b=X2GssWh23AVhhqteXnDj9/ryvSPdUV8nMREIZyzzCbVodS7puzbkbT1/RBOq0co3/+qTHsTIvfY7 +0IAJRnznaMEEOAegh6M7FXInuA+e60LtGLV133Ts/iEzm2hmdBNW40VDclzI1KfTzNK7Eeg9tPA nsEIQZctHxj42RY1Twc= DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=lwita2014; d=locaweb.com.br; b=qAO1mQ00Hqz1S2grZzbave+Wv5QFzBplPU3SOBGCjzuwpx6wBxUSLlQRAbTKxOzBabTV329iD5X5 9EAzVy3EjC8s+7PuXwv/v/VhlwoeGt7q2WbnF5AJ3N//3+dKcf2dS/s+rNgZuVYPWv1aUS6UmdeM 6uAvFrP9NFgfVA+BX20=; Received: from teeny0001.correio.biz (127.0.0.1) by teeny0001-1.locaweb.com.br id huoqck1oingp for ; Tue, 3 Mar 2015 19:25:11 -0300 (envelope-from ) Received: from outlook.locaweb.com.br (unknown [186.202.31.28]) by teeny0001.correio.biz (Postfix) with ESMTP id DBC013FD7C; Tue, 3 Mar 2015 19:25:11 -0300 (BRT) Received: from SRVEXCHMBX02.fabrica.locaweb.com.br ([fe80::b155:e372:b255:418d]) by LWHUBCAS-EX02.fabrica.locaweb.com.br ([186.202.31.28]) with mapi id 14.03.0181.006; Tue, 3 Mar 2015 19:25:11 -0300 From: Lucas Vianna To: Ian Campbell Thread-Topic: [Predisclosure-applications] Xen Security Pre-disclosure list Thread-Index: AQHQVSTwFzL6nez/IkyBJTEz4CAftp0LISWAgABorQA= Date: Tue, 3 Mar 2015 22:25:10 +0000 Message-ID: <9B38A1D1-4C5B-4BF3-B432-EC22415535AC@locaweb.com.br> References: <50814C7C-F533-4810-8E24-43DAA9B08407@locaweb.com.br> <1425399031.25940.52.camel@xen.org> In-Reply-To: <1425399031.25940.52.camel@xen.org> Accept-Language: en-US, pt-BR Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [186.202.96.24] MIME-Version: 1.0 X-CMAE-Score: 0 X-CMAE-Analysis: v=2.1 cv=EppcrEsA c=1 sm=1 tr=0 a=fIT4S8viIIA9WYb0egJ9ow==:117 a=VM7MXBOAAAAA:8 a=HMDWBQi7DlUA:10 a=xqWC_Br6kY4A:10 a=emO1SXQWCLwA:10 a=mLnsDVdbAAAA:8 a=cWRNjhkoAAAA:8 a=Jcf_kMeDlY7WxzzBZoAA:9 a=QEXdDO2ut3YA:10 a=8ej9Xoy03xUA:10 a=tr1o4XKT38AA:10 a=gV5MEypgwpYA:10 a=_2isxqcS72dHZ6T7kJEA:9 a=6MuBb_zUA4yPiJ3g:21 a=_W_S_7VecoQA:10 Cc: "predisclosure-applications@lists.xenproject.org" Subject: Re: [Predisclosure-applications] Xen Security Pre-disclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============8493981882811655665==" Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org --===============8493981882811655665== Content-Language: en-US Content-Type: multipart/alternative; boundary="_000_9B38A1D14C5B4BF3B432EC22415535AClocawebcombr_" --_000_9B38A1D14C5B4BF3B432EC22415535AClocawebcombr_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgSWFuLA0KDQotIEV2aWRlbmNlIG9mIHlvdXIgc3RhdHVzIGFzIGEgdXNlci9kaXN0cmlidXRv ciBvZiBYZW46DQoNCk9uIG91ciBvZmZpY2lhbCB3aWtpIHdlIGhhdmUgc29tZSBkb2N1bWVudGF0 aW9ucyBtZW50aW9uaW5nIHRoZSBwbGF0Zm9ybSBYZW4uDQpodHRwOi8vd2lraS5sb2Nhd2ViLmNv bS5ici9wdC1ici9DYXRlZ29yaWE6Q2xvdWRfU2VydmVyX1BybyAocHQtQlIpDQpodHRwOi8vd2lr aS5sb2Nhd2ViLmNvbS5ici9pbmRleC5waHAvQWRtaW5pc3RyYSVDMyVBNyVDMyVBM29fLV9BJUMz JUE3JUMzJUI1ZXNfLV9BdHVhbGl6YSVDMyVBNyVDMyVBM29fZG9fWGVuX1Rvb2xzPGh0dHA6Ly93 aWtpLmxvY2F3ZWIuY29tLmJyL2luZGV4LnBocC9BZG1pbmlzdHJhw6fDo29fLV9Bw6fDtWVzXy1f QXR1YWxpemHDp8Ojb19kb19YZW5fVG9vbHM+IChwdC1CUikNCg0KLSBJbmZvcm1hdGlvbiBhYm91 dCB5b3VyIGhhbmRsaW5nIG9mIHNlY3VyaXR5IHByb2JsZW1zOg0KDQpTZWN1cml0eSBjb250YWN0 IGRldGFpbHMgaXMgbWVudGlvbmVkIG9uIG91ciBpbmZvcm1hdGlvbiBwb2xpY3kuIFNlY3Rpb24g 4oCcVnVsbmVyYWJpbGlkYWRlIGRlIHNlZ3VyYW7Dp2HigJ0gLT4gU2VjdXJpdHkgVnVsbmVyYWJp bGl0eS4NCmh0dHA6Ly93d3cubG9jYXdlYi5jb20uYnIvc29icmUtbG9jYXdlYi9jb250cmF0b3Mt cG9saXRpY2FzL3BvbGl0aWNhLXVzby1pbmZvcm1hY29lcy5odG1sIChwdC1CUikNCg0KVGhhbmtz LA0KDQpMdWNhcw0KDQoNCk9uIE1hciAzLCAyMDE1LCBhdCAxOjEwIFBNLCBJYW4gQ2FtcGJlbGwg PGlqY0B4ZW4ub3JnPG1haWx0bzppamNAeGVuLm9yZz4+IHdyb3RlOg0KDQpPbiBNb24sIDIwMTUt MDMtMDIgYXQgMjA6MTAgKzAwMDAsIEx1Y2FzIFZpYW5uYSB3cm90ZToNCndlIHdvdWxkIGxpa2Ug dG8gYmUgaW5jbHVkZWQgb24gdGhlIHByZS1kaXNjbG9zdXJlIGxpc3QuDQoNCkhpLA0KDQpUaGFu ayB5b3UgZm9yIHlvdXIgYXBwbGljYXRpb24uDQoNClRoZSBzZWN1cml0eSBwb2xpY3lbMF0gcmVx dWlyZXMgIkxpbmsocykgdG8gY3VycmVudCBwdWJsaWMgd2ViIHBhZ2VzLA0KYmVsb25naW5nIHRv IHlvdXIgb3JnYW5pc2F0aW9uLCIgZm9yIGVhY2ggcGllY2Ugb2YgaW5mb3JtYXRpb24uICBUaGlz IGlzDQptaXNzaW5nIGluIHRoZSBjYXNlIG9mICJFdmlkZW5jZSBvZiB5b3VyIHN0YXR1cyBhcyBh IHVzZXIvZGlzdHJpYnV0b3Igb2YNClhlbiIuDQoNClRoZSBwb2xpY3kgYWxzbyBzYXlzICJJZiB0 aGUgcGFnZXMgYXJlIGxvbmcgYW5kL29yIFBERnMgYXJlIGludm9sdmVkLA0KeW91ciBlbWFpbCBz aG91bGQgc2F5IHdoaWNoIHBhcnQgb2YgdGhlIHBhZ2VzIGFuZCBkb2N1bWVudHMgYXJlDQpyZWxl dmFudC4iIHdoaWNoIGlzIHBhcnRpY3VsYXJseSByZWxldmFudCB3aGVuIGl0IGlzIG5lY2Vzc2Fy eSBmb3IgdXMgdG8NCnVzZSBhIHRyYW5zbGF0aW9uIHNlcnZpY2UuIFBsZWFzZSBjb3VsZCB5b3Ug bGV0IHVzIGtub3cgd2hpY2ggc2VjdGlvbiBvZg0KeW91ciAiQ2xvdWQgQ29tcHV0aW5nIGUgU2Vy dmlkb3JlcyBEZWRpY2Fkb3MiIGRvY3VtZW50IGNvbnRhaW5zOg0KDQogICAgICAgWW91ciBpbnZp dGF0aW9uIHRvIG1lbWJlcnMgb2YgdGhlIHB1YmxpYywgd2hvIGRpc2NvdmVyIHNlY3VyaXR5DQog ICAgICAgcHJvYmxlbXMgd2l0aCB5b3VyIHByb2R1Y3RzL3NlcnZpY2VzLCB0byByZXBvcnQgdGhl bSBpbg0KICAgICAgIGNvbmZpZGVuY2UgdG8geW91OyIgYW5kDQogICAgICAgU3BlY2lmaWNhbGx5 LCB0aGUgY29udGFjdCBpbmZvcm1hdGlvbiAoZW1haWwgYWRkcmVzc2VzIG9yIG90aGVyDQogICAg ICAgY29udGFjdCBpbnN0cnVjdGlvbnMpIHdoaWNoIHN1Y2ggYSBtZW1iZXIgb2YgdGhlIHB1Ymxp YyBzaG91bGQNCiAgICAgICB1c2UuDQoNClBsZWFzZSBjYW4geW91IHByb3ZpZGUgdGhpcyBpbmZv cm1hdGlvbiBzbyB0aGF0IHdlIG1heSBjb250aW51ZSB0bw0KcHJvY2VzcyB5b3VyIGFwcGxpY2F0 aW9uLg0KDQpUaGFua3MsDQpJYW4uDQoNClswXSBodHRwOi8vd3d3LnhlbnByb2plY3Qub3JnL3Nl Y3VyaXR5LXBvbGljeS5odG1sDQoNCg0KDQoNCg== --_000_9B38A1D14C5B4BF3B432EC22415535AClocawebcombr_ Content-Type: text/html; charset="utf-8" Content-ID: <1842DAB855EF5548A63FBB6281FC2A22@fabrica.locaweb.com.br> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KSGkgSWFuLA0KPGRpdiBjbGFzcz0i Ij48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+LSBFdmlkZW5jZSBvZiB5b3Vy IHN0YXR1cyBhcyBhIHVzZXIvZGlzdHJpYnV0b3Igb2YmbmJzcDtYZW46Jm5ic3A7PC9kaXY+DQo8 ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5PbiBvdXIg b2ZmaWNpYWwgd2lraSB3ZSBoYXZlIHNvbWUgZG9jdW1lbnRhdGlvbnMgbWVudGlvbmluZyB0aGUg cGxhdGZvcm0gWGVuLjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YSBocmVmPSJodHRwOi8vd2lraS5s b2Nhd2ViLmNvbS5ici9wdC1ici9DYXRlZ29yaWE6Q2xvdWRfU2VydmVyX1BybyIgY2xhc3M9IiI+ aHR0cDovL3dpa2kubG9jYXdlYi5jb20uYnIvcHQtYnIvQ2F0ZWdvcmlhOkNsb3VkX1NlcnZlcl9Q cm88L2E+Jm5ic3A7KHB0LUJSKTwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YSBocmVmPSJodHRwOi8v d2lraS5sb2Nhd2ViLmNvbS5ici9pbmRleC5waHAvQWRtaW5pc3RyYcOnw6NvXy1fQcOnw7Vlc18t X0F0dWFsaXphw6fDo29fZG9fWGVuX1Rvb2xzIiBjbGFzcz0iIj5odHRwOi8vd2lraS5sb2Nhd2Vi LmNvbS5ici9pbmRleC5waHAvQWRtaW5pc3RyYSVDMyVBNyVDMyVBM29fLV9BJUMzJUE3JUMzJUI1 ZXNfLV9BdHVhbGl6YSVDMyVBNyVDMyVBM29fZG9fWGVuX1Rvb2xzPC9hPiZuYnNwOyhwdC1CUik8 L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIi Pi0gSW5mb3JtYXRpb24gYWJvdXQgeW91ciBoYW5kbGluZyBvZiBzZWN1cml0eSBwcm9ibGVtczo8 L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIi PlNlY3VyaXR5IGNvbnRhY3QgZGV0YWlscyBpcyBtZW50aW9uZWQgb24gb3VyIGluZm9ybWF0aW9u IHBvbGljeS4gU2VjdGlvbiDigJxWdWxuZXJhYmlsaWRhZGUgZGUgc2VndXJhbsOnYeKAnSAtJmd0 OyBTZWN1cml0eSBWdWxuZXJhYmlsaXR5LjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YSBocmVmPSJo dHRwOi8vd3d3LmxvY2F3ZWIuY29tLmJyL3NvYnJlLWxvY2F3ZWIvY29udHJhdG9zLXBvbGl0aWNh cy9wb2xpdGljYS11c28taW5mb3JtYWNvZXMuaHRtbCIgY2xhc3M9IiI+aHR0cDovL3d3dy5sb2Nh d2ViLmNvbS5ici9zb2JyZS1sb2Nhd2ViL2NvbnRyYXRvcy1wb2xpdGljYXMvcG9saXRpY2EtdXNv LWluZm9ybWFjb2VzLmh0bWw8L2E+Jm5ic3A7KHB0LUJSKTwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48 YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+VGhhbmtzLDwvZGl2Pg0KPGRpdiBj bGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+THVjYXM8L2Rpdj4N CjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBj bGFzcz0iIj4NCjxkaXY+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYg Y2xhc3M9IiI+T24gTWFyIDMsIDIwMTUsIGF0IDE6MTAgUE0sIElhbiBDYW1wYmVsbCAmbHQ7PGEg aHJlZj0ibWFpbHRvOmlqY0B4ZW4ub3JnIiBjbGFzcz0iIj5pamNAeGVuLm9yZzwvYT4mZ3Q7IHdy b3RlOjwvZGl2Pg0KPGJyIGNsYXNzPSJBcHBsZS1pbnRlcmNoYW5nZS1uZXdsaW5lIj4NCjxkaXYg Y2xhc3M9IiI+T24gTW9uLCAyMDE1LTAzLTAyIGF0IDIwOjEwICYjNDM7MDAwMCwgTHVjYXMgVmlh bm5hIHdyb3RlOjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIi PndlIHdvdWxkIGxpa2UgdG8gYmUgaW5jbHVkZWQgb24gdGhlIHByZS1kaXNjbG9zdXJlIGxpc3Qu PGJyIGNsYXNzPSIiPg0KPC9ibG9ja3F1b3RlPg0KPGJyIGNsYXNzPSIiPg0KSGksPGJyIGNsYXNz PSIiPg0KPGJyIGNsYXNzPSIiPg0KVGhhbmsgeW91IGZvciB5b3VyIGFwcGxpY2F0aW9uLjxiciBj bGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NClRoZSBzZWN1cml0eSBwb2xpY3lbMF0gcmVxdWlyZXMg JnF1b3Q7TGluayhzKSB0byBjdXJyZW50IHB1YmxpYyB3ZWIgcGFnZXMsPGJyIGNsYXNzPSIiPg0K YmVsb25naW5nIHRvIHlvdXIgb3JnYW5pc2F0aW9uLCZxdW90OyBmb3IgZWFjaCBwaWVjZSBvZiBp bmZvcm1hdGlvbi4gJm5ic3A7VGhpcyBpczxiciBjbGFzcz0iIj4NCm1pc3NpbmcgaW4gdGhlIGNh c2Ugb2YgJnF1b3Q7RXZpZGVuY2Ugb2YgeW91ciBzdGF0dXMgYXMgYSB1c2VyL2Rpc3RyaWJ1dG9y IG9mPGJyIGNsYXNzPSIiPg0KWGVuJnF1b3Q7LjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4N ClRoZSBwb2xpY3kgYWxzbyBzYXlzICZxdW90O0lmIHRoZSBwYWdlcyBhcmUgbG9uZyBhbmQvb3Ig UERGcyBhcmUgaW52b2x2ZWQsPGJyIGNsYXNzPSIiPg0KeW91ciBlbWFpbCBzaG91bGQgc2F5IHdo aWNoIHBhcnQgb2YgdGhlIHBhZ2VzIGFuZCBkb2N1bWVudHMgYXJlPGJyIGNsYXNzPSIiPg0KcmVs ZXZhbnQuJnF1b3Q7IHdoaWNoIGlzIHBhcnRpY3VsYXJseSByZWxldmFudCB3aGVuIGl0IGlzIG5l Y2Vzc2FyeSBmb3IgdXMgdG88YnIgY2xhc3M9IiI+DQp1c2UgYSB0cmFuc2xhdGlvbiBzZXJ2aWNl LiBQbGVhc2UgY291bGQgeW91IGxldCB1cyBrbm93IHdoaWNoIHNlY3Rpb24gb2Y8YnIgY2xhc3M9 IiI+DQp5b3VyICZxdW90O0Nsb3VkIENvbXB1dGluZyBlIFNlcnZpZG9yZXMgRGVkaWNhZG9zJnF1 b3Q7IGRvY3VtZW50IGNvbnRhaW5zOjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCiZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO1lvdXIgaW52aXRhdGlvbiB0byBt ZW1iZXJzIG9mIHRoZSBwdWJsaWMsIHdobyBkaXNjb3ZlciBzZWN1cml0eTxiciBjbGFzcz0iIj4N CiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO3Byb2JsZW1zIHdpdGgg eW91ciBwcm9kdWN0cy9zZXJ2aWNlcywgdG8gcmVwb3J0IHRoZW0gaW48YnIgY2xhc3M9IiI+DQom bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtjb25maWRlbmNlIHRvIHlv dTsmcXVvdDsgYW5kPGJyIGNsYXNzPSIiPg0KJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7U3BlY2lmaWNhbGx5LCB0aGUgY29udGFjdCBpbmZvcm1hdGlvbiAoZW1haWwg YWRkcmVzc2VzIG9yIG90aGVyPGJyIGNsYXNzPSIiPg0KJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Y29udGFjdCBpbnN0cnVjdGlvbnMpIHdoaWNoIHN1Y2ggYSBtZW1i ZXIgb2YgdGhlIHB1YmxpYyBzaG91bGQ8YnIgY2xhc3M9IiI+DQombmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDt1c2UuPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0K UGxlYXNlIGNhbiB5b3UgcHJvdmlkZSB0aGlzIGluZm9ybWF0aW9uIHNvIHRoYXQgd2UgbWF5IGNv bnRpbnVlIHRvPGJyIGNsYXNzPSIiPg0KcHJvY2VzcyB5b3VyIGFwcGxpY2F0aW9uLjxiciBjbGFz cz0iIj4NCjxiciBjbGFzcz0iIj4NClRoYW5rcyw8YnIgY2xhc3M9IiI+DQpJYW4uPGJyIGNsYXNz PSIiPg0KPGJyIGNsYXNzPSIiPg0KWzBdIDxhIGhyZWY9Imh0dHA6Ly93d3cueGVucHJvamVjdC5v cmcvc2VjdXJpdHktcG9saWN5Lmh0bWwiIGNsYXNzPSIiPmh0dHA6Ly93d3cueGVucHJvamVjdC5v cmcvc2VjdXJpdHktcG9saWN5Lmh0bWw8L2E+PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0K PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rp dj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_9B38A1D14C5B4BF3B432EC22415535AClocawebcombr_-- --===============8493981882811655665== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications --===============8493981882811655665==-- From predisclosure-applications-bounces@lists.xenproject.org Wed Mar 04 13:34:49 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Wed, 04 Mar 2015 13:34:49 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YT9Rp-0005zF-FW; Wed, 04 Mar 2015 13:34:49 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YT9Rn-0005z5-SO for predisclosure-applications@lists.xenproject.org; Wed, 04 Mar 2015 13:34:48 +0000 Received: from [193.109.254.147] by server-2.bemta-14.messagelabs.com id D4/D6-31919-7F907F45; Wed, 04 Mar 2015 13:34:47 +0000 X-Env-Sender: iservice@datamatters.ca X-Msg-Ref: server-12.tower-27.messagelabs.com!1425476085!14644257!1 X-Originating-IP: [206.210.104.150] X-SpamReason: No, hits=1.3 required=7.0 tests=HTML_40_50, HTML_IMAGE_ONLY_16,HTML_MESSAGE X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 5861 invoked from network); 4 Mar 2015 13:34:45 -0000 Received: from spammx02.iasl.com (HELO spammx02.iasl.com) (206.210.104.150) by server-12.tower-27.messagelabs.com with SMTP; 4 Mar 2015 13:34:45 -0000 X-ASG-Debug-ID: 1425476061-06d6cb03fc2d5a38000c-V8FeiQ Received: from zcs7-01.dmtel.ca (mx01.zcs7.hosted.dmtel.ca [64.250.95.22]) by spammx02.iasl.com with ESMTP id 4SnQrsQ4bHrsE1ud for ; Wed, 04 Mar 2015 08:34:33 -0500 (EST) X-Barracuda-Envelope-From: iservice@datamatters.ca X-Barracuda-Apparent-Source-IP: 64.250.95.22 Received: from localhost (localhost [127.0.0.1]) by zcs7-01.dmtel.ca (Postfix) with ESMTP id 934EDA71D3 for ; Tue, 3 Mar 2015 09:02:34 -0500 (EST) X-Virus-Scanned: amavisd-new at zcs7-01.dmtel.ca Received: from zcs7-01.dmtel.ca ([127.0.0.1]) by localhost (zcs7-01.dmtel.ca [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7rJ3XB+p3LUe for ; Tue, 3 Mar 2015 09:02:30 -0500 (EST) Received: from zcs7-01.dmtel.ca (zcs7-01.dmtel.ca [64.250.95.22]) by zcs7-01.dmtel.ca (Postfix) with ESMTP id 50FD3A714B for ; Tue, 3 Mar 2015 09:02:30 -0500 (EST) Date: Tue, 03 Mar 2015 09:02:30 -0500 (EST) From: Ian Service To: predisclosure-applications@lists.xenproject.org Message-ID: X-ASG-Orig-Subj: Predisclosure List Application In-Reply-To: <268fab9a-d154-47b6-9677-8fa0ed0aff1b@zcs7-01.dmtel.ca> MIME-Version: 1.0 X-Originating-IP: [199.115.91.22] X-Mailer: Zimbra 7.1.3_GA_3346 (ZimbraWebClient - FF3.0 (Mac)/7.1.3_GA_3346) X-Barracuda-Connect: mx01.zcs7.hosted.dmtel.ca[64.250.95.22] X-Barracuda-Start-Time: 1425476073 X-Barracuda-URL: http://206.210.104.150:8000/cgi-mod/mark.cgi X-Virus-Scanned: by bsmtpd at iasl.com X-Barracuda-BRTS-Status: 1 X-Barracuda-Spam-Score: 0.63 X-Barracuda-Spam-Status: No, SCORE=0.63 using global scores of TAG_LEVEL=1000.0 QUARANTINE_LEVEL=1000.0 KILL_LEVEL=9.0 tests=HTML_IMAGE_ONLY_16, HTML_MESSAGE X-Barracuda-Spam-Report: Code version 3.2, rules version 3.2.3.16176 Rule breakdown below pts rule name description ---- ---------------------- -------------------------------------------------- 0.63 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of words 0.00 HTML_MESSAGE BODY: HTML included in message Subject: [Predisclosure-applications] Predisclosure List Application X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============2018399773748385340==" Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org --===============2018399773748385340== Content-Type: multipart/alternative; boundary="=_758283de-280c-4a8f-a043-3c5fccb1ab34" --=_758283de-280c-4a8f-a043-3c5fccb1ab34 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Organization: Data Matters Inc Domain names: datamatters.ca cloudstack.ca Brief Description: we're an internet service provider and offer a variety of hosted services using Xen and XenServer to provide them Evidence of service/software provider: http://datamatters.ca/solutions/virtual-servers/ http://datamatters.ca/solutions/off-site-backup/ http://datamatters.ca/solutions/hosted-exchange/ We have read the security policy and will abide by the terms therein. Any email receive from this list will be held in confidence and used solely to protect our systems/users/data from malicious activity. Should you require any further information to have us subscribed, please contact me, otherwise please add security@datamatters.ca to the list. Thank you for your attention, Ian Service DataMatters 416-848-7555 iservice@datamatters.ca --=_758283de-280c-4a8f-a043-3c5fccb1ab34 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable <= div style=3D'font-family: arial,helvetica,sans-serif; font-size: 10pt; colo= r: #000000'>Organization: Data Matters Inc
Domain names: datamatters.ca = cloudstack.ca
Brief Description: we're an internet service provider and = offer a variety of hosted services using Xen and XenServer to provide them<= br>Evidence of service/software provider:
  http://datamatters.ca/= solutions/virtual-servers/
  http://datamatters.ca/solutions/off-si= te-backup/
  http://datamatters.ca/solutions/hosted-exchange/
We have read the security policy and will abide by the terms therein. Any= email receive from this list will be held in confidence and used solely to= protect our systems/users/data from malicious activity.

Should you = require any further information to have us subscribed, please contact me, o= therwise please add security@datamatters.ca to the list.

Thank you f= or your attention,

Ian Service

3D"D=

416-848-7555
iservice@datamatters.ca
--=_758283de-280c-4a8f-a043-3c5fccb1ab34-- --===============2018399773748385340== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications --===============2018399773748385340==-- From predisclosure-applications-bounces@lists.xenproject.org Wed Mar 04 13:34:49 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Wed, 04 Mar 2015 13:34:49 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YT9Rp-0005zF-FW; Wed, 04 Mar 2015 13:34:49 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YT9Rn-0005z5-SO for predisclosure-applications@lists.xenproject.org; Wed, 04 Mar 2015 13:34:48 +0000 Received: from [193.109.254.147] by server-2.bemta-14.messagelabs.com id D4/D6-31919-7F907F45; Wed, 04 Mar 2015 13:34:47 +0000 X-Env-Sender: iservice@datamatters.ca X-Msg-Ref: server-12.tower-27.messagelabs.com!1425476085!14644257!1 X-Originating-IP: [206.210.104.150] X-SpamReason: No, hits=1.3 required=7.0 tests=HTML_40_50, HTML_IMAGE_ONLY_16,HTML_MESSAGE X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 5861 invoked from network); 4 Mar 2015 13:34:45 -0000 Received: from spammx02.iasl.com (HELO spammx02.iasl.com) (206.210.104.150) by server-12.tower-27.messagelabs.com with SMTP; 4 Mar 2015 13:34:45 -0000 X-ASG-Debug-ID: 1425476061-06d6cb03fc2d5a38000c-V8FeiQ Received: from zcs7-01.dmtel.ca (mx01.zcs7.hosted.dmtel.ca [64.250.95.22]) by spammx02.iasl.com with ESMTP id 4SnQrsQ4bHrsE1ud for ; Wed, 04 Mar 2015 08:34:33 -0500 (EST) X-Barracuda-Envelope-From: iservice@datamatters.ca X-Barracuda-Apparent-Source-IP: 64.250.95.22 Received: from localhost (localhost [127.0.0.1]) by zcs7-01.dmtel.ca (Postfix) with ESMTP id 934EDA71D3 for ; Tue, 3 Mar 2015 09:02:34 -0500 (EST) X-Virus-Scanned: amavisd-new at zcs7-01.dmtel.ca Received: from zcs7-01.dmtel.ca ([127.0.0.1]) by localhost (zcs7-01.dmtel.ca [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7rJ3XB+p3LUe for ; Tue, 3 Mar 2015 09:02:30 -0500 (EST) Received: from zcs7-01.dmtel.ca (zcs7-01.dmtel.ca [64.250.95.22]) by zcs7-01.dmtel.ca (Postfix) with ESMTP id 50FD3A714B for ; Tue, 3 Mar 2015 09:02:30 -0500 (EST) Date: Tue, 03 Mar 2015 09:02:30 -0500 (EST) From: Ian Service To: predisclosure-applications@lists.xenproject.org Message-ID: X-ASG-Orig-Subj: Predisclosure List Application In-Reply-To: <268fab9a-d154-47b6-9677-8fa0ed0aff1b@zcs7-01.dmtel.ca> MIME-Version: 1.0 X-Originating-IP: [199.115.91.22] X-Mailer: Zimbra 7.1.3_GA_3346 (ZimbraWebClient - FF3.0 (Mac)/7.1.3_GA_3346) X-Barracuda-Connect: mx01.zcs7.hosted.dmtel.ca[64.250.95.22] X-Barracuda-Start-Time: 1425476073 X-Barracuda-URL: http://206.210.104.150:8000/cgi-mod/mark.cgi X-Virus-Scanned: by bsmtpd at iasl.com X-Barracuda-BRTS-Status: 1 X-Barracuda-Spam-Score: 0.63 X-Barracuda-Spam-Status: No, SCORE=0.63 using global scores of TAG_LEVEL=1000.0 QUARANTINE_LEVEL=1000.0 KILL_LEVEL=9.0 tests=HTML_IMAGE_ONLY_16, HTML_MESSAGE X-Barracuda-Spam-Report: Code version 3.2, rules version 3.2.3.16176 Rule breakdown below pts rule name description ---- ---------------------- -------------------------------------------------- 0.63 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of words 0.00 HTML_MESSAGE BODY: HTML included in message Subject: [Predisclosure-applications] Predisclosure List Application X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============2018399773748385340==" Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org --===============2018399773748385340== Content-Type: multipart/alternative; boundary="=_758283de-280c-4a8f-a043-3c5fccb1ab34" --=_758283de-280c-4a8f-a043-3c5fccb1ab34 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Organization: Data Matters Inc Domain names: datamatters.ca cloudstack.ca Brief Description: we're an internet service provider and offer a variety of hosted services using Xen and XenServer to provide them Evidence of service/software provider: http://datamatters.ca/solutions/virtual-servers/ http://datamatters.ca/solutions/off-site-backup/ http://datamatters.ca/solutions/hosted-exchange/ We have read the security policy and will abide by the terms therein. Any email receive from this list will be held in confidence and used solely to protect our systems/users/data from malicious activity. Should you require any further information to have us subscribed, please contact me, otherwise please add security@datamatters.ca to the list. Thank you for your attention, Ian Service DataMatters 416-848-7555 iservice@datamatters.ca --=_758283de-280c-4a8f-a043-3c5fccb1ab34 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable <= div style=3D'font-family: arial,helvetica,sans-serif; font-size: 10pt; colo= r: #000000'>Organization: Data Matters Inc
Domain names: datamatters.ca = cloudstack.ca
Brief Description: we're an internet service provider and = offer a variety of hosted services using Xen and XenServer to provide them<= br>Evidence of service/software provider:
  http://datamatters.ca/= solutions/virtual-servers/
  http://datamatters.ca/solutions/off-si= te-backup/
  http://datamatters.ca/solutions/hosted-exchange/
We have read the security policy and will abide by the terms therein. Any= email receive from this list will be held in confidence and used solely to= protect our systems/users/data from malicious activity.

Should you = require any further information to have us subscribed, please contact me, o= therwise please add security@datamatters.ca to the list.

Thank you f= or your attention,

Ian Service

3D"D=

416-848-7555
iservice@datamatters.ca
--=_758283de-280c-4a8f-a043-3c5fccb1ab34-- --===============2018399773748385340== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications --===============2018399773748385340==-- From predisclosure-applications-bounces@lists.xenproject.org Wed Mar 04 13:55:24 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Wed, 04 Mar 2015 13:55:24 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YT9lk-0000sz-0A; Wed, 04 Mar 2015 13:55:24 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YT9li-0000st-Sz for predisclosure-applications@lists.xenproject.org; Wed, 04 Mar 2015 13:55:23 +0000 Received: from [193.109.254.147] by server-11.bemta-14.messagelabs.com id 27/5D-02760-ACE07F45; Wed, 04 Mar 2015 13:55:22 +0000 X-Env-Sender: bernard@openminds.be X-Msg-Ref: server-4.tower-27.messagelabs.com!1425477319!14651923!1 X-Originating-IP: [195.47.215.47] X-SpamReason: No, hits=0.9 required=7.0 tests=HTML_20_30,HTML_MESSAGE X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 18136 invoked from network); 4 Mar 2015 13:55:19 -0000 Received: from november.openminds.be (HELO november.openminds.be) (195.47.215.47) by server-4.tower-27.messagelabs.com with SMTP; 4 Mar 2015 13:55:19 -0000 Received: from [192.168.20.22] (vpn-001.openminds.be [188.93.102.221]) by november.openminds.be (Postfix) with ESMTPA id A14351210B5D; Wed, 4 Mar 2015 14:55:17 +0100 (CET) Mime-Version: 1.0 (Mac OS X Mail 6.6 \(1510\)) From: Bernard Grymonpon In-Reply-To: <1425399033.25940.53.camel@xen.org> Date: Wed, 4 Mar 2015 14:55:17 +0100 Message-Id: <5040E4E7-8BB0-496B-B56C-D7AE59DF6D34@openminds.be> References: <1425399033.25940.53.camel@xen.org> To: Ian Campbell X-Mailer: Apple Mail (2.1510) Cc: predisclosure-applications@lists.xenproject.org, Frank Louwers Subject: Re: [Predisclosure-applications] Inclusion in the Xen Security pre-disclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============4379198725521499088==" Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org --===============4379198725521499088== Content-Type: multipart/alternative; boundary="Apple-Mail=_C13D8EB4-FA53-4F7D-847C-0B80B9B270AA" --Apple-Mail=_C13D8EB4-FA53-4F7D-847C-0B80B9B270AA Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=windows-1252 Ian, thanks for the feedback. For the "obtaining a quote": Or basic offerings (shared hosting, domain names, =85) are available via = online ordering forms, but we don't have an online ordering process for = VM's. Our business is managed enterprise hosting, including the sizing = and layout of which VM's are needed, the setup, daily maintenance, = patching, etc. This ranges from one VM up to "private cloud" (multiple = VMs on several dedicated servers for a single client). Every offer is = different, and is made to match the needs of the customer. It isn't = possible to order an "off-the-shelve unmanaged vm" with us. People contact us to arrange a meeting, and get a quote. On every page = describing the various products we offer, we have a call-to-action at = the bottom to get in touch with us: = http://www.openminds.be/en/cloud-hosting (the big orange box at the = bottom of the page). I hope this is sufficient (it works for our = business, as we have clients, and get contacted to make quotes=85;-) ). = On the contact-us page is an additional sales mail address linked. Contacting us concerning security-issues: Our contact info in linked on each page (top navigation bar, "contact"), = and detailed contact info is available here = http://www.openminds.be/en/contact. There is a small paragraph = concerning security-issues. Besides this, our clients have contracts = with us, and part of the contract is our AUP, which contains a section = about security - "if they discover something which is out of the = ordinary, they should get in contact" summarized. The tech@ alias: You can change the tech@ alias to the security@ alias, if you want. The = non-disclosere nature will be communicated to all engineers upon = inclusion in the list. The amount of people actually seeing the ticket = is about the same, an average of 8 to 10 people would receive the mail. Technically, both aliases will work, but the tech@ mails needs to be = converted to a ticket, after an engineer decides the security-issues = described are affecting our systems and/or customers. We use the tech@ = for our subscription to Debian/Ubuntu Security mailings, some = security-related mailing lists, etc. The security@ is an alias to the = support-system, and will immediately create a ticket in our systems = (which can then be closed if we aren't affected). I hope this clarifies our application. Kind regards, Bernard Grymonpon Openminds BVBA On 03 Mar 2015, at 17:10, Ian Campbell wrote: > On Mon, 2015-03-02 at 17:05 +0100, Bernard Grymonpon wrote: >> we would like to be included in the Xen pre-disclosure list.=20 >=20 > Thank you for your application. >=20 > The security policy[0] requires "Link(s) to current public web pages, > belonging to your organisation," for each piece of information. >=20 > Please could you point us to the page which describes how one can = obtain > a quote from you. >=20 > With regards to "Your invitation to members of the public, who = discover > security problems with your products/services, to report them in > confidence to you;" and "Specifically, the contact information (email > addresses or other contact instructions) which such a member of the > public should use." please can you point us to such a page. I'm afraid > that the policy requires this. >=20 > Please can you provide this information so that we may continue to > process your application. >=20 > Please could you also clarify the scope of your tech@ alias. It is > intended that predisclosures go to a small team dedicated to handling > incoming security issues, rather than a large team of system > administrators. >=20 > Thanks, > Ian. >=20 > [0] http://www.xenproject.org/security-policy.html >=20 >=20 >=20 --Apple-Mail=_C13D8EB4-FA53-4F7D-847C-0B80B9B270AA Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=windows-1252

Or basic offerings (shared hosting, = domain names, =85) are available via online ordering forms, but we don't = have an online ordering process for VM's. Our business is managed = enterprise hosting, including the sizing and layout of which VM's are = needed, the setup, daily maintenance, patching, etc. This ranges from = one VM up to "private cloud" (multiple VMs on several dedicated servers = for a single client). Every offer is different, and is made to match the = needs of the customer. It isn't possible to order an "off-the-shelve = unmanaged vm" with us.

People contact us to = arrange a meeting, and get a quote. On every page describing the various = products we offer, we have a call-to-action at the bottom to get in = touch with us: http://www.openminds.be/= en/cloud-hosting (the big orange box at the bottom of the = page). I hope this is sufficient (it works for our business, as we = have clients, and get contacted to make quotes=85;-) ). On the = contact-us page is an additional sales mail address = linked.

Contacting us concerning = security-issues:

Our contact info in linked on = each page (top navigation bar, "contact"), and detailed contact info is = available here http://www.openminds.be/en/con= tact. There is a small paragraph concerning security-issues. Besides = this, our clients have contracts with us, and part of the contract is = our AUP, which contains a section about security - "if they discover = something which is out of the ordinary, they should get in contact" = summarized.

The tech@ = alias:

You can change the tech@ alias to the = security@ alias, if you want. The non-disclosere nature will be = communicated to all engineers upon inclusion in the list. The = amount of people actually seeing the ticket is about the same, an = average of 8 to 10 people would receive the = mail.

Technically, both aliases will work, but = the tech@ mails needs to be converted to a ticket, after an engineer = decides the security-issues described are affecting our systems and/or = customers. We use the tech@ for our subscription to Debian/Ubuntu = Security mailings, some security-related mailing lists, etc. The = security@ is an alias to the support-system, and will immediately create = a ticket in our systems (which can then be closed if we aren't = affected).

I hope this clarifies our = application.

Kind regards,
Bernard = Grymonpon
Openminds BVBA

On 03 Mar 2015, at = 17:10, Ian Campbell <ijc@xen.org>= wrote:

On Mon, 2015-03-02 at 17:05 +0100, Bernard Grymonpon = wrote:
we would like to be included in the = Xen pre-disclosure list.

Thank you for your = application.

The security policy[0] requires "Link(s) to current = public web pages,
belonging to your organisation," for each piece of = information.

Please could you point us to the page which = describes how one can obtain
a quote from you.

With regards to = "Your invitation to members of the public, who discover
security = problems with your products/services, to report them in
confidence to = you;" and "Specifically, the contact information (email
addresses or = other contact instructions) which such a member of the
public should = use." please can you point us to such a page. I'm afraid
that the = policy requires this.

Please can you provide this information so = that we may continue to
process your application.

Please could = you also clarify the scope of your tech@ alias. It is
intended that = predisclosures go to a small team dedicated to handling
incoming = security issues, rather than a large team of = system
administrators.

Thanks,
Ian.

[0] http://www.xenproj= ect.org/security-policy.html




= --Apple-Mail=_C13D8EB4-FA53-4F7D-847C-0B80B9B270AA-- --===============4379198725521499088== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications --===============4379198725521499088==-- From predisclosure-applications-bounces@lists.xenproject.org Wed Mar 04 13:55:24 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Wed, 04 Mar 2015 13:55:24 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YT9lk-0000sz-0A; Wed, 04 Mar 2015 13:55:24 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YT9li-0000st-Sz for predisclosure-applications@lists.xenproject.org; Wed, 04 Mar 2015 13:55:23 +0000 Received: from [193.109.254.147] by server-11.bemta-14.messagelabs.com id 27/5D-02760-ACE07F45; Wed, 04 Mar 2015 13:55:22 +0000 X-Env-Sender: bernard@openminds.be X-Msg-Ref: server-4.tower-27.messagelabs.com!1425477319!14651923!1 X-Originating-IP: [195.47.215.47] X-SpamReason: No, hits=0.9 required=7.0 tests=HTML_20_30,HTML_MESSAGE X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 18136 invoked from network); 4 Mar 2015 13:55:19 -0000 Received: from november.openminds.be (HELO november.openminds.be) (195.47.215.47) by server-4.tower-27.messagelabs.com with SMTP; 4 Mar 2015 13:55:19 -0000 Received: from [192.168.20.22] (vpn-001.openminds.be [188.93.102.221]) by november.openminds.be (Postfix) with ESMTPA id A14351210B5D; Wed, 4 Mar 2015 14:55:17 +0100 (CET) Mime-Version: 1.0 (Mac OS X Mail 6.6 \(1510\)) From: Bernard Grymonpon In-Reply-To: <1425399033.25940.53.camel@xen.org> Date: Wed, 4 Mar 2015 14:55:17 +0100 Message-Id: <5040E4E7-8BB0-496B-B56C-D7AE59DF6D34@openminds.be> References: <1425399033.25940.53.camel@xen.org> To: Ian Campbell X-Mailer: Apple Mail (2.1510) Cc: predisclosure-applications@lists.xenproject.org, Frank Louwers Subject: Re: [Predisclosure-applications] Inclusion in the Xen Security pre-disclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============4379198725521499088==" Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org --===============4379198725521499088== Content-Type: multipart/alternative; boundary="Apple-Mail=_C13D8EB4-FA53-4F7D-847C-0B80B9B270AA" --Apple-Mail=_C13D8EB4-FA53-4F7D-847C-0B80B9B270AA Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=windows-1252 Ian, thanks for the feedback. For the "obtaining a quote": Or basic offerings (shared hosting, domain names, =85) are available via = online ordering forms, but we don't have an online ordering process for = VM's. Our business is managed enterprise hosting, including the sizing = and layout of which VM's are needed, the setup, daily maintenance, = patching, etc. This ranges from one VM up to "private cloud" (multiple = VMs on several dedicated servers for a single client). Every offer is = different, and is made to match the needs of the customer. It isn't = possible to order an "off-the-shelve unmanaged vm" with us. People contact us to arrange a meeting, and get a quote. On every page = describing the various products we offer, we have a call-to-action at = the bottom to get in touch with us: = http://www.openminds.be/en/cloud-hosting (the big orange box at the = bottom of the page). I hope this is sufficient (it works for our = business, as we have clients, and get contacted to make quotes=85;-) ). = On the contact-us page is an additional sales mail address linked. Contacting us concerning security-issues: Our contact info in linked on each page (top navigation bar, "contact"), = and detailed contact info is available here = http://www.openminds.be/en/contact. There is a small paragraph = concerning security-issues. Besides this, our clients have contracts = with us, and part of the contract is our AUP, which contains a section = about security - "if they discover something which is out of the = ordinary, they should get in contact" summarized. The tech@ alias: You can change the tech@ alias to the security@ alias, if you want. The = non-disclosere nature will be communicated to all engineers upon = inclusion in the list. The amount of people actually seeing the ticket = is about the same, an average of 8 to 10 people would receive the mail. Technically, both aliases will work, but the tech@ mails needs to be = converted to a ticket, after an engineer decides the security-issues = described are affecting our systems and/or customers. We use the tech@ = for our subscription to Debian/Ubuntu Security mailings, some = security-related mailing lists, etc. The security@ is an alias to the = support-system, and will immediately create a ticket in our systems = (which can then be closed if we aren't affected). I hope this clarifies our application. Kind regards, Bernard Grymonpon Openminds BVBA On 03 Mar 2015, at 17:10, Ian Campbell wrote: > On Mon, 2015-03-02 at 17:05 +0100, Bernard Grymonpon wrote: >> we would like to be included in the Xen pre-disclosure list.=20 >=20 > Thank you for your application. >=20 > The security policy[0] requires "Link(s) to current public web pages, > belonging to your organisation," for each piece of information. >=20 > Please could you point us to the page which describes how one can = obtain > a quote from you. >=20 > With regards to "Your invitation to members of the public, who = discover > security problems with your products/services, to report them in > confidence to you;" and "Specifically, the contact information (email > addresses or other contact instructions) which such a member of the > public should use." please can you point us to such a page. I'm afraid > that the policy requires this. >=20 > Please can you provide this information so that we may continue to > process your application. >=20 > Please could you also clarify the scope of your tech@ alias. It is > intended that predisclosures go to a small team dedicated to handling > incoming security issues, rather than a large team of system > administrators. >=20 > Thanks, > Ian. >=20 > [0] http://www.xenproject.org/security-policy.html >=20 >=20 >=20 --Apple-Mail=_C13D8EB4-FA53-4F7D-847C-0B80B9B270AA Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=windows-1252

Or basic offerings (shared hosting, = domain names, =85) are available via online ordering forms, but we don't = have an online ordering process for VM's. Our business is managed = enterprise hosting, including the sizing and layout of which VM's are = needed, the setup, daily maintenance, patching, etc. This ranges from = one VM up to "private cloud" (multiple VMs on several dedicated servers = for a single client). Every offer is different, and is made to match the = needs of the customer. It isn't possible to order an "off-the-shelve = unmanaged vm" with us.

People contact us to = arrange a meeting, and get a quote. On every page describing the various = products we offer, we have a call-to-action at the bottom to get in = touch with us: http://www.openminds.be/= en/cloud-hosting (the big orange box at the bottom of the = page). I hope this is sufficient (it works for our business, as we = have clients, and get contacted to make quotes=85;-) ). On the = contact-us page is an additional sales mail address = linked.

Contacting us concerning = security-issues:

Our contact info in linked on = each page (top navigation bar, "contact"), and detailed contact info is = available here http://www.openminds.be/en/con= tact. There is a small paragraph concerning security-issues. Besides = this, our clients have contracts with us, and part of the contract is = our AUP, which contains a section about security - "if they discover = something which is out of the ordinary, they should get in contact" = summarized.

The tech@ = alias:

You can change the tech@ alias to the = security@ alias, if you want. The non-disclosere nature will be = communicated to all engineers upon inclusion in the list. The = amount of people actually seeing the ticket is about the same, an = average of 8 to 10 people would receive the = mail.

Technically, both aliases will work, but = the tech@ mails needs to be converted to a ticket, after an engineer = decides the security-issues described are affecting our systems and/or = customers. We use the tech@ for our subscription to Debian/Ubuntu = Security mailings, some security-related mailing lists, etc. The = security@ is an alias to the support-system, and will immediately create = a ticket in our systems (which can then be closed if we aren't = affected).

I hope this clarifies our = application.

Kind regards,
Bernard = Grymonpon
Openminds BVBA

On 03 Mar 2015, at = 17:10, Ian Campbell <ijc@xen.org>= wrote:

On Mon, 2015-03-02 at 17:05 +0100, Bernard Grymonpon = wrote:
we would like to be included in the = Xen pre-disclosure list.

Thank you for your = application.

The security policy[0] requires "Link(s) to current = public web pages,
belonging to your organisation," for each piece of = information.

Please could you point us to the page which = describes how one can obtain
a quote from you.

With regards to = "Your invitation to members of the public, who discover
security = problems with your products/services, to report them in
confidence to = you;" and "Specifically, the contact information (email
addresses or = other contact instructions) which such a member of the
public should = use." please can you point us to such a page. I'm afraid
that the = policy requires this.

Please can you provide this information so = that we may continue to
process your application.

Please could = you also clarify the scope of your tech@ alias. It is
intended that = predisclosures go to a small team dedicated to handling
incoming = security issues, rather than a large team of = system
administrators.

Thanks,
Ian.

[0] http://www.xenproj= ect.org/security-policy.html




= --Apple-Mail=_C13D8EB4-FA53-4F7D-847C-0B80B9B270AA-- --===============4379198725521499088== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications --===============4379198725521499088==-- From predisclosure-applications-bounces@lists.xenproject.org Wed Mar 04 14:41:36 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Wed, 04 Mar 2015 14:41:36 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YTAUS-0000xA-HT; Wed, 04 Mar 2015 14:41:36 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YTAUQ-0000tE-UZ for predisclosure-applications@lists.xenproject.org; Wed, 04 Mar 2015 14:41:35 +0000 Received: from [193.109.254.147] by server-2.bemta-14.messagelabs.com id 12/B0-31919-E9917F45; Wed, 04 Mar 2015 14:41:34 +0000 X-Env-Sender: ijc@xen.org X-Msg-Ref: server-5.tower-27.messagelabs.com!1425480093!10027071!1 X-Originating-IP: [212.110.190.137] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 26438 invoked from network); 4 Mar 2015 14:41:33 -0000 Received: from benson.vm.bytemark.co.uk (HELO benson.vm.bytemark.co.uk) (212.110.190.137) by server-5.tower-27.messagelabs.com with AES256-SHA encrypted SMTP; 4 Mar 2015 14:41:33 -0000 Received: from [185.25.64.249] (helo=kazak) by benson.vm.bytemark.co.uk with esmtpsa (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.72) (envelope-from ) id 1YTAUL-00070E-EO; Wed, 04 Mar 2015 14:41:29 +0000 Message-ID: <1425480088.25940.179.camel@xen.org> From: Ian Campbell To: Ian Service Date: Wed, 04 Mar 2015 14:41:28 +0000 In-Reply-To: References: X-Mailer: Evolution 3.12.9-1+b1 Mime-Version: 1.0 Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Predisclosure List Application X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org Thank you for your application. The security policy[0] requires "Link(s) to current public web pages, belonging to your organisation," for each piece of information, which you have not provided here for: * Evidence of your status as a user/distributor of Xen: * Information about your handling of security problems: Please can you provide these links, pointing out which parts of the page are relevant, so that we may continue to process your application. Ian. [0] http://www.xenproject.org/security-policy.html On Tue, 2015-03-03 at 09:02 -0500, Ian Service wrote: > Organization: Data Matters Inc > Domain names: datamatters.ca cloudstack.ca > Brief Description: we're an internet service provider and offer a > variety of hosted services using Xen and XenServer to provide them > Evidence of service/software provider: > http://datamatters.ca/solutions/virtual-servers/ > http://datamatters.ca/solutions/off-site-backup/ > http://datamatters.ca/solutions/hosted-exchange/ > > We have read the security policy and will abide by the terms therein. > Any email receive from this list will be held in confidence and used > solely to protect our systems/users/data from malicious activity. > > Should you require any further information to have us subscribed, > please contact me, otherwise please add security@datamatters.ca to the > list. > > Thank you for your attention, > > Ian Service > > DataMatters > > 416-848-7555 > iservice@datamatters.ca > > > _______________________________________________ > Predisclosure-applications mailing list > Predisclosure-applications@lists.xenproject.org > http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Wed Mar 04 14:41:36 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Wed, 04 Mar 2015 14:41:36 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YTAUS-0000xA-HT; Wed, 04 Mar 2015 14:41:36 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YTAUQ-0000tE-UZ for predisclosure-applications@lists.xenproject.org; Wed, 04 Mar 2015 14:41:35 +0000 Received: from [193.109.254.147] by server-2.bemta-14.messagelabs.com id 12/B0-31919-E9917F45; Wed, 04 Mar 2015 14:41:34 +0000 X-Env-Sender: ijc@xen.org X-Msg-Ref: server-5.tower-27.messagelabs.com!1425480093!10027071!1 X-Originating-IP: [212.110.190.137] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 26438 invoked from network); 4 Mar 2015 14:41:33 -0000 Received: from benson.vm.bytemark.co.uk (HELO benson.vm.bytemark.co.uk) (212.110.190.137) by server-5.tower-27.messagelabs.com with AES256-SHA encrypted SMTP; 4 Mar 2015 14:41:33 -0000 Received: from [185.25.64.249] (helo=kazak) by benson.vm.bytemark.co.uk with esmtpsa (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.72) (envelope-from ) id 1YTAUL-00070E-EO; Wed, 04 Mar 2015 14:41:29 +0000 Message-ID: <1425480088.25940.179.camel@xen.org> From: Ian Campbell To: Ian Service Date: Wed, 04 Mar 2015 14:41:28 +0000 In-Reply-To: References: X-Mailer: Evolution 3.12.9-1+b1 Mime-Version: 1.0 Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Predisclosure List Application X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org Thank you for your application. The security policy[0] requires "Link(s) to current public web pages, belonging to your organisation," for each piece of information, which you have not provided here for: * Evidence of your status as a user/distributor of Xen: * Information about your handling of security problems: Please can you provide these links, pointing out which parts of the page are relevant, so that we may continue to process your application. Ian. [0] http://www.xenproject.org/security-policy.html On Tue, 2015-03-03 at 09:02 -0500, Ian Service wrote: > Organization: Data Matters Inc > Domain names: datamatters.ca cloudstack.ca > Brief Description: we're an internet service provider and offer a > variety of hosted services using Xen and XenServer to provide them > Evidence of service/software provider: > http://datamatters.ca/solutions/virtual-servers/ > http://datamatters.ca/solutions/off-site-backup/ > http://datamatters.ca/solutions/hosted-exchange/ > > We have read the security policy and will abide by the terms therein. > Any email receive from this list will be held in confidence and used > solely to protect our systems/users/data from malicious activity. > > Should you require any further information to have us subscribed, > please contact me, otherwise please add security@datamatters.ca to the > list. > > Thank you for your attention, > > Ian Service > > DataMatters > > 416-848-7555 > iservice@datamatters.ca > > > _______________________________________________ > Predisclosure-applications mailing list > Predisclosure-applications@lists.xenproject.org > http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Wed Mar 04 19:55:03 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Wed, 04 Mar 2015 19:55:03 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YTFNn-00028i-2H; Wed, 04 Mar 2015 19:55:03 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YTFNl-00028d-P5 for predisclosure-applications@lists.xenproject.org; Wed, 04 Mar 2015 19:55:01 +0000 Received: from [85.158.137.68] by server-4.bemta-3.messagelabs.com id 5A/81-03185-41367F45; Wed, 04 Mar 2015 19:55:00 +0000 X-Env-Sender: jriley@vnucleus.com X-Msg-Ref: server-3.tower-31.messagelabs.com!1425498898!13191395!1 X-Originating-IP: [76.72.162.189] X-SpamReason: No, hits=1.1 required=7.0 tests=BODY_RANDOM_LONG, HTML_40_50,HTML_MESSAGE X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 27814 invoked from network); 4 Mar 2015 19:54:59 -0000 Received: from mx1.betaforce.com (HELO mx1.betaforce.com) (76.72.162.189) by server-3.tower-31.messagelabs.com with DHE-RSA-AES256-SHA encrypted SMTP; 4 Mar 2015 19:54:59 -0000 Received: from mx1.betaforce.com (localhost [127.0.0.1]) by mx1.betaforce.com (Postfix) with ESMTP id 55FF933D00 for ; Wed, 4 Mar 2015 14:46:16 -0500 (EST) X-Virus-Scanned: by SpamTitan at cent.betaforce.com Received: from mx1.betaforce.com (localhost [127.0.0.1]) by mx1.betaforce.com (Postfix) with ESMTP id 873A633CD1 for ; Wed, 4 Mar 2015 14:46:09 -0500 (EST) Received: from exchange.cent.betaforce.com (exch1.cent.betaforce.com [76.72.160.148]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.betaforce.com (Postfix) with ESMTPS id 84B0333C72 for ; Wed, 4 Mar 2015 14:46:06 -0500 (EST) Received: from EXCH1.cent.betaforce.com (2002:4c48:a094::4c48:a094) by exch1.cent.betaforce.com (2002:4c48:a094::4c48:a094) with Microsoft SMTP Server (TLS) id 15.0.913.22; Wed, 4 Mar 2015 14:54:38 -0500 Received: from EXCH1.cent.betaforce.com ([fe80::38ad:6ad8:2aa7:1fa6]) by exch1.cent.betaforce.com ([fe80::38ad:6ad8:2aa7:1fa6%12]) with mapi id 15.00.0913.011; Wed, 4 Mar 2015 14:54:37 -0500 From: James Riley To: "predisclosure-applications@lists.xenproject.org" Thread-Topic: Predisclosure list membership application Thread-Index: AQHQVrULTffJqFiEiEikQCz+HO/j/g== Date: Wed, 4 Mar 2015 19:54:37 +0000 Message-ID: <0AA57176-2731-4B7A-A649-2A489321366A@vnucleus.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [76.72.164.172] MIME-Version: 1.0 Subject: [Predisclosure-applications] Predisclosure list membership application X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============8758809511176137143==" Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org --===============8758809511176137143== Content-Language: en-US Content-Type: multipart/alternative; boundary="_000_0AA5717627314B7AA6492A489321366Avnucleuscom_" --_000_0AA5717627314B7AA6492A489321366Avnucleuscom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGVsbG8sDQoNCldlJ3JlIGEgWGVuIGJhc2VkIFZQUyBwcm92aWRlciBhbmQgd291bGQgbGlrZSB0 byBiZSBjb25zaWRlcmVkIGZvciBtZW1iZXJzaGlwIGluIHRoZSBYZW4gc2VjdXJpdHkgcHJlZGlz Y2xvc3VyZSBsaXN0Lg0KDQpPcmdhbml6YXRpb246IEJldGFGb3JjZSBOZXR3b3JrcywgTExDIERC QSB2TnVjbGV1cw0KRG9tYWluIG5hbWVzIGludm9sdmVkOiB2bnVjbGV1cy5jb20NCg0KSSBiZWxp ZXZlIHdlIGZpdCB0aGUgY3JpdGVyaWEgdG8gam9pbiB0aGUgcHJlLWRpc2Nsb3N1cmUgbWFpbGlu ZyBsaXN0IGFzIG91ciBwcmltYXJ5IHByb2R1Y3QgaXMgVlBTIGhvc3RpbmcgYmFzZWQgb24gdGhl IFhlbiBoeXBlcnZpc29yLCB1dGlsaXppbmcgYm90aCBQViBhbmQgSFZNLg0KDQpBcyBldmlkZW5j ZSBvZiBvdXIgc3RhdHVzIGFzIGEgWGVuLWJhc2VkIHNlcnZpY2UgcHJvdmlkZXIsIHBsZWFzZSB2 aXNpdCBodHRwczovL3d3dy52bnVjbGV1cy5jb20vcHJpY2luZy4NCg0KV2UgYWxzbyBlbmNvdXJh Z2UgdXNlcnMgdG8gc3VibWl0IGFueSBzZWN1cml0eSBwcm9ibGVtcyB0byBzZWN1cml0eUB2bnVj bGV1cy5jb208bWFpbHRvOnNlY3VyaXR5QHZudWNsZXVzLmNvbT4gb24gb3VyIGNvbnRhY3QgcGFn ZSBhdCBodHRwczovL3d3dy52bnVjbGV1cy5jb20vY29udGFjdC11cy4NCg0KSSBoYXZlIHJlYWQg dGhlIHBvbGljeSBhdCBodHRwOi8vd3d3LnhlbnByb2plY3Qub3JnL3NlY3VyaXR5LXBvbGljeS5o dG1sIGFuZCBhZ3JlZSB0byB0aGUgZ2VuZXJhbCB0ZXJtcyBvZiB0aGUgcG9saWN5IGFuZCB3aWxs IGtlZXAgYWxsIHByZWRpc2Nsb3N1cmUgbWF0dGVycyBjb25maWRlbnRpYWwgZHVyaW5nIHRoZWly IHJlc3BlY3RpdmUgZW1iYXJnbyBwZXJpb2RzLg0KDQpJZiBhY2NlcHRlZCBJIHdvdWxkIGxpa2Ug dG8gc3Vic2NyaWJlIHNlY3VyaXR5QHZudWNsZXVzLmNvbTxtYWlsdG86c2VjdXJpdHlAdm51Y2xl dXMuY29tPiB0byB0aGUgcHJlZGlzY2xvc3VyZSBtYWlsaW5nIGxpc3QuDQoNClRoYW5rIHlvdSBm b3IgeW91ciB0aW1lIGFuZCBjb25zaWRlcmF0aW9uLiBJZiB0aGVyZSdzIGFueSBpbmZvcm1hdGlv biB0aGF0IEkndmUgbWlzc2VkLCBwbGVhc2UgbGV0IG1lIGtub3cuDQoNCkphbWVzIFJpbGV5DQpN R1JNLCBCZXRhRm9yY2UgTmV0d29ya3MsIExMQw0K --_000_0AA5717627314B7AA6492A489321366Avnucleuscom_ Content-Type: text/html; charset="utf-8" Content-ID: <6C369B3F2BE38246B7AF2614764B1A74@betaforce.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsgY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1zaXplOiAx NHB4OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiPg0KPGRpdj5IZWxsbyw8L2Rp dj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2PldlJ3JlIGEgWGVuIGJhc2VkIFZQUyBwcm92aWRl ciBhbmQgd291bGQgbGlrZSB0byBiZSBjb25zaWRlcmVkIGZvciBtZW1iZXJzaGlwIGluIHRoZSBY ZW4gc2VjdXJpdHkgcHJlZGlzY2xvc3VyZSBsaXN0LjwvZGl2Pg0KPGRpdj48YnI+DQo8L2Rpdj4N CjxkaXY+T3JnYW5pemF0aW9uOiBCZXRhRm9yY2UgTmV0d29ya3MsIExMQyBEQkEgdk51Y2xldXM8 L2Rpdj4NCjxkaXY+RG9tYWluIG5hbWVzIGludm9sdmVkOiB2bnVjbGV1cy5jb208L2Rpdj4NCjxk aXY+PGJyPg0KPC9kaXY+DQo8ZGl2PkkgYmVsaWV2ZSB3ZSBmaXQgdGhlIGNyaXRlcmlhIHRvIGpv aW4gdGhlIHByZS1kaXNjbG9zdXJlIG1haWxpbmcgbGlzdCBhcyBvdXIgcHJpbWFyeSBwcm9kdWN0 IGlzIFZQUyBob3N0aW5nIGJhc2VkIG9uIHRoZSBYZW4gaHlwZXJ2aXNvciwgdXRpbGl6aW5nIGJv dGggUFYgYW5kIEhWTS48L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2PkFzIGV2aWRlbmNl IG9mIG91ciBzdGF0dXMgYXMgYSBYZW4tYmFzZWQgc2VydmljZSBwcm92aWRlciwgcGxlYXNlIHZp c2l0IDxhIGhyZWY9Imh0dHBzOi8vd3d3LnZudWNsZXVzLmNvbS9wcmljaW5nIj4NCmh0dHBzOi8v d3d3LnZudWNsZXVzLmNvbS9wcmljaW5nPC9hPi48L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8 ZGl2PldlIGFsc28gZW5jb3VyYWdlIHVzZXJzIHRvIHN1Ym1pdCBhbnkgc2VjdXJpdHkgcHJvYmxl bXMgdG8gPGEgaHJlZj0ibWFpbHRvOnNlY3VyaXR5QHZudWNsZXVzLmNvbSI+DQpzZWN1cml0eUB2 bnVjbGV1cy5jb208L2E+Jm5ic3A7b24gb3VyIGNvbnRhY3QgcGFnZSBhdCA8YSBocmVmPSJodHRw czovL3d3dy52bnVjbGV1cy5jb20vY29udGFjdC11cyI+DQpodHRwczovL3d3dy52bnVjbGV1cy5j b20vY29udGFjdC11czwvYT4uPC9kaXY+DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPGRpdj5JIGhhdmUg cmVhZCB0aGUgcG9saWN5IGF0Jm5ic3A7PGEgaHJlZj0iaHR0cDovL3d3dy54ZW5wcm9qZWN0Lm9y Zy9zZWN1cml0eS1wb2xpY3kuaHRtbCI+aHR0cDovL3d3dy54ZW5wcm9qZWN0Lm9yZy9zZWN1cml0 eS1wb2xpY3kuaHRtbDwvYT4mbmJzcDthbmQgYWdyZWUgdG8gdGhlIGdlbmVyYWwgdGVybXMgb2Yg dGhlIHBvbGljeSBhbmQgd2lsbCBrZWVwIGFsbCBwcmVkaXNjbG9zdXJlIG1hdHRlcnMgY29uZmlk ZW50aWFsIGR1cmluZyB0aGVpciByZXNwZWN0aXZlDQogZW1iYXJnbyBwZXJpb2RzLjwvZGl2Pg0K PGRpdj48YnI+DQo8L2Rpdj4NCjxkaXY+SWYgYWNjZXB0ZWQgSSB3b3VsZCBsaWtlIHRvIHN1YnNj cmliZSA8YSBocmVmPSJtYWlsdG86c2VjdXJpdHlAdm51Y2xldXMuY29tIj4NCnNlY3VyaXR5QHZu dWNsZXVzLmNvbTwvYT4gdG8gdGhlIHByZWRpc2Nsb3N1cmUgbWFpbGluZyBsaXN0LjwvZGl2Pg0K PGRpdj48YnI+DQo8L2Rpdj4NCjxkaXY+VGhhbmsgeW91IGZvciB5b3VyIHRpbWUgYW5kIGNvbnNp ZGVyYXRpb24uIElmIHRoZXJlJ3MgYW55IGluZm9ybWF0aW9uIHRoYXQgSSd2ZSBtaXNzZWQsIHBs ZWFzZSBsZXQgbWUga25vdy48L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2PkphbWVzIFJp bGV5PC9kaXY+DQo8ZGl2Pk1HUk0sIEJldGFGb3JjZSBOZXR3b3JrcywgTExDPC9kaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2IGlkPSJNQUNfT1VUTE9PS19TSUdOQVRVUkUiPjwvZGl2Pg0K PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_0AA5717627314B7AA6492A489321366Avnucleuscom_-- --===============8758809511176137143== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications --===============8758809511176137143==-- From predisclosure-applications-bounces@lists.xenproject.org Wed Mar 04 19:55:03 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Wed, 04 Mar 2015 19:55:03 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YTFNn-00028i-2H; Wed, 04 Mar 2015 19:55:03 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YTFNl-00028d-P5 for predisclosure-applications@lists.xenproject.org; Wed, 04 Mar 2015 19:55:01 +0000 Received: from [85.158.137.68] by server-4.bemta-3.messagelabs.com id 5A/81-03185-41367F45; Wed, 04 Mar 2015 19:55:00 +0000 X-Env-Sender: jriley@vnucleus.com X-Msg-Ref: server-3.tower-31.messagelabs.com!1425498898!13191395!1 X-Originating-IP: [76.72.162.189] X-SpamReason: No, hits=1.1 required=7.0 tests=BODY_RANDOM_LONG, HTML_40_50,HTML_MESSAGE X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 27814 invoked from network); 4 Mar 2015 19:54:59 -0000 Received: from mx1.betaforce.com (HELO mx1.betaforce.com) (76.72.162.189) by server-3.tower-31.messagelabs.com with DHE-RSA-AES256-SHA encrypted SMTP; 4 Mar 2015 19:54:59 -0000 Received: from mx1.betaforce.com (localhost [127.0.0.1]) by mx1.betaforce.com (Postfix) with ESMTP id 55FF933D00 for ; Wed, 4 Mar 2015 14:46:16 -0500 (EST) X-Virus-Scanned: by SpamTitan at cent.betaforce.com Received: from mx1.betaforce.com (localhost [127.0.0.1]) by mx1.betaforce.com (Postfix) with ESMTP id 873A633CD1 for ; Wed, 4 Mar 2015 14:46:09 -0500 (EST) Received: from exchange.cent.betaforce.com (exch1.cent.betaforce.com [76.72.160.148]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.betaforce.com (Postfix) with ESMTPS id 84B0333C72 for ; Wed, 4 Mar 2015 14:46:06 -0500 (EST) Received: from EXCH1.cent.betaforce.com (2002:4c48:a094::4c48:a094) by exch1.cent.betaforce.com (2002:4c48:a094::4c48:a094) with Microsoft SMTP Server (TLS) id 15.0.913.22; Wed, 4 Mar 2015 14:54:38 -0500 Received: from EXCH1.cent.betaforce.com ([fe80::38ad:6ad8:2aa7:1fa6]) by exch1.cent.betaforce.com ([fe80::38ad:6ad8:2aa7:1fa6%12]) with mapi id 15.00.0913.011; Wed, 4 Mar 2015 14:54:37 -0500 From: James Riley To: "predisclosure-applications@lists.xenproject.org" Thread-Topic: Predisclosure list membership application Thread-Index: AQHQVrULTffJqFiEiEikQCz+HO/j/g== Date: Wed, 4 Mar 2015 19:54:37 +0000 Message-ID: <0AA57176-2731-4B7A-A649-2A489321366A@vnucleus.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [76.72.164.172] MIME-Version: 1.0 Subject: [Predisclosure-applications] Predisclosure list membership application X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============8758809511176137143==" Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org --===============8758809511176137143== Content-Language: en-US Content-Type: multipart/alternative; boundary="_000_0AA5717627314B7AA6492A489321366Avnucleuscom_" --_000_0AA5717627314B7AA6492A489321366Avnucleuscom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGVsbG8sDQoNCldlJ3JlIGEgWGVuIGJhc2VkIFZQUyBwcm92aWRlciBhbmQgd291bGQgbGlrZSB0 byBiZSBjb25zaWRlcmVkIGZvciBtZW1iZXJzaGlwIGluIHRoZSBYZW4gc2VjdXJpdHkgcHJlZGlz Y2xvc3VyZSBsaXN0Lg0KDQpPcmdhbml6YXRpb246IEJldGFGb3JjZSBOZXR3b3JrcywgTExDIERC QSB2TnVjbGV1cw0KRG9tYWluIG5hbWVzIGludm9sdmVkOiB2bnVjbGV1cy5jb20NCg0KSSBiZWxp ZXZlIHdlIGZpdCB0aGUgY3JpdGVyaWEgdG8gam9pbiB0aGUgcHJlLWRpc2Nsb3N1cmUgbWFpbGlu ZyBsaXN0IGFzIG91ciBwcmltYXJ5IHByb2R1Y3QgaXMgVlBTIGhvc3RpbmcgYmFzZWQgb24gdGhl IFhlbiBoeXBlcnZpc29yLCB1dGlsaXppbmcgYm90aCBQViBhbmQgSFZNLg0KDQpBcyBldmlkZW5j ZSBvZiBvdXIgc3RhdHVzIGFzIGEgWGVuLWJhc2VkIHNlcnZpY2UgcHJvdmlkZXIsIHBsZWFzZSB2 aXNpdCBodHRwczovL3d3dy52bnVjbGV1cy5jb20vcHJpY2luZy4NCg0KV2UgYWxzbyBlbmNvdXJh Z2UgdXNlcnMgdG8gc3VibWl0IGFueSBzZWN1cml0eSBwcm9ibGVtcyB0byBzZWN1cml0eUB2bnVj bGV1cy5jb208bWFpbHRvOnNlY3VyaXR5QHZudWNsZXVzLmNvbT4gb24gb3VyIGNvbnRhY3QgcGFn ZSBhdCBodHRwczovL3d3dy52bnVjbGV1cy5jb20vY29udGFjdC11cy4NCg0KSSBoYXZlIHJlYWQg dGhlIHBvbGljeSBhdCBodHRwOi8vd3d3LnhlbnByb2plY3Qub3JnL3NlY3VyaXR5LXBvbGljeS5o dG1sIGFuZCBhZ3JlZSB0byB0aGUgZ2VuZXJhbCB0ZXJtcyBvZiB0aGUgcG9saWN5IGFuZCB3aWxs IGtlZXAgYWxsIHByZWRpc2Nsb3N1cmUgbWF0dGVycyBjb25maWRlbnRpYWwgZHVyaW5nIHRoZWly IHJlc3BlY3RpdmUgZW1iYXJnbyBwZXJpb2RzLg0KDQpJZiBhY2NlcHRlZCBJIHdvdWxkIGxpa2Ug dG8gc3Vic2NyaWJlIHNlY3VyaXR5QHZudWNsZXVzLmNvbTxtYWlsdG86c2VjdXJpdHlAdm51Y2xl dXMuY29tPiB0byB0aGUgcHJlZGlzY2xvc3VyZSBtYWlsaW5nIGxpc3QuDQoNClRoYW5rIHlvdSBm b3IgeW91ciB0aW1lIGFuZCBjb25zaWRlcmF0aW9uLiBJZiB0aGVyZSdzIGFueSBpbmZvcm1hdGlv biB0aGF0IEkndmUgbWlzc2VkLCBwbGVhc2UgbGV0IG1lIGtub3cuDQoNCkphbWVzIFJpbGV5DQpN R1JNLCBCZXRhRm9yY2UgTmV0d29ya3MsIExMQw0K --_000_0AA5717627314B7AA6492A489321366Avnucleuscom_ Content-Type: text/html; charset="utf-8" Content-ID: <6C369B3F2BE38246B7AF2614764B1A74@betaforce.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsgY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1zaXplOiAx NHB4OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiPg0KPGRpdj5IZWxsbyw8L2Rp dj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2PldlJ3JlIGEgWGVuIGJhc2VkIFZQUyBwcm92aWRl ciBhbmQgd291bGQgbGlrZSB0byBiZSBjb25zaWRlcmVkIGZvciBtZW1iZXJzaGlwIGluIHRoZSBY ZW4gc2VjdXJpdHkgcHJlZGlzY2xvc3VyZSBsaXN0LjwvZGl2Pg0KPGRpdj48YnI+DQo8L2Rpdj4N CjxkaXY+T3JnYW5pemF0aW9uOiBCZXRhRm9yY2UgTmV0d29ya3MsIExMQyBEQkEgdk51Y2xldXM8 L2Rpdj4NCjxkaXY+RG9tYWluIG5hbWVzIGludm9sdmVkOiB2bnVjbGV1cy5jb208L2Rpdj4NCjxk aXY+PGJyPg0KPC9kaXY+DQo8ZGl2PkkgYmVsaWV2ZSB3ZSBmaXQgdGhlIGNyaXRlcmlhIHRvIGpv aW4gdGhlIHByZS1kaXNjbG9zdXJlIG1haWxpbmcgbGlzdCBhcyBvdXIgcHJpbWFyeSBwcm9kdWN0 IGlzIFZQUyBob3N0aW5nIGJhc2VkIG9uIHRoZSBYZW4gaHlwZXJ2aXNvciwgdXRpbGl6aW5nIGJv dGggUFYgYW5kIEhWTS48L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2PkFzIGV2aWRlbmNl IG9mIG91ciBzdGF0dXMgYXMgYSBYZW4tYmFzZWQgc2VydmljZSBwcm92aWRlciwgcGxlYXNlIHZp c2l0IDxhIGhyZWY9Imh0dHBzOi8vd3d3LnZudWNsZXVzLmNvbS9wcmljaW5nIj4NCmh0dHBzOi8v d3d3LnZudWNsZXVzLmNvbS9wcmljaW5nPC9hPi48L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8 ZGl2PldlIGFsc28gZW5jb3VyYWdlIHVzZXJzIHRvIHN1Ym1pdCBhbnkgc2VjdXJpdHkgcHJvYmxl bXMgdG8gPGEgaHJlZj0ibWFpbHRvOnNlY3VyaXR5QHZudWNsZXVzLmNvbSI+DQpzZWN1cml0eUB2 bnVjbGV1cy5jb208L2E+Jm5ic3A7b24gb3VyIGNvbnRhY3QgcGFnZSBhdCA8YSBocmVmPSJodHRw czovL3d3dy52bnVjbGV1cy5jb20vY29udGFjdC11cyI+DQpodHRwczovL3d3dy52bnVjbGV1cy5j b20vY29udGFjdC11czwvYT4uPC9kaXY+DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPGRpdj5JIGhhdmUg cmVhZCB0aGUgcG9saWN5IGF0Jm5ic3A7PGEgaHJlZj0iaHR0cDovL3d3dy54ZW5wcm9qZWN0Lm9y Zy9zZWN1cml0eS1wb2xpY3kuaHRtbCI+aHR0cDovL3d3dy54ZW5wcm9qZWN0Lm9yZy9zZWN1cml0 eS1wb2xpY3kuaHRtbDwvYT4mbmJzcDthbmQgYWdyZWUgdG8gdGhlIGdlbmVyYWwgdGVybXMgb2Yg dGhlIHBvbGljeSBhbmQgd2lsbCBrZWVwIGFsbCBwcmVkaXNjbG9zdXJlIG1hdHRlcnMgY29uZmlk ZW50aWFsIGR1cmluZyB0aGVpciByZXNwZWN0aXZlDQogZW1iYXJnbyBwZXJpb2RzLjwvZGl2Pg0K PGRpdj48YnI+DQo8L2Rpdj4NCjxkaXY+SWYgYWNjZXB0ZWQgSSB3b3VsZCBsaWtlIHRvIHN1YnNj cmliZSA8YSBocmVmPSJtYWlsdG86c2VjdXJpdHlAdm51Y2xldXMuY29tIj4NCnNlY3VyaXR5QHZu dWNsZXVzLmNvbTwvYT4gdG8gdGhlIHByZWRpc2Nsb3N1cmUgbWFpbGluZyBsaXN0LjwvZGl2Pg0K PGRpdj48YnI+DQo8L2Rpdj4NCjxkaXY+VGhhbmsgeW91IGZvciB5b3VyIHRpbWUgYW5kIGNvbnNp ZGVyYXRpb24uIElmIHRoZXJlJ3MgYW55IGluZm9ybWF0aW9uIHRoYXQgSSd2ZSBtaXNzZWQsIHBs ZWFzZSBsZXQgbWUga25vdy48L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2PkphbWVzIFJp bGV5PC9kaXY+DQo8ZGl2Pk1HUk0sIEJldGFGb3JjZSBOZXR3b3JrcywgTExDPC9kaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2IGlkPSJNQUNfT1VUTE9PS19TSUdOQVRVUkUiPjwvZGl2Pg0K PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_0AA5717627314B7AA6492A489321366Avnucleuscom_-- --===============8758809511176137143== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications --===============8758809511176137143==-- From predisclosure-applications-bounces@lists.xenproject.org Thu Mar 05 07:10:25 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Thu, 05 Mar 2015 07:10:25 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YTPvN-0003h0-5H; Thu, 05 Mar 2015 07:10:25 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YTPvL-0003gv-1H for predisclosure-applications@lists.xenproject.org; Thu, 05 Mar 2015 07:10:23 +0000 Received: from [193.109.254.147] by server-12.bemta-14.messagelabs.com id B2/99-02755-E5108F45; Thu, 05 Mar 2015 07:10:22 +0000 X-Env-Sender: marcotte@panix.com X-Msg-Ref: server-4.tower-27.messagelabs.com!1425539420!14836810!1 X-Originating-IP: [166.84.1.89] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogMTY2Ljg0LjEuODkgPT4gMjc1MzI=\n X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 15083 invoked from network); 5 Mar 2015 07:10:20 -0000 Received: from mailbackend.panix.com (HELO mailbackend.panix.com) (166.84.1.89) by server-4.tower-27.messagelabs.com with SMTP; 5 Mar 2015 07:10:20 -0000 Received: from panix5.panix.com (panix5.panix.com [166.84.1.5]) by mailbackend.panix.com (Postfix) with ESMTP id 7703F11DAB for ; Thu, 5 Mar 2015 02:10:20 -0500 (EST) Received: by panix5.panix.com (Postfix, from userid 13564) id 634E1242DE; Thu, 5 Mar 2015 02:10:20 -0500 (EST) Date: Thu, 05 Mar 2015 02:10:20 -0500 To: predisclosure-applications@lists.xenproject.org User-Agent: nail 11.25 7/29/05 MIME-Version: 1.0 Message-Id: <20150305071020.634E1242DE@panix5.panix.com> From: marcotte@panix.com (Brian Marcotte) Cc: security@panix.com Subject: [Predisclosure-applications] Pre-disclosure list application X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org Application for Xen pre-disclosure list. We are Public Access Networks Corp. generally known as "panix.com". Our main web page is at: http://www.panix.com/ We are applying as a public Xen hosting provider. The main page of our Xen service (Panix V-Colo) is here: http://www.panix.com/v-colo/ That page includes multiple references to Xen and has links to our plans and prices. For security matters, our customers usually contact us at our main support mailbox "staff@panix.com". We provide "security@panix.com" as well specifically for security matters. It is noted here: http://www.panix.com/general/security.html We have read the policy and agree with the terms for inclusion in the pre-disclosure list, specifically the requirements to regarding confidentiality during an embargo period: http://www.xenproject.org/security-policy.html We would like to subscribe "security@panix.com" to the list. Thank you. -- - Brian Marcotte Panix System Administrator _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Thu Mar 05 07:10:25 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Thu, 05 Mar 2015 07:10:25 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YTPvN-0003h0-5H; Thu, 05 Mar 2015 07:10:25 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YTPvL-0003gv-1H for predisclosure-applications@lists.xenproject.org; Thu, 05 Mar 2015 07:10:23 +0000 Received: from [193.109.254.147] by server-12.bemta-14.messagelabs.com id B2/99-02755-E5108F45; Thu, 05 Mar 2015 07:10:22 +0000 X-Env-Sender: marcotte@panix.com X-Msg-Ref: server-4.tower-27.messagelabs.com!1425539420!14836810!1 X-Originating-IP: [166.84.1.89] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogMTY2Ljg0LjEuODkgPT4gMjc1MzI=\n X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 15083 invoked from network); 5 Mar 2015 07:10:20 -0000 Received: from mailbackend.panix.com (HELO mailbackend.panix.com) (166.84.1.89) by server-4.tower-27.messagelabs.com with SMTP; 5 Mar 2015 07:10:20 -0000 Received: from panix5.panix.com (panix5.panix.com [166.84.1.5]) by mailbackend.panix.com (Postfix) with ESMTP id 7703F11DAB for ; Thu, 5 Mar 2015 02:10:20 -0500 (EST) Received: by panix5.panix.com (Postfix, from userid 13564) id 634E1242DE; Thu, 5 Mar 2015 02:10:20 -0500 (EST) Date: Thu, 05 Mar 2015 02:10:20 -0500 To: predisclosure-applications@lists.xenproject.org User-Agent: nail 11.25 7/29/05 MIME-Version: 1.0 Message-Id: <20150305071020.634E1242DE@panix5.panix.com> From: marcotte@panix.com (Brian Marcotte) Cc: security@panix.com Subject: [Predisclosure-applications] Pre-disclosure list application X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org Application for Xen pre-disclosure list. We are Public Access Networks Corp. generally known as "panix.com". Our main web page is at: http://www.panix.com/ We are applying as a public Xen hosting provider. The main page of our Xen service (Panix V-Colo) is here: http://www.panix.com/v-colo/ That page includes multiple references to Xen and has links to our plans and prices. For security matters, our customers usually contact us at our main support mailbox "staff@panix.com". We provide "security@panix.com" as well specifically for security matters. It is noted here: http://www.panix.com/general/security.html We have read the policy and agree with the terms for inclusion in the pre-disclosure list, specifically the requirements to regarding confidentiality during an embargo period: http://www.xenproject.org/security-policy.html We would like to subscribe "security@panix.com" to the list. Thank you. -- - Brian Marcotte Panix System Administrator _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Thu Mar 05 11:16:15 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Thu, 05 Mar 2015 11:16:15 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YTTlH-0004lo-GT; Thu, 05 Mar 2015 11:16:15 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YTTlF-0004le-Lz for predisclosure-applications@lists.xenproject.org; Thu, 05 Mar 2015 11:16:13 +0000 Received: from [85.158.139.211] by server-13.bemta-5.messagelabs.com id 36/2F-02801-CFA38F45; Thu, 05 Mar 2015 11:16:12 +0000 X-Env-Sender: ijc@xen.org X-Msg-Ref: server-10.tower-206.messagelabs.com!1425554171!7916550!1 X-Originating-IP: [212.110.190.137] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 12777 invoked from network); 5 Mar 2015 11:16:11 -0000 Received: from benson.vm.bytemark.co.uk (HELO benson.vm.bytemark.co.uk) (212.110.190.137) by server-10.tower-206.messagelabs.com with AES256-SHA encrypted SMTP; 5 Mar 2015 11:16:11 -0000 Received: from [185.25.64.249] (helo=kazak) by benson.vm.bytemark.co.uk with esmtpsa (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.72) (envelope-from ) id 1YTTlD-0002as-6n; Thu, 05 Mar 2015 11:16:11 +0000 Message-ID: <1425554169.25940.217.camel@xen.org> From: Ian Campbell To: Bernard Grymonpon Date: Thu, 05 Mar 2015 11:16:09 +0000 In-Reply-To: <5040E4E7-8BB0-496B-B56C-D7AE59DF6D34@openminds.be> References: <1425399033.25940.53.camel@xen.org> <5040E4E7-8BB0-496B-B56C-D7AE59DF6D34@openminds.be> X-Mailer: Evolution 3.12.9-1+b1 Mime-Version: 1.0 Cc: predisclosure-applications@lists.xenproject.org, Frank Louwers Subject: Re: [Predisclosure-applications] Inclusion in the Xen Security pre-disclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org VGhhbmtzLiBZb3VyIGFwcGxpY2F0aW9uIGFwcGVhcnMgdG8gbm93IGFsbCBiZSBpbiBvcmRlciBh bmQgeW91IGhhdmUKYmVlbiBzdWJzY3JpYmVkIHRvIHRoZSBwcmVkaXNjbG9zdXJlIGxpc3QuIEkg aGF2ZSBzZW50IGNvcGllcyBvZiB0aGUKZXhpc3RpbmcgZW1iYXJnb2VkIGlzc3VlcyAxMTksIDEy MCwgMTIxLCAxMjIsIDEyMyBhbmQgMTI0LgoKSWFuLgoKT24gV2VkLCAyMDE1LTAzLTA0IGF0IDE0 OjU1ICswMTAwLCBCZXJuYXJkIEdyeW1vbnBvbiB3cm90ZToKPiBJYW4sCj4gCj4gCj4gdGhhbmtz IGZvciB0aGUgZmVlZGJhY2suCj4gCj4gCj4gRm9yIHRoZSAib2J0YWluaW5nIGEgcXVvdGUiOgo+ IAo+IAo+IE9yIGJhc2ljIG9mZmVyaW5ncyAoc2hhcmVkIGhvc3RpbmcsIGRvbWFpbiBuYW1lcywg 4oCmKSBhcmUgYXZhaWxhYmxlIHZpYQo+IG9ubGluZSBvcmRlcmluZyBmb3JtcywgYnV0IHdlIGRv bid0IGhhdmUgYW4gb25saW5lIG9yZGVyaW5nIHByb2Nlc3MKPiBmb3IgVk0ncy4gT3VyIGJ1c2lu ZXNzIGlzIG1hbmFnZWQgZW50ZXJwcmlzZSBob3N0aW5nLCBpbmNsdWRpbmcgdGhlCj4gc2l6aW5n IGFuZCBsYXlvdXQgb2Ygd2hpY2ggVk0ncyBhcmUgbmVlZGVkLCB0aGUgc2V0dXAsIGRhaWx5Cj4g bWFpbnRlbmFuY2UsIHBhdGNoaW5nLCBldGMuIFRoaXMgcmFuZ2VzIGZyb20gb25lIFZNIHVwIHRv ICJwcml2YXRlCj4gY2xvdWQiIChtdWx0aXBsZSBWTXMgb24gc2V2ZXJhbCBkZWRpY2F0ZWQgc2Vy dmVycyBmb3IgYSBzaW5nbGUKPiBjbGllbnQpLiBFdmVyeSBvZmZlciBpcyBkaWZmZXJlbnQsIGFu ZCBpcyBtYWRlIHRvIG1hdGNoIHRoZSBuZWVkcyBvZgo+IHRoZSBjdXN0b21lci4gSXQgaXNuJ3Qg cG9zc2libGUgdG8gb3JkZXIgYW4gIm9mZi10aGUtc2hlbHZlIHVubWFuYWdlZAo+IHZtIiB3aXRo IHVzLgo+IAo+IAo+IFBlb3BsZSBjb250YWN0IHVzIHRvIGFycmFuZ2UgYSBtZWV0aW5nLCBhbmQg Z2V0IGEgcXVvdGUuIE9uIGV2ZXJ5IHBhZ2UKPiBkZXNjcmliaW5nIHRoZSB2YXJpb3VzIHByb2R1 Y3RzIHdlIG9mZmVyLCB3ZSBoYXZlIGEgY2FsbC10by1hY3Rpb24gYXQKPiB0aGUgYm90dG9tIHRv IGdldCBpbiB0b3VjaCB3aXRoCj4gdXM6IGh0dHA6Ly93d3cub3Blbm1pbmRzLmJlL2VuL2Nsb3Vk LWhvc3RpbmcgKHRoZSBiaWcgb3JhbmdlIGJveCBhdAo+IHRoZSBib3R0b20gb2YgdGhlIHBhZ2Up LiBJIGhvcGUgdGhpcyBpcyBzdWZmaWNpZW50IChpdCB3b3JrcyBmb3Igb3VyCj4gYnVzaW5lc3Ms IGFzIHdlIGhhdmUgY2xpZW50cywgYW5kIGdldCBjb250YWN0ZWQgdG8gbWFrZSBxdW90ZXPigKY7 LSkgKS4KPiBPbiB0aGUgY29udGFjdC11cyBwYWdlIGlzIGFuIGFkZGl0aW9uYWwgc2FsZXMgbWFp bCBhZGRyZXNzIGxpbmtlZC4KPiAKPiAKPiBDb250YWN0aW5nIHVzIGNvbmNlcm5pbmcgc2VjdXJp dHktaXNzdWVzOgo+IAo+IAo+IE91ciBjb250YWN0IGluZm8gaW4gbGlua2VkIG9uIGVhY2ggcGFn ZSAodG9wIG5hdmlnYXRpb24gYmFyLAo+ICJjb250YWN0IiksIGFuZCBkZXRhaWxlZCBjb250YWN0 IGluZm8gaXMgYXZhaWxhYmxlCj4gaGVyZSBodHRwOi8vd3d3Lm9wZW5taW5kcy5iZS9lbi9jb250 YWN0LiBUaGVyZSBpcyBhIHNtYWxsIHBhcmFncmFwaAo+IGNvbmNlcm5pbmcgc2VjdXJpdHktaXNz dWVzLiBCZXNpZGVzIHRoaXMsIG91ciBjbGllbnRzIGhhdmUgY29udHJhY3RzCj4gd2l0aCB1cywg YW5kIHBhcnQgb2YgdGhlIGNvbnRyYWN0IGlzIG91ciBBVVAsIHdoaWNoIGNvbnRhaW5zIGEgc2Vj dGlvbgo+IGFib3V0IHNlY3VyaXR5IC0gImlmIHRoZXkgZGlzY292ZXIgc29tZXRoaW5nIHdoaWNo IGlzIG91dCBvZiB0aGUKPiBvcmRpbmFyeSwgdGhleSBzaG91bGQgZ2V0IGluIGNvbnRhY3QiIHN1 bW1hcml6ZWQuCj4gCj4gCj4gVGhlIHRlY2hAIGFsaWFzOgo+IAo+IAo+IFlvdSBjYW4gY2hhbmdl IHRoZSB0ZWNoQCBhbGlhcyB0byB0aGUgc2VjdXJpdHlAIGFsaWFzLCBpZiB5b3Ugd2FudC4KPiBU aGUgbm9uLWRpc2Nsb3NlcmUgbmF0dXJlIHdpbGwgYmUgY29tbXVuaWNhdGVkIHRvIGFsbCBlbmdp bmVlcnMgdXBvbgo+IGluY2x1c2lvbiBpbiB0aGUgbGlzdC4gVGhlIGFtb3VudCBvZiBwZW9wbGUg YWN0dWFsbHkgc2VlaW5nIHRoZSB0aWNrZXQKPiBpcyBhYm91dCB0aGUgc2FtZSwgYW4gYXZlcmFn ZSBvZiA4IHRvIDEwIHBlb3BsZSB3b3VsZCByZWNlaXZlIHRoZQo+IG1haWwuCj4gCj4gCj4gVGVj aG5pY2FsbHksIGJvdGggYWxpYXNlcyB3aWxsIHdvcmssIGJ1dCB0aGUgdGVjaEAgbWFpbHMgbmVl ZHMgdG8gYmUKPiBjb252ZXJ0ZWQgdG8gYSB0aWNrZXQsIGFmdGVyIGFuIGVuZ2luZWVyIGRlY2lk ZXMgdGhlIHNlY3VyaXR5LWlzc3Vlcwo+IGRlc2NyaWJlZCBhcmUgYWZmZWN0aW5nIG91ciBzeXN0 ZW1zIGFuZC9vciBjdXN0b21lcnMuIFdlIHVzZSB0aGUgdGVjaEAKPiBmb3Igb3VyIHN1YnNjcmlw dGlvbiB0byBEZWJpYW4vVWJ1bnR1IFNlY3VyaXR5IG1haWxpbmdzLCBzb21lCj4gc2VjdXJpdHkt cmVsYXRlZCBtYWlsaW5nIGxpc3RzLCBldGMuIFRoZSBzZWN1cml0eUAgaXMgYW4gYWxpYXMgdG8g dGhlCj4gc3VwcG9ydC1zeXN0ZW0sIGFuZCB3aWxsIGltbWVkaWF0ZWx5IGNyZWF0ZSBhIHRpY2tl dCBpbiBvdXIgc3lzdGVtcwo+ICh3aGljaCBjYW4gdGhlbiBiZSBjbG9zZWQgaWYgd2UgYXJlbid0 IGFmZmVjdGVkKS4KPiAKPiAKPiBJIGhvcGUgdGhpcyBjbGFyaWZpZXMgb3VyIGFwcGxpY2F0aW9u Lgo+IAo+IAo+IEtpbmQgcmVnYXJkcywKPiBCZXJuYXJkIEdyeW1vbnBvbgo+IE9wZW5taW5kcyBC VkJBCj4gCj4gT24gMDMgTWFyIDIwMTUsIGF0IDE3OjEwLCBJYW4gQ2FtcGJlbGwgPGlqY0B4ZW4u b3JnPiB3cm90ZToKPiAKPiA+IE9uIE1vbiwgMjAxNS0wMy0wMiBhdCAxNzowNSArMDEwMCwgQmVy bmFyZCBHcnltb25wb24gd3JvdGU6Cj4gPiA+IHdlIHdvdWxkIGxpa2UgdG8gYmUgaW5jbHVkZWQg aW4gdGhlIFhlbiBwcmUtZGlzY2xvc3VyZSBsaXN0LiAKPiA+IAo+ID4gVGhhbmsgeW91IGZvciB5 b3VyIGFwcGxpY2F0aW9uLgo+ID4gCj4gPiBUaGUgc2VjdXJpdHkgcG9saWN5WzBdIHJlcXVpcmVz ICJMaW5rKHMpIHRvIGN1cnJlbnQgcHVibGljIHdlYgo+ID4gcGFnZXMsCj4gPiBiZWxvbmdpbmcg dG8geW91ciBvcmdhbmlzYXRpb24sIiBmb3IgZWFjaCBwaWVjZSBvZiBpbmZvcm1hdGlvbi4KPiA+ IAo+ID4gUGxlYXNlIGNvdWxkIHlvdSBwb2ludCB1cyB0byB0aGUgcGFnZSB3aGljaCBkZXNjcmli ZXMgaG93IG9uZSBjYW4KPiA+IG9idGFpbgo+ID4gYSBxdW90ZSBmcm9tIHlvdS4KPiA+IAo+ID4g V2l0aCByZWdhcmRzIHRvICJZb3VyIGludml0YXRpb24gdG8gbWVtYmVycyBvZiB0aGUgcHVibGlj LCB3aG8KPiA+IGRpc2NvdmVyCj4gPiBzZWN1cml0eSBwcm9ibGVtcyB3aXRoIHlvdXIgcHJvZHVj dHMvc2VydmljZXMsIHRvIHJlcG9ydCB0aGVtIGluCj4gPiBjb25maWRlbmNlIHRvIHlvdTsiIGFu ZCAiU3BlY2lmaWNhbGx5LCB0aGUgY29udGFjdCBpbmZvcm1hdGlvbgo+ID4gKGVtYWlsCj4gPiBh ZGRyZXNzZXMgb3Igb3RoZXIgY29udGFjdCBpbnN0cnVjdGlvbnMpIHdoaWNoIHN1Y2ggYSBtZW1i ZXIgb2YgdGhlCj4gPiBwdWJsaWMgc2hvdWxkIHVzZS4iIHBsZWFzZSBjYW4geW91IHBvaW50IHVz IHRvIHN1Y2ggYSBwYWdlLiBJJ20KPiA+IGFmcmFpZAo+ID4gdGhhdCB0aGUgcG9saWN5IHJlcXVp cmVzIHRoaXMuCj4gPiAKPiA+IFBsZWFzZSBjYW4geW91IHByb3ZpZGUgdGhpcyBpbmZvcm1hdGlv biBzbyB0aGF0IHdlIG1heSBjb250aW51ZSB0bwo+ID4gcHJvY2VzcyB5b3VyIGFwcGxpY2F0aW9u Lgo+ID4gCj4gPiBQbGVhc2UgY291bGQgeW91IGFsc28gY2xhcmlmeSB0aGUgc2NvcGUgb2YgeW91 ciB0ZWNoQCBhbGlhcy4gSXQgaXMKPiA+IGludGVuZGVkIHRoYXQgcHJlZGlzY2xvc3VyZXMgZ28g dG8gYSBzbWFsbCB0ZWFtIGRlZGljYXRlZCB0bwo+ID4gaGFuZGxpbmcKPiA+IGluY29taW5nIHNl Y3VyaXR5IGlzc3VlcywgcmF0aGVyIHRoYW4gYSBsYXJnZSB0ZWFtIG9mIHN5c3RlbQo+ID4gYWRt aW5pc3RyYXRvcnMuCj4gPiAKPiA+IFRoYW5rcywKPiA+IElhbi4KPiA+IAo+ID4gWzBdIGh0dHA6 Ly93d3cueGVucHJvamVjdC5vcmcvc2VjdXJpdHktcG9saWN5Lmh0bWwKPiA+IAo+ID4gCj4gPiAK PiAKPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwo+IFBy ZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25zIG1haWxpbmcgbGlzdAo+IFByZWRpc2Nsb3N1cmUtYXBw bGljYXRpb25zQGxpc3RzLnhlbnByb2plY3Qub3JnCj4gaHR0cDovL2xpc3RzLnhlbnByb2plY3Qu b3JnL2NnaS1iaW4vbWFpbG1hbi9saXN0aW5mby9wcmVkaXNjbG9zdXJlLWFwcGxpY2F0aW9ucwoK CgpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpQcmVkaXNj bG9zdXJlLWFwcGxpY2F0aW9ucyBtYWlsaW5nIGxpc3QKUHJlZGlzY2xvc3VyZS1hcHBsaWNhdGlv bnNAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cDovL2xpc3RzLnhlbnByb2plY3Qub3JnL2NnaS1i aW4vbWFpbG1hbi9saXN0aW5mby9wcmVkaXNjbG9zdXJlLWFwcGxpY2F0aW9ucw== From predisclosure-applications-bounces@lists.xenproject.org Thu Mar 05 11:16:15 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Thu, 05 Mar 2015 11:16:15 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YTTlH-0004lo-GT; Thu, 05 Mar 2015 11:16:15 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YTTlF-0004le-Lz for predisclosure-applications@lists.xenproject.org; Thu, 05 Mar 2015 11:16:13 +0000 Received: from [85.158.139.211] by server-13.bemta-5.messagelabs.com id 36/2F-02801-CFA38F45; Thu, 05 Mar 2015 11:16:12 +0000 X-Env-Sender: ijc@xen.org X-Msg-Ref: server-10.tower-206.messagelabs.com!1425554171!7916550!1 X-Originating-IP: [212.110.190.137] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 12777 invoked from network); 5 Mar 2015 11:16:11 -0000 Received: from benson.vm.bytemark.co.uk (HELO benson.vm.bytemark.co.uk) (212.110.190.137) by server-10.tower-206.messagelabs.com with AES256-SHA encrypted SMTP; 5 Mar 2015 11:16:11 -0000 Received: from [185.25.64.249] (helo=kazak) by benson.vm.bytemark.co.uk with esmtpsa (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.72) (envelope-from ) id 1YTTlD-0002as-6n; Thu, 05 Mar 2015 11:16:11 +0000 Message-ID: <1425554169.25940.217.camel@xen.org> From: Ian Campbell To: Bernard Grymonpon Date: Thu, 05 Mar 2015 11:16:09 +0000 In-Reply-To: <5040E4E7-8BB0-496B-B56C-D7AE59DF6D34@openminds.be> References: <1425399033.25940.53.camel@xen.org> <5040E4E7-8BB0-496B-B56C-D7AE59DF6D34@openminds.be> X-Mailer: Evolution 3.12.9-1+b1 Mime-Version: 1.0 Cc: predisclosure-applications@lists.xenproject.org, Frank Louwers Subject: Re: [Predisclosure-applications] Inclusion in the Xen Security pre-disclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org VGhhbmtzLiBZb3VyIGFwcGxpY2F0aW9uIGFwcGVhcnMgdG8gbm93IGFsbCBiZSBpbiBvcmRlciBh bmQgeW91IGhhdmUKYmVlbiBzdWJzY3JpYmVkIHRvIHRoZSBwcmVkaXNjbG9zdXJlIGxpc3QuIEkg aGF2ZSBzZW50IGNvcGllcyBvZiB0aGUKZXhpc3RpbmcgZW1iYXJnb2VkIGlzc3VlcyAxMTksIDEy MCwgMTIxLCAxMjIsIDEyMyBhbmQgMTI0LgoKSWFuLgoKT24gV2VkLCAyMDE1LTAzLTA0IGF0IDE0 OjU1ICswMTAwLCBCZXJuYXJkIEdyeW1vbnBvbiB3cm90ZToKPiBJYW4sCj4gCj4gCj4gdGhhbmtz IGZvciB0aGUgZmVlZGJhY2suCj4gCj4gCj4gRm9yIHRoZSAib2J0YWluaW5nIGEgcXVvdGUiOgo+ IAo+IAo+IE9yIGJhc2ljIG9mZmVyaW5ncyAoc2hhcmVkIGhvc3RpbmcsIGRvbWFpbiBuYW1lcywg 4oCmKSBhcmUgYXZhaWxhYmxlIHZpYQo+IG9ubGluZSBvcmRlcmluZyBmb3JtcywgYnV0IHdlIGRv bid0IGhhdmUgYW4gb25saW5lIG9yZGVyaW5nIHByb2Nlc3MKPiBmb3IgVk0ncy4gT3VyIGJ1c2lu ZXNzIGlzIG1hbmFnZWQgZW50ZXJwcmlzZSBob3N0aW5nLCBpbmNsdWRpbmcgdGhlCj4gc2l6aW5n IGFuZCBsYXlvdXQgb2Ygd2hpY2ggVk0ncyBhcmUgbmVlZGVkLCB0aGUgc2V0dXAsIGRhaWx5Cj4g bWFpbnRlbmFuY2UsIHBhdGNoaW5nLCBldGMuIFRoaXMgcmFuZ2VzIGZyb20gb25lIFZNIHVwIHRv ICJwcml2YXRlCj4gY2xvdWQiIChtdWx0aXBsZSBWTXMgb24gc2V2ZXJhbCBkZWRpY2F0ZWQgc2Vy dmVycyBmb3IgYSBzaW5nbGUKPiBjbGllbnQpLiBFdmVyeSBvZmZlciBpcyBkaWZmZXJlbnQsIGFu ZCBpcyBtYWRlIHRvIG1hdGNoIHRoZSBuZWVkcyBvZgo+IHRoZSBjdXN0b21lci4gSXQgaXNuJ3Qg cG9zc2libGUgdG8gb3JkZXIgYW4gIm9mZi10aGUtc2hlbHZlIHVubWFuYWdlZAo+IHZtIiB3aXRo IHVzLgo+IAo+IAo+IFBlb3BsZSBjb250YWN0IHVzIHRvIGFycmFuZ2UgYSBtZWV0aW5nLCBhbmQg Z2V0IGEgcXVvdGUuIE9uIGV2ZXJ5IHBhZ2UKPiBkZXNjcmliaW5nIHRoZSB2YXJpb3VzIHByb2R1 Y3RzIHdlIG9mZmVyLCB3ZSBoYXZlIGEgY2FsbC10by1hY3Rpb24gYXQKPiB0aGUgYm90dG9tIHRv IGdldCBpbiB0b3VjaCB3aXRoCj4gdXM6IGh0dHA6Ly93d3cub3Blbm1pbmRzLmJlL2VuL2Nsb3Vk LWhvc3RpbmcgKHRoZSBiaWcgb3JhbmdlIGJveCBhdAo+IHRoZSBib3R0b20gb2YgdGhlIHBhZ2Up LiBJIGhvcGUgdGhpcyBpcyBzdWZmaWNpZW50IChpdCB3b3JrcyBmb3Igb3VyCj4gYnVzaW5lc3Ms IGFzIHdlIGhhdmUgY2xpZW50cywgYW5kIGdldCBjb250YWN0ZWQgdG8gbWFrZSBxdW90ZXPigKY7 LSkgKS4KPiBPbiB0aGUgY29udGFjdC11cyBwYWdlIGlzIGFuIGFkZGl0aW9uYWwgc2FsZXMgbWFp bCBhZGRyZXNzIGxpbmtlZC4KPiAKPiAKPiBDb250YWN0aW5nIHVzIGNvbmNlcm5pbmcgc2VjdXJp dHktaXNzdWVzOgo+IAo+IAo+IE91ciBjb250YWN0IGluZm8gaW4gbGlua2VkIG9uIGVhY2ggcGFn ZSAodG9wIG5hdmlnYXRpb24gYmFyLAo+ICJjb250YWN0IiksIGFuZCBkZXRhaWxlZCBjb250YWN0 IGluZm8gaXMgYXZhaWxhYmxlCj4gaGVyZSBodHRwOi8vd3d3Lm9wZW5taW5kcy5iZS9lbi9jb250 YWN0LiBUaGVyZSBpcyBhIHNtYWxsIHBhcmFncmFwaAo+IGNvbmNlcm5pbmcgc2VjdXJpdHktaXNz dWVzLiBCZXNpZGVzIHRoaXMsIG91ciBjbGllbnRzIGhhdmUgY29udHJhY3RzCj4gd2l0aCB1cywg YW5kIHBhcnQgb2YgdGhlIGNvbnRyYWN0IGlzIG91ciBBVVAsIHdoaWNoIGNvbnRhaW5zIGEgc2Vj dGlvbgo+IGFib3V0IHNlY3VyaXR5IC0gImlmIHRoZXkgZGlzY292ZXIgc29tZXRoaW5nIHdoaWNo IGlzIG91dCBvZiB0aGUKPiBvcmRpbmFyeSwgdGhleSBzaG91bGQgZ2V0IGluIGNvbnRhY3QiIHN1 bW1hcml6ZWQuCj4gCj4gCj4gVGhlIHRlY2hAIGFsaWFzOgo+IAo+IAo+IFlvdSBjYW4gY2hhbmdl IHRoZSB0ZWNoQCBhbGlhcyB0byB0aGUgc2VjdXJpdHlAIGFsaWFzLCBpZiB5b3Ugd2FudC4KPiBU aGUgbm9uLWRpc2Nsb3NlcmUgbmF0dXJlIHdpbGwgYmUgY29tbXVuaWNhdGVkIHRvIGFsbCBlbmdp bmVlcnMgdXBvbgo+IGluY2x1c2lvbiBpbiB0aGUgbGlzdC4gVGhlIGFtb3VudCBvZiBwZW9wbGUg YWN0dWFsbHkgc2VlaW5nIHRoZSB0aWNrZXQKPiBpcyBhYm91dCB0aGUgc2FtZSwgYW4gYXZlcmFn ZSBvZiA4IHRvIDEwIHBlb3BsZSB3b3VsZCByZWNlaXZlIHRoZQo+IG1haWwuCj4gCj4gCj4gVGVj aG5pY2FsbHksIGJvdGggYWxpYXNlcyB3aWxsIHdvcmssIGJ1dCB0aGUgdGVjaEAgbWFpbHMgbmVl ZHMgdG8gYmUKPiBjb252ZXJ0ZWQgdG8gYSB0aWNrZXQsIGFmdGVyIGFuIGVuZ2luZWVyIGRlY2lk ZXMgdGhlIHNlY3VyaXR5LWlzc3Vlcwo+IGRlc2NyaWJlZCBhcmUgYWZmZWN0aW5nIG91ciBzeXN0 ZW1zIGFuZC9vciBjdXN0b21lcnMuIFdlIHVzZSB0aGUgdGVjaEAKPiBmb3Igb3VyIHN1YnNjcmlw dGlvbiB0byBEZWJpYW4vVWJ1bnR1IFNlY3VyaXR5IG1haWxpbmdzLCBzb21lCj4gc2VjdXJpdHkt cmVsYXRlZCBtYWlsaW5nIGxpc3RzLCBldGMuIFRoZSBzZWN1cml0eUAgaXMgYW4gYWxpYXMgdG8g dGhlCj4gc3VwcG9ydC1zeXN0ZW0sIGFuZCB3aWxsIGltbWVkaWF0ZWx5IGNyZWF0ZSBhIHRpY2tl dCBpbiBvdXIgc3lzdGVtcwo+ICh3aGljaCBjYW4gdGhlbiBiZSBjbG9zZWQgaWYgd2UgYXJlbid0 IGFmZmVjdGVkKS4KPiAKPiAKPiBJIGhvcGUgdGhpcyBjbGFyaWZpZXMgb3VyIGFwcGxpY2F0aW9u Lgo+IAo+IAo+IEtpbmQgcmVnYXJkcywKPiBCZXJuYXJkIEdyeW1vbnBvbgo+IE9wZW5taW5kcyBC VkJBCj4gCj4gT24gMDMgTWFyIDIwMTUsIGF0IDE3OjEwLCBJYW4gQ2FtcGJlbGwgPGlqY0B4ZW4u b3JnPiB3cm90ZToKPiAKPiA+IE9uIE1vbiwgMjAxNS0wMy0wMiBhdCAxNzowNSArMDEwMCwgQmVy bmFyZCBHcnltb25wb24gd3JvdGU6Cj4gPiA+IHdlIHdvdWxkIGxpa2UgdG8gYmUgaW5jbHVkZWQg aW4gdGhlIFhlbiBwcmUtZGlzY2xvc3VyZSBsaXN0LiAKPiA+IAo+ID4gVGhhbmsgeW91IGZvciB5 b3VyIGFwcGxpY2F0aW9uLgo+ID4gCj4gPiBUaGUgc2VjdXJpdHkgcG9saWN5WzBdIHJlcXVpcmVz ICJMaW5rKHMpIHRvIGN1cnJlbnQgcHVibGljIHdlYgo+ID4gcGFnZXMsCj4gPiBiZWxvbmdpbmcg dG8geW91ciBvcmdhbmlzYXRpb24sIiBmb3IgZWFjaCBwaWVjZSBvZiBpbmZvcm1hdGlvbi4KPiA+ IAo+ID4gUGxlYXNlIGNvdWxkIHlvdSBwb2ludCB1cyB0byB0aGUgcGFnZSB3aGljaCBkZXNjcmli ZXMgaG93IG9uZSBjYW4KPiA+IG9idGFpbgo+ID4gYSBxdW90ZSBmcm9tIHlvdS4KPiA+IAo+ID4g V2l0aCByZWdhcmRzIHRvICJZb3VyIGludml0YXRpb24gdG8gbWVtYmVycyBvZiB0aGUgcHVibGlj LCB3aG8KPiA+IGRpc2NvdmVyCj4gPiBzZWN1cml0eSBwcm9ibGVtcyB3aXRoIHlvdXIgcHJvZHVj dHMvc2VydmljZXMsIHRvIHJlcG9ydCB0aGVtIGluCj4gPiBjb25maWRlbmNlIHRvIHlvdTsiIGFu ZCAiU3BlY2lmaWNhbGx5LCB0aGUgY29udGFjdCBpbmZvcm1hdGlvbgo+ID4gKGVtYWlsCj4gPiBh ZGRyZXNzZXMgb3Igb3RoZXIgY29udGFjdCBpbnN0cnVjdGlvbnMpIHdoaWNoIHN1Y2ggYSBtZW1i ZXIgb2YgdGhlCj4gPiBwdWJsaWMgc2hvdWxkIHVzZS4iIHBsZWFzZSBjYW4geW91IHBvaW50IHVz IHRvIHN1Y2ggYSBwYWdlLiBJJ20KPiA+IGFmcmFpZAo+ID4gdGhhdCB0aGUgcG9saWN5IHJlcXVp cmVzIHRoaXMuCj4gPiAKPiA+IFBsZWFzZSBjYW4geW91IHByb3ZpZGUgdGhpcyBpbmZvcm1hdGlv biBzbyB0aGF0IHdlIG1heSBjb250aW51ZSB0bwo+ID4gcHJvY2VzcyB5b3VyIGFwcGxpY2F0aW9u Lgo+ID4gCj4gPiBQbGVhc2UgY291bGQgeW91IGFsc28gY2xhcmlmeSB0aGUgc2NvcGUgb2YgeW91 ciB0ZWNoQCBhbGlhcy4gSXQgaXMKPiA+IGludGVuZGVkIHRoYXQgcHJlZGlzY2xvc3VyZXMgZ28g dG8gYSBzbWFsbCB0ZWFtIGRlZGljYXRlZCB0bwo+ID4gaGFuZGxpbmcKPiA+IGluY29taW5nIHNl Y3VyaXR5IGlzc3VlcywgcmF0aGVyIHRoYW4gYSBsYXJnZSB0ZWFtIG9mIHN5c3RlbQo+ID4gYWRt aW5pc3RyYXRvcnMuCj4gPiAKPiA+IFRoYW5rcywKPiA+IElhbi4KPiA+IAo+ID4gWzBdIGh0dHA6 Ly93d3cueGVucHJvamVjdC5vcmcvc2VjdXJpdHktcG9saWN5Lmh0bWwKPiA+IAo+ID4gCj4gPiAK PiAKPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwo+IFBy ZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25zIG1haWxpbmcgbGlzdAo+IFByZWRpc2Nsb3N1cmUtYXBw bGljYXRpb25zQGxpc3RzLnhlbnByb2plY3Qub3JnCj4gaHR0cDovL2xpc3RzLnhlbnByb2plY3Qu b3JnL2NnaS1iaW4vbWFpbG1hbi9saXN0aW5mby9wcmVkaXNjbG9zdXJlLWFwcGxpY2F0aW9ucwoK CgpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpQcmVkaXNj bG9zdXJlLWFwcGxpY2F0aW9ucyBtYWlsaW5nIGxpc3QKUHJlZGlzY2xvc3VyZS1hcHBsaWNhdGlv bnNAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cDovL2xpc3RzLnhlbnByb2plY3Qub3JnL2NnaS1i aW4vbWFpbG1hbi9saXN0aW5mby9wcmVkaXNjbG9zdXJlLWFwcGxpY2F0aW9ucw== From predisclosure-applications-bounces@lists.xenproject.org Thu Mar 05 16:03:13 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Thu, 05 Mar 2015 16:03:13 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YTYEz-0007Ib-AC; Thu, 05 Mar 2015 16:03:13 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YTYEx-0007IR-RF for predisclosure-applications@lists.xenproject.org; Thu, 05 Mar 2015 16:03:11 +0000 Received: from [85.158.139.211] by server-3.bemta-5.messagelabs.com id 86/B3-02994-F3E78F45; Thu, 05 Mar 2015 16:03:11 +0000 X-Env-Sender: Ian.Jackson@citrix.com X-Msg-Ref: server-14.tower-206.messagelabs.com!1425571385!7904356!1 X-Originating-IP: [66.165.176.63] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogNjYuMTY1LjE3Ni42MyA9PiAzMDYwNDg=\n X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 32420 invoked from network); 5 Mar 2015 16:03:10 -0000 Received: from smtp02.citrix.com (HELO SMTP02.CITRIX.COM) (66.165.176.63) by server-14.tower-206.messagelabs.com with RC4-SHA encrypted SMTP; 5 Mar 2015 16:03:10 -0000 X-IronPort-AV: E=Sophos;i="5.11,347,1422921600"; d="scan'208";a="241993913" Received: from ukmail1.uk.xensource.com (10.80.16.128) by smtprelay.citrix.com (10.13.107.79) with Microsoft SMTP Server id 14.3.210.2; Thu, 5 Mar 2015 10:42:36 -0500 Received: from mariner.uk.xensource.com ([10.80.2.22]) by ukmail1.uk.xensource.com with esmtp (Exim 4.69) (envelope-from ) id 1YTXv1-0008G9-W7; Thu, 05 Mar 2015 15:42:35 +0000 Received: from iwj by mariner.uk.xensource.com with local (Exim 4.80) (envelope-from ) id 1YTXv1-0006HL-Lh; Thu, 05 Mar 2015 15:42:35 +0000 From: Ian Jackson MIME-Version: 1.0 Message-ID: <21752.31083.463735.695154@mariner.uk.xensource.com> Date: Thu, 5 Mar 2015 15:42:35 +0000 To: James Riley In-Reply-To: <0AA57176-2731-4B7A-A649-2A489321366A@vnucleus.com> References: <0AA57176-2731-4B7A-A649-2A489321366A@vnucleus.com> X-Mailer: VM 8.1.0 under 23.4.1 (i486-pc-linux-gnu) X-DLP: MIA2 Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Predisclosure list membership application X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org James Riley writes ("[Predisclosure-applications] Predisclosure list membership application"): > We're a Xen based VPS provider and would like to be considered for membership > in the Xen security predisclosure list. > > Organization: BetaForce Networks, LLC DBA vNucleus > Domain names involved: vnucleus.com Done, thanks. Ian. _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Thu Mar 05 16:03:13 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Thu, 05 Mar 2015 16:03:13 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YTYEz-0007Ib-AC; Thu, 05 Mar 2015 16:03:13 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YTYEx-0007IR-RF for predisclosure-applications@lists.xenproject.org; Thu, 05 Mar 2015 16:03:11 +0000 Received: from [85.158.139.211] by server-3.bemta-5.messagelabs.com id 86/B3-02994-F3E78F45; Thu, 05 Mar 2015 16:03:11 +0000 X-Env-Sender: Ian.Jackson@citrix.com X-Msg-Ref: server-14.tower-206.messagelabs.com!1425571385!7904356!1 X-Originating-IP: [66.165.176.63] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogNjYuMTY1LjE3Ni42MyA9PiAzMDYwNDg=\n X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 32420 invoked from network); 5 Mar 2015 16:03:10 -0000 Received: from smtp02.citrix.com (HELO SMTP02.CITRIX.COM) (66.165.176.63) by server-14.tower-206.messagelabs.com with RC4-SHA encrypted SMTP; 5 Mar 2015 16:03:10 -0000 X-IronPort-AV: E=Sophos;i="5.11,347,1422921600"; d="scan'208";a="241993913" Received: from ukmail1.uk.xensource.com (10.80.16.128) by smtprelay.citrix.com (10.13.107.79) with Microsoft SMTP Server id 14.3.210.2; Thu, 5 Mar 2015 10:42:36 -0500 Received: from mariner.uk.xensource.com ([10.80.2.22]) by ukmail1.uk.xensource.com with esmtp (Exim 4.69) (envelope-from ) id 1YTXv1-0008G9-W7; Thu, 05 Mar 2015 15:42:35 +0000 Received: from iwj by mariner.uk.xensource.com with local (Exim 4.80) (envelope-from ) id 1YTXv1-0006HL-Lh; Thu, 05 Mar 2015 15:42:35 +0000 From: Ian Jackson MIME-Version: 1.0 Message-ID: <21752.31083.463735.695154@mariner.uk.xensource.com> Date: Thu, 5 Mar 2015 15:42:35 +0000 To: James Riley In-Reply-To: <0AA57176-2731-4B7A-A649-2A489321366A@vnucleus.com> References: <0AA57176-2731-4B7A-A649-2A489321366A@vnucleus.com> X-Mailer: VM 8.1.0 under 23.4.1 (i486-pc-linux-gnu) X-DLP: MIA2 Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Predisclosure list membership application X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org James Riley writes ("[Predisclosure-applications] Predisclosure list membership application"): > We're a Xen based VPS provider and would like to be considered for membership > in the Xen security predisclosure list. > > Organization: BetaForce Networks, LLC DBA vNucleus > Domain names involved: vnucleus.com Done, thanks. Ian. _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Thu Mar 05 16:03:32 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Thu, 05 Mar 2015 16:03:32 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YTYFI-0007JN-BX; Thu, 05 Mar 2015 16:03:32 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YTYFG-0007JI-TK for predisclosure-applications@lists.xenproject.org; Thu, 05 Mar 2015 16:03:30 +0000 Received: from [193.109.254.147] by server-12.bemta-14.messagelabs.com id 22/BC-02755-25E78F45; Thu, 05 Mar 2015 16:03:30 +0000 X-Env-Sender: Ian.Jackson@citrix.com X-Msg-Ref: server-15.tower-27.messagelabs.com!1425571407!15003324!1 X-Originating-IP: [66.165.176.63] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogNjYuMTY1LjE3Ni42MyA9PiAzMDYwNDg=\n X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 27100 invoked from network); 5 Mar 2015 16:03:29 -0000 Received: from smtp02.citrix.com (HELO SMTP02.CITRIX.COM) (66.165.176.63) by server-15.tower-27.messagelabs.com with RC4-SHA encrypted SMTP; 5 Mar 2015 16:03:29 -0000 X-IronPort-AV: E=Sophos;i="5.11,347,1422921600"; d="scan'208";a="241994222" Received: from ukmail1.uk.xensource.com (10.80.16.128) by smtprelay.citrix.com (10.13.107.79) with Microsoft SMTP Server id 14.3.210.2; Thu, 5 Mar 2015 10:43:16 -0500 Received: from mariner.uk.xensource.com ([10.80.2.22]) by ukmail1.uk.xensource.com with esmtp (Exim 4.69) (envelope-from ) id 1YTXvg-0008H1-Ia; Thu, 05 Mar 2015 15:43:16 +0000 Received: from iwj by mariner.uk.xensource.com with local (Exim 4.80) (envelope-from ) id 1YTXvg-0006HW-6R; Thu, 05 Mar 2015 15:43:16 +0000 From: Ian Jackson MIME-Version: 1.0 Message-ID: <21752.31123.888913.524653@mariner.uk.xensource.com> Date: Thu, 5 Mar 2015 15:43:15 +0000 To: Brian Marcotte In-Reply-To: <20150305071020.634E1242DE@panix5.panix.com> References: <20150305071020.634E1242DE@panix5.panix.com> X-Mailer: VM 8.1.0 under 23.4.1 (i486-pc-linux-gnu) X-DLP: MIA1 Cc: predisclosure-applications@lists.xenproject.org, security@panix.com Subject: Re: [Predisclosure-applications] Pre-disclosure list application X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org Brian Marcotte writes ("[Predisclosure-applications] Pre-disclosure list application"): > Application for Xen pre-disclosure list. > > We are Public Access Networks Corp. generally known as "panix.com". > Our main web page is at: http://www.panix.com/ Done, thanks. Ian. _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Thu Mar 05 16:03:32 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Thu, 05 Mar 2015 16:03:32 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YTYFI-0007JN-BX; Thu, 05 Mar 2015 16:03:32 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YTYFG-0007JI-TK for predisclosure-applications@lists.xenproject.org; Thu, 05 Mar 2015 16:03:30 +0000 Received: from [193.109.254.147] by server-12.bemta-14.messagelabs.com id 22/BC-02755-25E78F45; Thu, 05 Mar 2015 16:03:30 +0000 X-Env-Sender: Ian.Jackson@citrix.com X-Msg-Ref: server-15.tower-27.messagelabs.com!1425571407!15003324!1 X-Originating-IP: [66.165.176.63] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogNjYuMTY1LjE3Ni42MyA9PiAzMDYwNDg=\n X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 27100 invoked from network); 5 Mar 2015 16:03:29 -0000 Received: from smtp02.citrix.com (HELO SMTP02.CITRIX.COM) (66.165.176.63) by server-15.tower-27.messagelabs.com with RC4-SHA encrypted SMTP; 5 Mar 2015 16:03:29 -0000 X-IronPort-AV: E=Sophos;i="5.11,347,1422921600"; d="scan'208";a="241994222" Received: from ukmail1.uk.xensource.com (10.80.16.128) by smtprelay.citrix.com (10.13.107.79) with Microsoft SMTP Server id 14.3.210.2; Thu, 5 Mar 2015 10:43:16 -0500 Received: from mariner.uk.xensource.com ([10.80.2.22]) by ukmail1.uk.xensource.com with esmtp (Exim 4.69) (envelope-from ) id 1YTXvg-0008H1-Ia; Thu, 05 Mar 2015 15:43:16 +0000 Received: from iwj by mariner.uk.xensource.com with local (Exim 4.80) (envelope-from ) id 1YTXvg-0006HW-6R; Thu, 05 Mar 2015 15:43:16 +0000 From: Ian Jackson MIME-Version: 1.0 Message-ID: <21752.31123.888913.524653@mariner.uk.xensource.com> Date: Thu, 5 Mar 2015 15:43:15 +0000 To: Brian Marcotte In-Reply-To: <20150305071020.634E1242DE@panix5.panix.com> References: <20150305071020.634E1242DE@panix5.panix.com> X-Mailer: VM 8.1.0 under 23.4.1 (i486-pc-linux-gnu) X-DLP: MIA1 Cc: predisclosure-applications@lists.xenproject.org, security@panix.com Subject: Re: [Predisclosure-applications] Pre-disclosure list application X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org Brian Marcotte writes ("[Predisclosure-applications] Pre-disclosure list application"): > Application for Xen pre-disclosure list. > > We are Public Access Networks Corp. generally known as "panix.com". > Our main web page is at: http://www.panix.com/ Done, thanks. Ian. _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Mon Mar 09 12:31:13 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Mon, 09 Mar 2015 12:31:13 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YUwq1-0006h7-6Q; Mon, 09 Mar 2015 12:31:13 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YUwpz-0006gw-VM for predisclosure-applications@lists.xenproject.org; Mon, 09 Mar 2015 12:31:12 +0000 Received: from [85.158.137.68] by server-10.bemta-3.messagelabs.com id 95/68-02745-F829DF45; Mon, 09 Mar 2015 12:31:11 +0000 X-Env-Sender: keytoaster@gentoo.org X-Msg-Ref: server-8.tower-31.messagelabs.com!1425904268!14381638!1 X-Originating-IP: [140.211.166.183] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 29721 invoked from network); 9 Mar 2015 12:31:10 -0000 Received: from smtp.gentoo.org (HELO smtp.gentoo.org) (140.211.166.183) by server-8.tower-31.messagelabs.com with DHE-RSA-AES256-SHA encrypted SMTP; 9 Mar 2015 12:31:10 -0000 Received: from [IPv6:2003:7a:ad5f:a57a:ece0:981c:af91:892a] (p2003007AAD5FA57AECE0981CAF91892A.dip0.t-ipconnect.de [IPv6:2003:7a:ad5f:a57a:ece0:981c:af91:892a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: keytoaster) by smtp.gentoo.org (Postfix) with ESMTPSA id 96F6C3406AD; Mon, 9 Mar 2015 12:31:06 +0000 (UTC) Message-ID: <54FD9269.5070303@gentoo.org> Date: Mon, 09 Mar 2015 13:30:33 +0100 From: Tobias Heinlein User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: predisclosure-applications@lists.xenproject.org Cc: security@gentoo.org Subject: [Predisclosure-applications] Gentoo pre-disclosure application X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org Hi, I'd like to request the inclusion of Gentoo Linux on the pre-disclosure list. Gentoo Linux (gentoo.org) is a source-based Linux distribution. We distribute Xen in our main package repository. Evidence of active development can be seen on our mailing lists at http://archives.gentoo.org/ as well as our repositories at http://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo-x86/. Our Xen packages can be found under http://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo-x86/app-emulation/xen/. This should also serve as evidence that we do distribute Xen. Security issues are handled by the Gentoo Security Project: http://www.gentoo.org/security/en/ Handling of confidential issues is described under "3. Security Team contact information". For details regarding our internal handling of confidential issues also see [1] and [2]. We have read and agree with the terms of the Xen Security Problem Response Process and will not disclose any information or updated packages during an embargo period. Please use package-security-xen@gentoo.org for the pre-disclosure list. This is an alias available only to members of the Gentoo Security Project and the Xen package maintainers. The security team will make sure that new Xen maintainers understand the policy before they are added to the alias. Thank you for your consideration, Tobias Heinlein Gentoo Security [1] https://wiki.gentoo.org/wiki/Project:Security/GLSA_Coordinator_Guide#Confidential_vulnerability_bug_management [2] http://www.gentoo.org/security/en/vulnerability-policy.xml _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Mon Mar 09 12:31:13 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Mon, 09 Mar 2015 12:31:13 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YUwq1-0006h7-6Q; Mon, 09 Mar 2015 12:31:13 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YUwpz-0006gw-VM for predisclosure-applications@lists.xenproject.org; Mon, 09 Mar 2015 12:31:12 +0000 Received: from [85.158.137.68] by server-10.bemta-3.messagelabs.com id 95/68-02745-F829DF45; Mon, 09 Mar 2015 12:31:11 +0000 X-Env-Sender: keytoaster@gentoo.org X-Msg-Ref: server-8.tower-31.messagelabs.com!1425904268!14381638!1 X-Originating-IP: [140.211.166.183] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 29721 invoked from network); 9 Mar 2015 12:31:10 -0000 Received: from smtp.gentoo.org (HELO smtp.gentoo.org) (140.211.166.183) by server-8.tower-31.messagelabs.com with DHE-RSA-AES256-SHA encrypted SMTP; 9 Mar 2015 12:31:10 -0000 Received: from [IPv6:2003:7a:ad5f:a57a:ece0:981c:af91:892a] (p2003007AAD5FA57AECE0981CAF91892A.dip0.t-ipconnect.de [IPv6:2003:7a:ad5f:a57a:ece0:981c:af91:892a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: keytoaster) by smtp.gentoo.org (Postfix) with ESMTPSA id 96F6C3406AD; Mon, 9 Mar 2015 12:31:06 +0000 (UTC) Message-ID: <54FD9269.5070303@gentoo.org> Date: Mon, 09 Mar 2015 13:30:33 +0100 From: Tobias Heinlein User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: predisclosure-applications@lists.xenproject.org Cc: security@gentoo.org Subject: [Predisclosure-applications] Gentoo pre-disclosure application X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org Hi, I'd like to request the inclusion of Gentoo Linux on the pre-disclosure list. Gentoo Linux (gentoo.org) is a source-based Linux distribution. We distribute Xen in our main package repository. Evidence of active development can be seen on our mailing lists at http://archives.gentoo.org/ as well as our repositories at http://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo-x86/. Our Xen packages can be found under http://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo-x86/app-emulation/xen/. This should also serve as evidence that we do distribute Xen. Security issues are handled by the Gentoo Security Project: http://www.gentoo.org/security/en/ Handling of confidential issues is described under "3. Security Team contact information". For details regarding our internal handling of confidential issues also see [1] and [2]. We have read and agree with the terms of the Xen Security Problem Response Process and will not disclose any information or updated packages during an embargo period. Please use package-security-xen@gentoo.org for the pre-disclosure list. This is an alias available only to members of the Gentoo Security Project and the Xen package maintainers. The security team will make sure that new Xen maintainers understand the policy before they are added to the alias. Thank you for your consideration, Tobias Heinlein Gentoo Security [1] https://wiki.gentoo.org/wiki/Project:Security/GLSA_Coordinator_Guide#Confidential_vulnerability_bug_management [2] http://www.gentoo.org/security/en/vulnerability-policy.xml _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Mon Mar 09 17:02:55 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Mon, 09 Mar 2015 17:02:55 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YV14x-0006PQ-Fg; Mon, 09 Mar 2015 17:02:55 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YV14w-0006PK-K4 for predisclosure-applications@lists.xenproject.org; Mon, 09 Mar 2015 17:02:54 +0000 Received: from [193.109.254.147] by server-14.bemta-14.messagelabs.com id 66/F3-02753-D32DDF45; Mon, 09 Mar 2015 17:02:53 +0000 X-Env-Sender: nathan@gt.net X-Msg-Ref: server-12.tower-27.messagelabs.com!1425920571!15940674!1 X-Originating-IP: [208.70.244.21] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 30731 invoked from network); 9 Mar 2015 17:02:52 -0000 Received: from gossamer.nmsrv.com (HELO gossamer.nmsrv.com) (208.70.244.21) by server-12.tower-27.messagelabs.com with DHE-RSA-AES256-SHA encrypted SMTP; 9 Mar 2015 17:02:52 -0000 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=gt.net; h=from:to:cc :references:in-reply-to:subject:date:message-id:mime-version :content-type:content-transfer-encoding; s=mail; bh=B+xeMMxd0Lu+ FE8AVZkU5KmcpMI=; b=ZViSQ0xszMYaj+vdmnXeJPmPkD0ryaYTPAwIEcchVljX gm6fxhLkcujyDf223I23Ji6vu3fQoUPK65eHcwBu0yCy38B54zKNmt6rNDsQdGAv wHb8/YYZei1nq8s9kgx8SG+/VO+C9oGamyXzj7kWA7XoIkzE75RHwo0rqhkaopc= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gt.net; h=from:to:cc :references:in-reply-to:subject:date:message-id:mime-version :content-type:content-transfer-encoding; q=dns; s=mail; b=fLtw0o dqVXmV8livXa8Key8WTS3qz1topiCpu4Bp67BojMsXFV1DGwvE+Ts+egYPw5UpsS 1B4Vl4U6OHsfmRcW0XlaV/EcJkCM3p08LxmzBh9ygbH9Ad/Ov4zdUge8ePnMavTS 4myvzgHaXaYP6nwG4SzSQawUsjppyQ1yff4OI= Received: (qmail 600 invoked from network); 9 Mar 2015 17:02:49 -0000 X-AntiVirus: Clean Received: from gateway.gossamer-threads.com (HELO nathanwindows) (nathan@gt.net@208.70.247.145) by gossamer.nmsrv.com with ESMTPSA (DHE-RSA-AES256-GCM-SHA384 encrypted); 9 Mar 2015 17:02:49 -0000 From: "Nathan March" To: "'Ian Campbell'" References: <0df701d0553f$113ac830$33b05890$@gt.net> <1425399029.25940.51.camel@xen.org> In-Reply-To: Date: Mon, 9 Mar 2015 10:02:46 -0700 Message-ID: <1a7c01d05a8a$ddb72b60$99258220$@gt.net> MIME-Version: 1.0 X-Mailer: Microsoft Outlook 15.0 Thread-Index: AQKACgIG/4e5T4y78BOZ0SMHY+pKiQJXpFIyAgNS7Habkim20A== Content-Language: en-us Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Pre-disclosure list application for gt.net X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org Hi, Just following up here to see if any additional info is required? Probably too late to make it on the list priority to the upcoming releases, but still would like to be on the list for future XSA's. Thanks! - Nathan > -----Original Message----- > From: Nathan March [mailto:nathan@gt.net] > Sent: Tuesday, March 3, 2015 12:05 PM > To: 'Ian Campbell' > Cc: 'predisclosure-applications@lists.xenproject.org' > Subject: RE: [Predisclosure-applications] Pre-disclosure list application for > gt.net > > Hi Ian, > > The noc@gt.net address goes only to our me (noc manager) and our CEO. > > * Evidence of your status as a service/software provider: > * Evidence of your status as a user/distributor of Xen: > > https://gt.net/cloud/ > > * Information about your handling of security problems: > > Security contact details are listed on both our contact + support pages: > > http://gt.net/contact/ > http://gt.net/support/ > > - Nathan > > > -----Original Message----- > > From: Ian Campbell [mailto:ijc@xen.org] > > Sent: Tuesday, March 3, 2015 8:10 AM > > To: Nathan March > > Cc: predisclosure-applications@lists.xenproject.org > > Subject: Re: [Predisclosure-applications] Pre-disclosure list > > application for gt.net > > > > On Mon, 2015-03-02 at 15:17 -0800, Nathan March wrote: > > > Would like to apply for access to the predisclosure list please. > > > > Hi, > > > > Thank you for your application. > > > > The security policy[0] requires "Link(s) to current public web pages, > > belonging to your organisation," for each piece of information, which > > you have not provided here for > > * Evidence of your status as a service/software provider: > > * Evidence of your status as a user/distributor of Xen: > > * Information about your handling of security problems: > > > > Please can you provide these links so that we may continue to process > > your application. Note that as regards pricing the policy includes "or > > how to get a quote". > > > > Please could you also clarify the scope of your noc@ alias. It is > > intended that predisclosures go to a small team dedicated to handling > > incoming security issues, rather than a large team of system administrators. > > > > Thanks, > > Ian. > > > > [0] http://www.xenproject.org/security-policy.html _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Mon Mar 09 17:02:55 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Mon, 09 Mar 2015 17:02:55 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YV14x-0006PQ-Fg; Mon, 09 Mar 2015 17:02:55 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YV14w-0006PK-K4 for predisclosure-applications@lists.xenproject.org; Mon, 09 Mar 2015 17:02:54 +0000 Received: from [193.109.254.147] by server-14.bemta-14.messagelabs.com id 66/F3-02753-D32DDF45; Mon, 09 Mar 2015 17:02:53 +0000 X-Env-Sender: nathan@gt.net X-Msg-Ref: server-12.tower-27.messagelabs.com!1425920571!15940674!1 X-Originating-IP: [208.70.244.21] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 30731 invoked from network); 9 Mar 2015 17:02:52 -0000 Received: from gossamer.nmsrv.com (HELO gossamer.nmsrv.com) (208.70.244.21) by server-12.tower-27.messagelabs.com with DHE-RSA-AES256-SHA encrypted SMTP; 9 Mar 2015 17:02:52 -0000 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=gt.net; h=from:to:cc :references:in-reply-to:subject:date:message-id:mime-version :content-type:content-transfer-encoding; s=mail; bh=B+xeMMxd0Lu+ FE8AVZkU5KmcpMI=; b=ZViSQ0xszMYaj+vdmnXeJPmPkD0ryaYTPAwIEcchVljX gm6fxhLkcujyDf223I23Ji6vu3fQoUPK65eHcwBu0yCy38B54zKNmt6rNDsQdGAv wHb8/YYZei1nq8s9kgx8SG+/VO+C9oGamyXzj7kWA7XoIkzE75RHwo0rqhkaopc= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gt.net; h=from:to:cc :references:in-reply-to:subject:date:message-id:mime-version :content-type:content-transfer-encoding; q=dns; s=mail; b=fLtw0o dqVXmV8livXa8Key8WTS3qz1topiCpu4Bp67BojMsXFV1DGwvE+Ts+egYPw5UpsS 1B4Vl4U6OHsfmRcW0XlaV/EcJkCM3p08LxmzBh9ygbH9Ad/Ov4zdUge8ePnMavTS 4myvzgHaXaYP6nwG4SzSQawUsjppyQ1yff4OI= Received: (qmail 600 invoked from network); 9 Mar 2015 17:02:49 -0000 X-AntiVirus: Clean Received: from gateway.gossamer-threads.com (HELO nathanwindows) (nathan@gt.net@208.70.247.145) by gossamer.nmsrv.com with ESMTPSA (DHE-RSA-AES256-GCM-SHA384 encrypted); 9 Mar 2015 17:02:49 -0000 From: "Nathan March" To: "'Ian Campbell'" References: <0df701d0553f$113ac830$33b05890$@gt.net> <1425399029.25940.51.camel@xen.org> In-Reply-To: Date: Mon, 9 Mar 2015 10:02:46 -0700 Message-ID: <1a7c01d05a8a$ddb72b60$99258220$@gt.net> MIME-Version: 1.0 X-Mailer: Microsoft Outlook 15.0 Thread-Index: AQKACgIG/4e5T4y78BOZ0SMHY+pKiQJXpFIyAgNS7Habkim20A== Content-Language: en-us Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Pre-disclosure list application for gt.net X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org Hi, Just following up here to see if any additional info is required? Probably too late to make it on the list priority to the upcoming releases, but still would like to be on the list for future XSA's. Thanks! - Nathan > -----Original Message----- > From: Nathan March [mailto:nathan@gt.net] > Sent: Tuesday, March 3, 2015 12:05 PM > To: 'Ian Campbell' > Cc: 'predisclosure-applications@lists.xenproject.org' > Subject: RE: [Predisclosure-applications] Pre-disclosure list application for > gt.net > > Hi Ian, > > The noc@gt.net address goes only to our me (noc manager) and our CEO. > > * Evidence of your status as a service/software provider: > * Evidence of your status as a user/distributor of Xen: > > https://gt.net/cloud/ > > * Information about your handling of security problems: > > Security contact details are listed on both our contact + support pages: > > http://gt.net/contact/ > http://gt.net/support/ > > - Nathan > > > -----Original Message----- > > From: Ian Campbell [mailto:ijc@xen.org] > > Sent: Tuesday, March 3, 2015 8:10 AM > > To: Nathan March > > Cc: predisclosure-applications@lists.xenproject.org > > Subject: Re: [Predisclosure-applications] Pre-disclosure list > > application for gt.net > > > > On Mon, 2015-03-02 at 15:17 -0800, Nathan March wrote: > > > Would like to apply for access to the predisclosure list please. > > > > Hi, > > > > Thank you for your application. > > > > The security policy[0] requires "Link(s) to current public web pages, > > belonging to your organisation," for each piece of information, which > > you have not provided here for > > * Evidence of your status as a service/software provider: > > * Evidence of your status as a user/distributor of Xen: > > * Information about your handling of security problems: > > > > Please can you provide these links so that we may continue to process > > your application. Note that as regards pricing the policy includes "or > > how to get a quote". > > > > Please could you also clarify the scope of your noc@ alias. It is > > intended that predisclosures go to a small team dedicated to handling > > incoming security issues, rather than a large team of system administrators. > > > > Thanks, > > Ian. > > > > [0] http://www.xenproject.org/security-policy.html _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Mon Mar 09 17:14:11 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Mon, 09 Mar 2015 17:14:11 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YV1Fr-00081r-3k; Mon, 09 Mar 2015 17:14:11 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YV1Fo-00081m-Vr for predisclosure-applications@lists.xenproject.org; Mon, 09 Mar 2015 17:14:09 +0000 Received: from [85.158.139.211] by server-17.bemta-5.messagelabs.com id C2/3A-03132-0E4DDF45; Mon, 09 Mar 2015 17:14:08 +0000 X-Env-Sender: ijc@xen.org X-Msg-Ref: server-4.tower-206.messagelabs.com!1425921243!14142974!1 X-Originating-IP: [212.110.190.137] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 29276 invoked from network); 9 Mar 2015 17:14:04 -0000 Received: from benson.vm.bytemark.co.uk (HELO benson.vm.bytemark.co.uk) (212.110.190.137) by server-4.tower-206.messagelabs.com with AES256-SHA encrypted SMTP; 9 Mar 2015 17:14:04 -0000 Received: from [185.25.64.249] (helo=kazak) by benson.vm.bytemark.co.uk with esmtpsa (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.72) (envelope-from ) id 1YV1Fi-0008Uq-VQ; Mon, 09 Mar 2015 17:14:03 +0000 Message-ID: <1425921241.21353.60.camel@xen.org> From: Ian Campbell To: Nathan March Date: Mon, 09 Mar 2015 17:14:01 +0000 In-Reply-To: <1a7c01d05a8a$ddb72b60$99258220$@gt.net> References: <0df701d0553f$113ac830$33b05890$@gt.net> <1425399029.25940.51.camel@xen.org> <1a7c01d05a8a$ddb72b60$99258220$@gt.net> X-Mailer: Evolution 3.12.9-1+b1 Mime-Version: 1.0 Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Pre-disclosure list application for gt.net X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org Hi Nathan, Our records show that your application was processed on Wednesday 4th and that you were added to the list at the time. It seems no manual notification was sent but you should have received an automated subscription notification to your noc@gt.net address, as well as copies of the (at the time) outstanding embargoed issues XSA-119,120,121,122 and 123. Did you not receive those copies? The XSA-121 copy had message-id and was dated "Wed, 4 Mar 2015 12:25:23 +0000". Ian. On Mon, 2015-03-09 at 10:02 -0700, Nathan March wrote: > Hi, > > Just following up here to see if any additional info is required? Probably too late to make it on the list priority to the upcoming releases, but still would like to be on the list for future XSA's. > > Thanks! > > - Nathan > > > > -----Original Message----- > > From: Nathan March [mailto:nathan@gt.net] > > Sent: Tuesday, March 3, 2015 12:05 PM > > To: 'Ian Campbell' > > Cc: 'predisclosure-applications@lists.xenproject.org' > > Subject: RE: [Predisclosure-applications] Pre-disclosure list application for > > gt.net > > > > Hi Ian, > > > > The noc@gt.net address goes only to our me (noc manager) and our CEO. > > > > * Evidence of your status as a service/software provider: > > * Evidence of your status as a user/distributor of Xen: > > > > https://gt.net/cloud/ > > > > * Information about your handling of security problems: > > > > Security contact details are listed on both our contact + support pages: > > > > http://gt.net/contact/ > > http://gt.net/support/ > > > > - Nathan > > > > > -----Original Message----- > > > From: Ian Campbell [mailto:ijc@xen.org] > > > Sent: Tuesday, March 3, 2015 8:10 AM > > > To: Nathan March > > > Cc: predisclosure-applications@lists.xenproject.org > > > Subject: Re: [Predisclosure-applications] Pre-disclosure list > > > application for gt.net > > > > > > On Mon, 2015-03-02 at 15:17 -0800, Nathan March wrote: > > > > Would like to apply for access to the predisclosure list please. > > > > > > Hi, > > > > > > Thank you for your application. > > > > > > The security policy[0] requires "Link(s) to current public web pages, > > > belonging to your organisation," for each piece of information, which > > > you have not provided here for > > > * Evidence of your status as a service/software provider: > > > * Evidence of your status as a user/distributor of Xen: > > > * Information about your handling of security problems: > > > > > > Please can you provide these links so that we may continue to process > > > your application. Note that as regards pricing the policy includes "or > > > how to get a quote". > > > > > > Please could you also clarify the scope of your noc@ alias. It is > > > intended that predisclosures go to a small team dedicated to handling > > > incoming security issues, rather than a large team of system administrators. > > > > > > Thanks, > > > Ian. > > > > > > [0] http://www.xenproject.org/security-policy.html > > > _______________________________________________ > Predisclosure-applications mailing list > Predisclosure-applications@lists.xenproject.org > http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Mon Mar 09 17:14:11 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Mon, 09 Mar 2015 17:14:11 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YV1Fr-00081r-3k; Mon, 09 Mar 2015 17:14:11 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YV1Fo-00081m-Vr for predisclosure-applications@lists.xenproject.org; Mon, 09 Mar 2015 17:14:09 +0000 Received: from [85.158.139.211] by server-17.bemta-5.messagelabs.com id C2/3A-03132-0E4DDF45; Mon, 09 Mar 2015 17:14:08 +0000 X-Env-Sender: ijc@xen.org X-Msg-Ref: server-4.tower-206.messagelabs.com!1425921243!14142974!1 X-Originating-IP: [212.110.190.137] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 29276 invoked from network); 9 Mar 2015 17:14:04 -0000 Received: from benson.vm.bytemark.co.uk (HELO benson.vm.bytemark.co.uk) (212.110.190.137) by server-4.tower-206.messagelabs.com with AES256-SHA encrypted SMTP; 9 Mar 2015 17:14:04 -0000 Received: from [185.25.64.249] (helo=kazak) by benson.vm.bytemark.co.uk with esmtpsa (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.72) (envelope-from ) id 1YV1Fi-0008Uq-VQ; Mon, 09 Mar 2015 17:14:03 +0000 Message-ID: <1425921241.21353.60.camel@xen.org> From: Ian Campbell To: Nathan March Date: Mon, 09 Mar 2015 17:14:01 +0000 In-Reply-To: <1a7c01d05a8a$ddb72b60$99258220$@gt.net> References: <0df701d0553f$113ac830$33b05890$@gt.net> <1425399029.25940.51.camel@xen.org> <1a7c01d05a8a$ddb72b60$99258220$@gt.net> X-Mailer: Evolution 3.12.9-1+b1 Mime-Version: 1.0 Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Pre-disclosure list application for gt.net X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org Hi Nathan, Our records show that your application was processed on Wednesday 4th and that you were added to the list at the time. It seems no manual notification was sent but you should have received an automated subscription notification to your noc@gt.net address, as well as copies of the (at the time) outstanding embargoed issues XSA-119,120,121,122 and 123. Did you not receive those copies? The XSA-121 copy had message-id and was dated "Wed, 4 Mar 2015 12:25:23 +0000". Ian. On Mon, 2015-03-09 at 10:02 -0700, Nathan March wrote: > Hi, > > Just following up here to see if any additional info is required? Probably too late to make it on the list priority to the upcoming releases, but still would like to be on the list for future XSA's. > > Thanks! > > - Nathan > > > > -----Original Message----- > > From: Nathan March [mailto:nathan@gt.net] > > Sent: Tuesday, March 3, 2015 12:05 PM > > To: 'Ian Campbell' > > Cc: 'predisclosure-applications@lists.xenproject.org' > > Subject: RE: [Predisclosure-applications] Pre-disclosure list application for > > gt.net > > > > Hi Ian, > > > > The noc@gt.net address goes only to our me (noc manager) and our CEO. > > > > * Evidence of your status as a service/software provider: > > * Evidence of your status as a user/distributor of Xen: > > > > https://gt.net/cloud/ > > > > * Information about your handling of security problems: > > > > Security contact details are listed on both our contact + support pages: > > > > http://gt.net/contact/ > > http://gt.net/support/ > > > > - Nathan > > > > > -----Original Message----- > > > From: Ian Campbell [mailto:ijc@xen.org] > > > Sent: Tuesday, March 3, 2015 8:10 AM > > > To: Nathan March > > > Cc: predisclosure-applications@lists.xenproject.org > > > Subject: Re: [Predisclosure-applications] Pre-disclosure list > > > application for gt.net > > > > > > On Mon, 2015-03-02 at 15:17 -0800, Nathan March wrote: > > > > Would like to apply for access to the predisclosure list please. > > > > > > Hi, > > > > > > Thank you for your application. > > > > > > The security policy[0] requires "Link(s) to current public web pages, > > > belonging to your organisation," for each piece of information, which > > > you have not provided here for > > > * Evidence of your status as a service/software provider: > > > * Evidence of your status as a user/distributor of Xen: > > > * Information about your handling of security problems: > > > > > > Please can you provide these links so that we may continue to process > > > your application. Note that as regards pricing the policy includes "or > > > how to get a quote". > > > > > > Please could you also clarify the scope of your noc@ alias. It is > > > intended that predisclosures go to a small team dedicated to handling > > > incoming security issues, rather than a large team of system administrators. > > > > > > Thanks, > > > Ian. > > > > > > [0] http://www.xenproject.org/security-policy.html > > > _______________________________________________ > Predisclosure-applications mailing list > Predisclosure-applications@lists.xenproject.org > http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Mon Mar 09 17:17:04 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Mon, 09 Mar 2015 17:17:04 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YV1Ie-0008Rh-NO; Mon, 09 Mar 2015 17:17:04 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YV1Id-0008Rb-RI for predisclosure-applications@lists.xenproject.org; Mon, 09 Mar 2015 17:17:04 +0000 Received: from [193.109.254.147] by server-9.bemta-14.messagelabs.com id 61/84-02777-F85DDF45; Mon, 09 Mar 2015 17:17:03 +0000 X-Env-Sender: nathan@gt.net X-Msg-Ref: server-3.tower-27.messagelabs.com!1425921420!15818535!1 X-Originating-IP: [208.70.244.21] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 32152 invoked from network); 9 Mar 2015 17:17:01 -0000 Received: from gossamer.nmsrv.com (HELO gossamer.nmsrv.com) (208.70.244.21) by server-3.tower-27.messagelabs.com with DHE-RSA-AES256-SHA encrypted SMTP; 9 Mar 2015 17:17:01 -0000 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=gt.net; h=from:to:cc :references:in-reply-to:subject:date:message-id:mime-version :content-type:content-transfer-encoding; s=mail; bh=uXLnEEjaAnPW C33pgzsdt0aRDKA=; b=Zlk5tYgmmtSp7ck4nhyY7Qcvvd29z4s37j1sf1hQzX/A UT1GR7X5S8sB13pcU37eZIRQVhHLe/MjWUFGcIcVOeiWwhSPf2re6O5njjLL27LF 27gCxcJXMnDiCC8sKTc0ROc0Hgl2a0y1q9Jrzk+w558pp0nzCeqIBGVciDtfHsQ= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gt.net; h=from:to:cc :references:in-reply-to:subject:date:message-id:mime-version :content-type:content-transfer-encoding; q=dns; s=mail; b=hm6HPK SC63cJhPWX00uusWm9JLDIiDTP2ORch3oIcoKlDvzibW5MZlYBWFmJGj/cHkkYcO HQZi53dmOoBKUhFIomk+CDGMFETKiDGL4qJ/9E8z1u4OKkzVN1A++6w39EZovnS5 pywPrF2CMwVmqwFFfvYlbEmyOW7KEzMX+UOAU= Received: (qmail 6332 invoked from network); 9 Mar 2015 17:16:59 -0000 X-AntiVirus: Clean Received: from gateway.gossamer-threads.com (HELO nathanwindows) (nathan@gt.net@208.70.247.145) by gossamer.nmsrv.com with ESMTPSA (DHE-RSA-AES256-GCM-SHA384 encrypted); 9 Mar 2015 17:16:59 -0000 From: "Nathan March" To: "'Ian Campbell'" References: <0df701d0553f$113ac830$33b05890$@gt.net> <1425399029.25940.51.camel@xen.org> <1a7c01d05a8a$ddb72b60$99258220$@gt.net> <1425921241.21353.60.camel@xen.org> In-Reply-To: <1425921241.21353.60.camel@xen.org> Date: Mon, 9 Mar 2015 10:16:56 -0700 Message-ID: <1a8a01d05a8c$d8466e00$88d34a00$@gt.net> MIME-Version: 1.0 X-Mailer: Microsoft Outlook 15.0 Thread-Index: AQKACgIG/4e5T4y78BOZ0SMHY+pKiQJXpFIyAwD9uhABtc1v+Zt8kfyw Content-Language: en-us Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Pre-disclosure list application for gt.net X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org Hi Ian, Thanks for the quick response. Looks like there was a misconfig on that mail alias so that email bounced, I've fixed it up now. Could you please resend the XSA's? Thanks! - Nathan > -----Original Message----- > From: Ian Campbell [mailto:ijc@xen.org] > Sent: Monday, March 9, 2015 10:14 AM > To: Nathan March > Cc: predisclosure-applications@lists.xenproject.org > Subject: Re: [Predisclosure-applications] Pre-disclosure list application for > gt.net > > Hi Nathan, > > Our records show that your application was processed on Wednesday 4th > and that you were added to the list at the time. It seems no manual > notification was sent but you should have received an automated > subscription notification to your noc@gt.net address, as well as copies of the > (at the time) outstanding embargoed issues XSA-119,120,121,122 and 123. > > Did you not receive those copies? The XSA-121 copy had message-id > and was dated "Wed, 4 Mar 2015 > 12:25:23 +0000". > > Ian. > > On Mon, 2015-03-09 at 10:02 -0700, Nathan March wrote: > > Hi, > > > > Just following up here to see if any additional info is required? Probably too > late to make it on the list priority to the upcoming releases, but still would like > to be on the list for future XSA's. > > > > Thanks! > > > > - Nathan > > > > > > > -----Original Message----- > > > From: Nathan March [mailto:nathan@gt.net] > > > Sent: Tuesday, March 3, 2015 12:05 PM > > > To: 'Ian Campbell' > > > Cc: 'predisclosure-applications@lists.xenproject.org' > > > Subject: RE: [Predisclosure-applications] Pre-disclosure list > > > application for gt.net > > > > > > Hi Ian, > > > > > > The noc@gt.net address goes only to our me (noc manager) and our CEO. > > > > > > * Evidence of your status as a service/software provider: > > > * Evidence of your status as a user/distributor of Xen: > > > > > > https://gt.net/cloud/ > > > > > > * Information about your handling of security problems: > > > > > > Security contact details are listed on both our contact + support pages: > > > > > > http://gt.net/contact/ > > > http://gt.net/support/ > > > > > > - Nathan > > > > > > > -----Original Message----- > > > > From: Ian Campbell [mailto:ijc@xen.org] > > > > Sent: Tuesday, March 3, 2015 8:10 AM > > > > To: Nathan March > > > > Cc: predisclosure-applications@lists.xenproject.org > > > > Subject: Re: [Predisclosure-applications] Pre-disclosure list > > > > application for gt.net > > > > > > > > On Mon, 2015-03-02 at 15:17 -0800, Nathan March wrote: > > > > > Would like to apply for access to the predisclosure list please. > > > > > > > > Hi, > > > > > > > > Thank you for your application. > > > > > > > > The security policy[0] requires "Link(s) to current public web > > > > pages, belonging to your organisation," for each piece of > > > > information, which you have not provided here for > > > > * Evidence of your status as a service/software provider: > > > > * Evidence of your status as a user/distributor of Xen: > > > > * Information about your handling of security problems: > > > > > > > > Please can you provide these links so that we may continue to > > > > process your application. Note that as regards pricing the policy > > > > includes "or how to get a quote". > > > > > > > > Please could you also clarify the scope of your noc@ alias. It is > > > > intended that predisclosures go to a small team dedicated to > > > > handling incoming security issues, rather than a large team of system > administrators. > > > > > > > > Thanks, > > > > Ian. > > > > > > > > [0] http://www.xenproject.org/security-policy.html > > > > > > _______________________________________________ > > Predisclosure-applications mailing list > > Predisclosure-applications@lists.xenproject.org > > http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure- > applications _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Mon Mar 09 17:17:04 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Mon, 09 Mar 2015 17:17:04 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YV1Ie-0008Rh-NO; Mon, 09 Mar 2015 17:17:04 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YV1Id-0008Rb-RI for predisclosure-applications@lists.xenproject.org; Mon, 09 Mar 2015 17:17:04 +0000 Received: from [193.109.254.147] by server-9.bemta-14.messagelabs.com id 61/84-02777-F85DDF45; Mon, 09 Mar 2015 17:17:03 +0000 X-Env-Sender: nathan@gt.net X-Msg-Ref: server-3.tower-27.messagelabs.com!1425921420!15818535!1 X-Originating-IP: [208.70.244.21] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 32152 invoked from network); 9 Mar 2015 17:17:01 -0000 Received: from gossamer.nmsrv.com (HELO gossamer.nmsrv.com) (208.70.244.21) by server-3.tower-27.messagelabs.com with DHE-RSA-AES256-SHA encrypted SMTP; 9 Mar 2015 17:17:01 -0000 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=gt.net; h=from:to:cc :references:in-reply-to:subject:date:message-id:mime-version :content-type:content-transfer-encoding; s=mail; bh=uXLnEEjaAnPW C33pgzsdt0aRDKA=; b=Zlk5tYgmmtSp7ck4nhyY7Qcvvd29z4s37j1sf1hQzX/A UT1GR7X5S8sB13pcU37eZIRQVhHLe/MjWUFGcIcVOeiWwhSPf2re6O5njjLL27LF 27gCxcJXMnDiCC8sKTc0ROc0Hgl2a0y1q9Jrzk+w558pp0nzCeqIBGVciDtfHsQ= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gt.net; h=from:to:cc :references:in-reply-to:subject:date:message-id:mime-version :content-type:content-transfer-encoding; q=dns; s=mail; b=hm6HPK SC63cJhPWX00uusWm9JLDIiDTP2ORch3oIcoKlDvzibW5MZlYBWFmJGj/cHkkYcO HQZi53dmOoBKUhFIomk+CDGMFETKiDGL4qJ/9E8z1u4OKkzVN1A++6w39EZovnS5 pywPrF2CMwVmqwFFfvYlbEmyOW7KEzMX+UOAU= Received: (qmail 6332 invoked from network); 9 Mar 2015 17:16:59 -0000 X-AntiVirus: Clean Received: from gateway.gossamer-threads.com (HELO nathanwindows) (nathan@gt.net@208.70.247.145) by gossamer.nmsrv.com with ESMTPSA (DHE-RSA-AES256-GCM-SHA384 encrypted); 9 Mar 2015 17:16:59 -0000 From: "Nathan March" To: "'Ian Campbell'" References: <0df701d0553f$113ac830$33b05890$@gt.net> <1425399029.25940.51.camel@xen.org> <1a7c01d05a8a$ddb72b60$99258220$@gt.net> <1425921241.21353.60.camel@xen.org> In-Reply-To: <1425921241.21353.60.camel@xen.org> Date: Mon, 9 Mar 2015 10:16:56 -0700 Message-ID: <1a8a01d05a8c$d8466e00$88d34a00$@gt.net> MIME-Version: 1.0 X-Mailer: Microsoft Outlook 15.0 Thread-Index: AQKACgIG/4e5T4y78BOZ0SMHY+pKiQJXpFIyAwD9uhABtc1v+Zt8kfyw Content-Language: en-us Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Pre-disclosure list application for gt.net X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org Hi Ian, Thanks for the quick response. Looks like there was a misconfig on that mail alias so that email bounced, I've fixed it up now. Could you please resend the XSA's? Thanks! - Nathan > -----Original Message----- > From: Ian Campbell [mailto:ijc@xen.org] > Sent: Monday, March 9, 2015 10:14 AM > To: Nathan March > Cc: predisclosure-applications@lists.xenproject.org > Subject: Re: [Predisclosure-applications] Pre-disclosure list application for > gt.net > > Hi Nathan, > > Our records show that your application was processed on Wednesday 4th > and that you were added to the list at the time. It seems no manual > notification was sent but you should have received an automated > subscription notification to your noc@gt.net address, as well as copies of the > (at the time) outstanding embargoed issues XSA-119,120,121,122 and 123. > > Did you not receive those copies? The XSA-121 copy had message-id > and was dated "Wed, 4 Mar 2015 > 12:25:23 +0000". > > Ian. > > On Mon, 2015-03-09 at 10:02 -0700, Nathan March wrote: > > Hi, > > > > Just following up here to see if any additional info is required? Probably too > late to make it on the list priority to the upcoming releases, but still would like > to be on the list for future XSA's. > > > > Thanks! > > > > - Nathan > > > > > > > -----Original Message----- > > > From: Nathan March [mailto:nathan@gt.net] > > > Sent: Tuesday, March 3, 2015 12:05 PM > > > To: 'Ian Campbell' > > > Cc: 'predisclosure-applications@lists.xenproject.org' > > > Subject: RE: [Predisclosure-applications] Pre-disclosure list > > > application for gt.net > > > > > > Hi Ian, > > > > > > The noc@gt.net address goes only to our me (noc manager) and our CEO. > > > > > > * Evidence of your status as a service/software provider: > > > * Evidence of your status as a user/distributor of Xen: > > > > > > https://gt.net/cloud/ > > > > > > * Information about your handling of security problems: > > > > > > Security contact details are listed on both our contact + support pages: > > > > > > http://gt.net/contact/ > > > http://gt.net/support/ > > > > > > - Nathan > > > > > > > -----Original Message----- > > > > From: Ian Campbell [mailto:ijc@xen.org] > > > > Sent: Tuesday, March 3, 2015 8:10 AM > > > > To: Nathan March > > > > Cc: predisclosure-applications@lists.xenproject.org > > > > Subject: Re: [Predisclosure-applications] Pre-disclosure list > > > > application for gt.net > > > > > > > > On Mon, 2015-03-02 at 15:17 -0800, Nathan March wrote: > > > > > Would like to apply for access to the predisclosure list please. > > > > > > > > Hi, > > > > > > > > Thank you for your application. > > > > > > > > The security policy[0] requires "Link(s) to current public web > > > > pages, belonging to your organisation," for each piece of > > > > information, which you have not provided here for > > > > * Evidence of your status as a service/software provider: > > > > * Evidence of your status as a user/distributor of Xen: > > > > * Information about your handling of security problems: > > > > > > > > Please can you provide these links so that we may continue to > > > > process your application. Note that as regards pricing the policy > > > > includes "or how to get a quote". > > > > > > > > Please could you also clarify the scope of your noc@ alias. It is > > > > intended that predisclosures go to a small team dedicated to > > > > handling incoming security issues, rather than a large team of system > administrators. > > > > > > > > Thanks, > > > > Ian. > > > > > > > > [0] http://www.xenproject.org/security-policy.html > > > > > > _______________________________________________ > > Predisclosure-applications mailing list > > Predisclosure-applications@lists.xenproject.org > > http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure- > applications _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Mon Mar 09 17:25:27 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Mon, 09 Mar 2015 17:25:27 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YV1Ql-0000hM-7f; Mon, 09 Mar 2015 17:25:27 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YV1Qj-0000gZ-09 for predisclosure-applications@lists.xenproject.org; Mon, 09 Mar 2015 17:25:25 +0000 Received: from [85.158.139.211] by server-11.bemta-5.messagelabs.com id C3/75-02757-387DDF45; Mon, 09 Mar 2015 17:25:23 +0000 X-Env-Sender: ijc@xen.org X-Msg-Ref: server-4.tower-206.messagelabs.com!1425921922!14145510!1 X-Originating-IP: [212.110.190.137] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 31722 invoked from network); 9 Mar 2015 17:25:23 -0000 Received: from benson.vm.bytemark.co.uk (HELO benson.vm.bytemark.co.uk) (212.110.190.137) by server-4.tower-206.messagelabs.com with AES256-SHA encrypted SMTP; 9 Mar 2015 17:25:23 -0000 Received: from [185.25.64.249] (helo=kazak) by benson.vm.bytemark.co.uk with esmtpsa (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.72) (envelope-from ) id 1YV1Qg-00007j-7K; Mon, 09 Mar 2015 17:25:22 +0000 Message-ID: <1425921921.21353.63.camel@xen.org> From: Ian Campbell To: Nathan March Date: Mon, 09 Mar 2015 17:25:21 +0000 In-Reply-To: <1a8a01d05a8c$d8466e00$88d34a00$@gt.net> References: <0df701d0553f$113ac830$33b05890$@gt.net> <1425399029.25940.51.camel@xen.org> <1a7c01d05a8a$ddb72b60$99258220$@gt.net> <1425921241.21353.60.camel@xen.org> <1a8a01d05a8c$d8466e00$88d34a00$@gt.net> X-Mailer: Evolution 3.12.9-1+b1 Mime-Version: 1.0 Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Pre-disclosure list application for gt.net X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org I've resent copies of XSA -119, -120, -123 and -124. The others are public already. See http://xenbits.xen.org/xsa/. Ian. On Mon, 2015-03-09 at 10:16 -0700, Nathan March wrote: > Hi Ian, > > Thanks for the quick response. Looks like there was a misconfig on that mail alias so that email bounced, I've fixed it up now. Could you please resend the XSA's? > > Thanks! > > - Nathan > > > -----Original Message----- > > From: Ian Campbell [mailto:ijc@xen.org] > > Sent: Monday, March 9, 2015 10:14 AM > > To: Nathan March > > Cc: predisclosure-applications@lists.xenproject.org > > Subject: Re: [Predisclosure-applications] Pre-disclosure list application for > > gt.net > > > > Hi Nathan, > > > > Our records show that your application was processed on Wednesday 4th > > and that you were added to the list at the time. It seems no manual > > notification was sent but you should have received an automated > > subscription notification to your noc@gt.net address, as well as copies of the > > (at the time) outstanding embargoed issues XSA-119,120,121,122 and 123. > > > > Did you not receive those copies? The XSA-121 copy had message-id > > and was dated "Wed, 4 Mar 2015 > > 12:25:23 +0000". > > > > Ian. > > > > On Mon, 2015-03-09 at 10:02 -0700, Nathan March wrote: > > > Hi, > > > > > > Just following up here to see if any additional info is required? Probably too > > late to make it on the list priority to the upcoming releases, but still would like > > to be on the list for future XSA's. > > > > > > Thanks! > > > > > > - Nathan > > > > > > > > > > -----Original Message----- > > > > From: Nathan March [mailto:nathan@gt.net] > > > > Sent: Tuesday, March 3, 2015 12:05 PM > > > > To: 'Ian Campbell' > > > > Cc: 'predisclosure-applications@lists.xenproject.org' > > > > Subject: RE: [Predisclosure-applications] Pre-disclosure list > > > > application for gt.net > > > > > > > > Hi Ian, > > > > > > > > The noc@gt.net address goes only to our me (noc manager) and our CEO. > > > > > > > > * Evidence of your status as a service/software provider: > > > > * Evidence of your status as a user/distributor of Xen: > > > > > > > > https://gt.net/cloud/ > > > > > > > > * Information about your handling of security problems: > > > > > > > > Security contact details are listed on both our contact + support pages: > > > > > > > > http://gt.net/contact/ > > > > http://gt.net/support/ > > > > > > > > - Nathan > > > > > > > > > -----Original Message----- > > > > > From: Ian Campbell [mailto:ijc@xen.org] > > > > > Sent: Tuesday, March 3, 2015 8:10 AM > > > > > To: Nathan March > > > > > Cc: predisclosure-applications@lists.xenproject.org > > > > > Subject: Re: [Predisclosure-applications] Pre-disclosure list > > > > > application for gt.net > > > > > > > > > > On Mon, 2015-03-02 at 15:17 -0800, Nathan March wrote: > > > > > > Would like to apply for access to the predisclosure list please. > > > > > > > > > > Hi, > > > > > > > > > > Thank you for your application. > > > > > > > > > > The security policy[0] requires "Link(s) to current public web > > > > > pages, belonging to your organisation," for each piece of > > > > > information, which you have not provided here for > > > > > * Evidence of your status as a service/software provider: > > > > > * Evidence of your status as a user/distributor of Xen: > > > > > * Information about your handling of security problems: > > > > > > > > > > Please can you provide these links so that we may continue to > > > > > process your application. Note that as regards pricing the policy > > > > > includes "or how to get a quote". > > > > > > > > > > Please could you also clarify the scope of your noc@ alias. It is > > > > > intended that predisclosures go to a small team dedicated to > > > > > handling incoming security issues, rather than a large team of system > > administrators. > > > > > > > > > > Thanks, > > > > > Ian. > > > > > > > > > > [0] http://www.xenproject.org/security-policy.html > > > > > > > > > _______________________________________________ > > > Predisclosure-applications mailing list > > > Predisclosure-applications@lists.xenproject.org > > > http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure- > > applications > > _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Mon Mar 09 17:25:27 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Mon, 09 Mar 2015 17:25:27 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YV1Ql-0000hM-7f; Mon, 09 Mar 2015 17:25:27 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YV1Qj-0000gZ-09 for predisclosure-applications@lists.xenproject.org; Mon, 09 Mar 2015 17:25:25 +0000 Received: from [85.158.139.211] by server-11.bemta-5.messagelabs.com id C3/75-02757-387DDF45; Mon, 09 Mar 2015 17:25:23 +0000 X-Env-Sender: ijc@xen.org X-Msg-Ref: server-4.tower-206.messagelabs.com!1425921922!14145510!1 X-Originating-IP: [212.110.190.137] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 31722 invoked from network); 9 Mar 2015 17:25:23 -0000 Received: from benson.vm.bytemark.co.uk (HELO benson.vm.bytemark.co.uk) (212.110.190.137) by server-4.tower-206.messagelabs.com with AES256-SHA encrypted SMTP; 9 Mar 2015 17:25:23 -0000 Received: from [185.25.64.249] (helo=kazak) by benson.vm.bytemark.co.uk with esmtpsa (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.72) (envelope-from ) id 1YV1Qg-00007j-7K; Mon, 09 Mar 2015 17:25:22 +0000 Message-ID: <1425921921.21353.63.camel@xen.org> From: Ian Campbell To: Nathan March Date: Mon, 09 Mar 2015 17:25:21 +0000 In-Reply-To: <1a8a01d05a8c$d8466e00$88d34a00$@gt.net> References: <0df701d0553f$113ac830$33b05890$@gt.net> <1425399029.25940.51.camel@xen.org> <1a7c01d05a8a$ddb72b60$99258220$@gt.net> <1425921241.21353.60.camel@xen.org> <1a8a01d05a8c$d8466e00$88d34a00$@gt.net> X-Mailer: Evolution 3.12.9-1+b1 Mime-Version: 1.0 Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Pre-disclosure list application for gt.net X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org I've resent copies of XSA -119, -120, -123 and -124. The others are public already. See http://xenbits.xen.org/xsa/. Ian. On Mon, 2015-03-09 at 10:16 -0700, Nathan March wrote: > Hi Ian, > > Thanks for the quick response. Looks like there was a misconfig on that mail alias so that email bounced, I've fixed it up now. Could you please resend the XSA's? > > Thanks! > > - Nathan > > > -----Original Message----- > > From: Ian Campbell [mailto:ijc@xen.org] > > Sent: Monday, March 9, 2015 10:14 AM > > To: Nathan March > > Cc: predisclosure-applications@lists.xenproject.org > > Subject: Re: [Predisclosure-applications] Pre-disclosure list application for > > gt.net > > > > Hi Nathan, > > > > Our records show that your application was processed on Wednesday 4th > > and that you were added to the list at the time. It seems no manual > > notification was sent but you should have received an automated > > subscription notification to your noc@gt.net address, as well as copies of the > > (at the time) outstanding embargoed issues XSA-119,120,121,122 and 123. > > > > Did you not receive those copies? The XSA-121 copy had message-id > > and was dated "Wed, 4 Mar 2015 > > 12:25:23 +0000". > > > > Ian. > > > > On Mon, 2015-03-09 at 10:02 -0700, Nathan March wrote: > > > Hi, > > > > > > Just following up here to see if any additional info is required? Probably too > > late to make it on the list priority to the upcoming releases, but still would like > > to be on the list for future XSA's. > > > > > > Thanks! > > > > > > - Nathan > > > > > > > > > > -----Original Message----- > > > > From: Nathan March [mailto:nathan@gt.net] > > > > Sent: Tuesday, March 3, 2015 12:05 PM > > > > To: 'Ian Campbell' > > > > Cc: 'predisclosure-applications@lists.xenproject.org' > > > > Subject: RE: [Predisclosure-applications] Pre-disclosure list > > > > application for gt.net > > > > > > > > Hi Ian, > > > > > > > > The noc@gt.net address goes only to our me (noc manager) and our CEO. > > > > > > > > * Evidence of your status as a service/software provider: > > > > * Evidence of your status as a user/distributor of Xen: > > > > > > > > https://gt.net/cloud/ > > > > > > > > * Information about your handling of security problems: > > > > > > > > Security contact details are listed on both our contact + support pages: > > > > > > > > http://gt.net/contact/ > > > > http://gt.net/support/ > > > > > > > > - Nathan > > > > > > > > > -----Original Message----- > > > > > From: Ian Campbell [mailto:ijc@xen.org] > > > > > Sent: Tuesday, March 3, 2015 8:10 AM > > > > > To: Nathan March > > > > > Cc: predisclosure-applications@lists.xenproject.org > > > > > Subject: Re: [Predisclosure-applications] Pre-disclosure list > > > > > application for gt.net > > > > > > > > > > On Mon, 2015-03-02 at 15:17 -0800, Nathan March wrote: > > > > > > Would like to apply for access to the predisclosure list please. > > > > > > > > > > Hi, > > > > > > > > > > Thank you for your application. > > > > > > > > > > The security policy[0] requires "Link(s) to current public web > > > > > pages, belonging to your organisation," for each piece of > > > > > information, which you have not provided here for > > > > > * Evidence of your status as a service/software provider: > > > > > * Evidence of your status as a user/distributor of Xen: > > > > > * Information about your handling of security problems: > > > > > > > > > > Please can you provide these links so that we may continue to > > > > > process your application. Note that as regards pricing the policy > > > > > includes "or how to get a quote". > > > > > > > > > > Please could you also clarify the scope of your noc@ alias. It is > > > > > intended that predisclosures go to a small team dedicated to > > > > > handling incoming security issues, rather than a large team of system > > administrators. > > > > > > > > > > Thanks, > > > > > Ian. > > > > > > > > > > [0] http://www.xenproject.org/security-policy.html > > > > > > > > > _______________________________________________ > > > Predisclosure-applications mailing list > > > Predisclosure-applications@lists.xenproject.org > > > http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure- > > applications > > _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Tue Mar 10 10:12:27 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Tue, 10 Mar 2015 10:12:27 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YVH9H-0001X7-N9; Tue, 10 Mar 2015 10:12:27 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YVH9F-0001WR-Ip for predisclosure-applications@lists.xenproject.org; Tue, 10 Mar 2015 10:12:25 +0000 Received: from [85.158.137.68] by server-1.bemta-3.messagelabs.com id 1A/ED-10942-883CEF45; Tue, 10 Mar 2015 10:12:24 +0000 X-Env-Sender: ijc@xen.org X-Msg-Ref: server-12.tower-31.messagelabs.com!1425982344!14617096!1 X-Originating-IP: [212.110.190.137] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 7546 invoked from network); 10 Mar 2015 10:12:24 -0000 Received: from benson.vm.bytemark.co.uk (HELO benson.vm.bytemark.co.uk) (212.110.190.137) by server-12.tower-31.messagelabs.com with AES256-SHA encrypted SMTP; 10 Mar 2015 10:12:24 -0000 Received: from [185.25.64.249] (helo=kazak) by benson.vm.bytemark.co.uk with esmtpsa (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.72) (envelope-from ) id 1YVH9D-00024d-DZ; Tue, 10 Mar 2015 10:12:23 +0000 Message-ID: <1425982341.21353.83.camel@xen.org> From: Ian Campbell To: Tobias Heinlein Date: Tue, 10 Mar 2015 10:12:21 +0000 In-Reply-To: <54FD9269.5070303@gentoo.org> References: <54FD9269.5070303@gentoo.org> X-Mailer: Evolution 3.12.9-1+b1 Mime-Version: 1.0 Cc: predisclosure-applications@lists.xenproject.org, security@gentoo.org Subject: Re: [Predisclosure-applications] Gentoo pre-disclosure application X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org On Mon, 2015-03-09 at 13:30 +0100, Tobias Heinlein wrote: > Please use package-security-xen@gentoo.org for the pre-disclosure list. Done. You should have received copies of these currently embargoed issues: XSA-119, -120, -123 and -124. _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Tue Mar 10 10:12:27 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Tue, 10 Mar 2015 10:12:27 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YVH9H-0001X7-N9; Tue, 10 Mar 2015 10:12:27 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YVH9F-0001WR-Ip for predisclosure-applications@lists.xenproject.org; Tue, 10 Mar 2015 10:12:25 +0000 Received: from [85.158.137.68] by server-1.bemta-3.messagelabs.com id 1A/ED-10942-883CEF45; Tue, 10 Mar 2015 10:12:24 +0000 X-Env-Sender: ijc@xen.org X-Msg-Ref: server-12.tower-31.messagelabs.com!1425982344!14617096!1 X-Originating-IP: [212.110.190.137] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 7546 invoked from network); 10 Mar 2015 10:12:24 -0000 Received: from benson.vm.bytemark.co.uk (HELO benson.vm.bytemark.co.uk) (212.110.190.137) by server-12.tower-31.messagelabs.com with AES256-SHA encrypted SMTP; 10 Mar 2015 10:12:24 -0000 Received: from [185.25.64.249] (helo=kazak) by benson.vm.bytemark.co.uk with esmtpsa (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.72) (envelope-from ) id 1YVH9D-00024d-DZ; Tue, 10 Mar 2015 10:12:23 +0000 Message-ID: <1425982341.21353.83.camel@xen.org> From: Ian Campbell To: Tobias Heinlein Date: Tue, 10 Mar 2015 10:12:21 +0000 In-Reply-To: <54FD9269.5070303@gentoo.org> References: <54FD9269.5070303@gentoo.org> X-Mailer: Evolution 3.12.9-1+b1 Mime-Version: 1.0 Cc: predisclosure-applications@lists.xenproject.org, security@gentoo.org Subject: Re: [Predisclosure-applications] Gentoo pre-disclosure application X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org On Mon, 2015-03-09 at 13:30 +0100, Tobias Heinlein wrote: > Please use package-security-xen@gentoo.org for the pre-disclosure list. Done. You should have received copies of these currently embargoed issues: XSA-119, -120, -123 and -124. _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Fri Mar 13 12:23:51 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Fri, 13 Mar 2015 12:23:51 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YWOd5-0007Gs-0g; Fri, 13 Mar 2015 12:23:51 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YWOd3-0007Gl-BS for predisclosure-applications@lists.xenproject.org; Fri, 13 Mar 2015 12:23:49 +0000 Received: from [193.109.254.147] by server-16.bemta-14.messagelabs.com id 6D/C4-28243-4D6D2055; Fri, 13 Mar 2015 12:23:48 +0000 X-Env-Sender: spipping@wavecon.de X-Msg-Ref: server-6.tower-27.messagelabs.com!1426249427!12591132!1 X-Originating-IP: [185.22.221.185] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 11816 invoked from network); 13 Mar 2015 12:23:47 -0000 Received: from wv-mail-smtp2.wavecloud.de (HELO mail.xchangecloud.eu) (185.22.221.185) by server-6.tower-27.messagelabs.com with DHE-RSA-AES256-SHA encrypted SMTP; 13 Mar 2015 12:23:47 -0000 Received: from virenmassaker.xchangecloud.eu (localhost [127.0.0.1]) by postapocalypse.xchangecloud.eu (Postfix) with ESMTP id 9FF75206EF for ; Fri, 13 Mar 2015 13:23:46 +0100 (CET) X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on wv-mail-smtp2 X-Spam-Level: X-Spam-Status: No, score=-1.0 required=5.0 tests=ALL_TRUSTED,SHORTCIRCUIT X-Spam-Pyzor: X-Spam-Score: -1.0/5.0 X-Spam-Report: * -0.0 SHORTCIRCUIT Not all rules were run, due to a shortcircuited rule * -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP Received: from [192.168.42.167] (berlin.wavecon.de [217.92.161.189]) (Authenticated sender: spipping@wavecon.de) by mail.xchangecloud.eu (Postfix) with ESMTPSA id 84114205D8 for ; Fri, 13 Mar 2015 13:23:46 +0100 (CET) Message-ID: <5502D773.1010706@wavecon.de> Date: Fri, 13 Mar 2015 13:26:27 +0100 From: Sebastian Pipping User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Icedove/31.5.0 MIME-Version: 1.0 To: predisclosure-applications@lists.xenproject.org 'X-AV-Checked: Binford Spam- und Virenmassakermaschine 6000 next generation @ Fri Mar 13 13:23:46 2015 +0100 (CET)' X-Envelope-From: Subject: [Predisclosure-applications] Xen predisclosure application: Wavecon GmbH X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org Hello! I am hereby sending an application for the predisclosure list on behalf of Wavecon GmbH, a public cloud and managed hosting company based in Germany powered by Xen technology. > The name of your organization Wavecon GmbH https://www.wavecon.de/ > Domain name(s) which you use to provide Xen software/services *.wavecloud.de / https://control.wavecon.de > A brief description of why you fit the criteria Wavecon does not fit the 300k definition of "large-scale users" but is a public hosting provider with >100 Xen hypervisors. The core service of the company lies in providing hosting based on Xen to third parties. Most employees work with services powered by Xen, some people work on development of Xen orchestration software full-time. Wavecon's data center, infrastructure and service are certified according to ISO 27001. To Wavecon, release of vulnerabilities in Xen may or may not require reboots of some to all hypervisors, so Xen vulnerabilities have a significant impact on our day-to-day operations. > If not all of your products/services use Xen, a list of (some of) > your products/services (or categories thereof) which do. Xen is the only virtualization technology used in production at Wavecon. > Link(s) to current public web pages, belonging to your organisation, > for each of following pieces of information: > Evidence of your status as a service/software provider: > If you are a public hosting provider, your public rates or how to > get a quote Please refer to https://www.wavecon.de/download/Preisliste_Wavecon.pdf at https://www.wavecon.de/impressum.html for quotes. The same page is pointing to sales(at)wavecon(dot)de for custom quotes. > If you are a software provider, how your software can be downloaded > or purchased n/a > If you are an open-source project, a mailing list archive and/or > version control repository, with active development n/a > Evidence of your status as a user/distributor of Xen: > Statements about, or descriptions of, your eligible production > services or released software, from which it is immediately evident > that they use Xen. Please see "Mit Hilfe von Xen [..]" at https://www.wavecon.de/dienstleistungen.html > Information about your handling of security problems: > Your invitation to members of the public, who discover security > problems with your products/services, to report them in confidence > to you; Please see "Please report security issues [..]" at https://www.wavecon.de/impressum.html . > Specifically, the contact information (email addresses or other > contact instructions) which such a member of the public should use. security(at)wavecon(dot)de > A statement to the effect that you have read this policy and agree to > abide by the terms for inclusion in the list, specifically the > requirements to regarding confidentiality during an embargo period We have read the policy at http://www.xenproject.org/security-policy.html and agree to its terms as retrieved 2015-03-10: * Cemil Degirmenci * Sebastian Pipping * Wolodja Wentland > The single (non-personal) email alias you wish added to the > predisclosure list. security(at)wavecon(dot)de Many thanks for your consideration. Best, Sebastian Pipping _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Fri Mar 13 12:23:51 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Fri, 13 Mar 2015 12:23:51 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YWOd5-0007Gs-0g; Fri, 13 Mar 2015 12:23:51 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YWOd3-0007Gl-BS for predisclosure-applications@lists.xenproject.org; Fri, 13 Mar 2015 12:23:49 +0000 Received: from [193.109.254.147] by server-16.bemta-14.messagelabs.com id 6D/C4-28243-4D6D2055; Fri, 13 Mar 2015 12:23:48 +0000 X-Env-Sender: spipping@wavecon.de X-Msg-Ref: server-6.tower-27.messagelabs.com!1426249427!12591132!1 X-Originating-IP: [185.22.221.185] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 11816 invoked from network); 13 Mar 2015 12:23:47 -0000 Received: from wv-mail-smtp2.wavecloud.de (HELO mail.xchangecloud.eu) (185.22.221.185) by server-6.tower-27.messagelabs.com with DHE-RSA-AES256-SHA encrypted SMTP; 13 Mar 2015 12:23:47 -0000 Received: from virenmassaker.xchangecloud.eu (localhost [127.0.0.1]) by postapocalypse.xchangecloud.eu (Postfix) with ESMTP id 9FF75206EF for ; Fri, 13 Mar 2015 13:23:46 +0100 (CET) X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on wv-mail-smtp2 X-Spam-Level: X-Spam-Status: No, score=-1.0 required=5.0 tests=ALL_TRUSTED,SHORTCIRCUIT X-Spam-Pyzor: X-Spam-Score: -1.0/5.0 X-Spam-Report: * -0.0 SHORTCIRCUIT Not all rules were run, due to a shortcircuited rule * -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP Received: from [192.168.42.167] (berlin.wavecon.de [217.92.161.189]) (Authenticated sender: spipping@wavecon.de) by mail.xchangecloud.eu (Postfix) with ESMTPSA id 84114205D8 for ; Fri, 13 Mar 2015 13:23:46 +0100 (CET) Message-ID: <5502D773.1010706@wavecon.de> Date: Fri, 13 Mar 2015 13:26:27 +0100 From: Sebastian Pipping User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Icedove/31.5.0 MIME-Version: 1.0 To: predisclosure-applications@lists.xenproject.org 'X-AV-Checked: Binford Spam- und Virenmassakermaschine 6000 next generation @ Fri Mar 13 13:23:46 2015 +0100 (CET)' X-Envelope-From: Subject: [Predisclosure-applications] Xen predisclosure application: Wavecon GmbH X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org Hello! I am hereby sending an application for the predisclosure list on behalf of Wavecon GmbH, a public cloud and managed hosting company based in Germany powered by Xen technology. > The name of your organization Wavecon GmbH https://www.wavecon.de/ > Domain name(s) which you use to provide Xen software/services *.wavecloud.de / https://control.wavecon.de > A brief description of why you fit the criteria Wavecon does not fit the 300k definition of "large-scale users" but is a public hosting provider with >100 Xen hypervisors. The core service of the company lies in providing hosting based on Xen to third parties. Most employees work with services powered by Xen, some people work on development of Xen orchestration software full-time. Wavecon's data center, infrastructure and service are certified according to ISO 27001. To Wavecon, release of vulnerabilities in Xen may or may not require reboots of some to all hypervisors, so Xen vulnerabilities have a significant impact on our day-to-day operations. > If not all of your products/services use Xen, a list of (some of) > your products/services (or categories thereof) which do. Xen is the only virtualization technology used in production at Wavecon. > Link(s) to current public web pages, belonging to your organisation, > for each of following pieces of information: > Evidence of your status as a service/software provider: > If you are a public hosting provider, your public rates or how to > get a quote Please refer to https://www.wavecon.de/download/Preisliste_Wavecon.pdf at https://www.wavecon.de/impressum.html for quotes. The same page is pointing to sales(at)wavecon(dot)de for custom quotes. > If you are a software provider, how your software can be downloaded > or purchased n/a > If you are an open-source project, a mailing list archive and/or > version control repository, with active development n/a > Evidence of your status as a user/distributor of Xen: > Statements about, or descriptions of, your eligible production > services or released software, from which it is immediately evident > that they use Xen. Please see "Mit Hilfe von Xen [..]" at https://www.wavecon.de/dienstleistungen.html > Information about your handling of security problems: > Your invitation to members of the public, who discover security > problems with your products/services, to report them in confidence > to you; Please see "Please report security issues [..]" at https://www.wavecon.de/impressum.html . > Specifically, the contact information (email addresses or other > contact instructions) which such a member of the public should use. security(at)wavecon(dot)de > A statement to the effect that you have read this policy and agree to > abide by the terms for inclusion in the list, specifically the > requirements to regarding confidentiality during an embargo period We have read the policy at http://www.xenproject.org/security-policy.html and agree to its terms as retrieved 2015-03-10: * Cemil Degirmenci * Sebastian Pipping * Wolodja Wentland > The single (non-personal) email alias you wish added to the > predisclosure list. security(at)wavecon(dot)de Many thanks for your consideration. Best, Sebastian Pipping _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Fri Mar 13 16:43:19 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Fri, 13 Mar 2015 16:43:19 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YWSgA-0007Cm-W5; Fri, 13 Mar 2015 16:43:18 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YWSgA-0007Cg-2q for predisclosure-applications@lists.xenproject.org; Fri, 13 Mar 2015 16:43:18 +0000 Received: from [193.109.254.147] by server-4.bemta-14.messagelabs.com id 72/B8-24920-5A313055; Fri, 13 Mar 2015 16:43:17 +0000 X-Env-Sender: ijc@hellion.org.uk X-Msg-Ref: server-3.tower-27.messagelabs.com!1426264996!12587456!1 X-Originating-IP: [212.110.190.137] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 14172 invoked from network); 13 Mar 2015 16:43:16 -0000 Received: from benson.vm.bytemark.co.uk (HELO benson.vm.bytemark.co.uk) (212.110.190.137) by server-3.tower-27.messagelabs.com with DHE-RSA-AES128-SHA encrypted SMTP; 13 Mar 2015 16:43:16 -0000 Received: from [185.25.64.249] (helo=kazak) by benson.vm.bytemark.co.uk with esmtpsa (TLS1.2:RSA_AES_128_CBC_SHA1:128) (Exim 4.80) (envelope-from ) id 1YWSg7-0007P9-Rh; Fri, 13 Mar 2015 16:43:15 +0000 Message-ID: <1426264994.32572.182.camel@xen.org> From: Ian Campbell To: Sebastian Pipping Date: Fri, 13 Mar 2015 16:43:14 +0000 In-Reply-To: <5502D773.1010706@wavecon.de> References: <5502D773.1010706@wavecon.de> X-Mailer: Evolution 3.12.9-1+b1 Mime-Version: 1.0 Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Xen predisclosure application: Wavecon GmbH X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org On Fri, 2015-03-13 at 13:26 +0100, Sebastian Pipping wrote: > > A brief description of why you fit the criteria > > Wavecon does not fit the 300k definition of "large-scale users" but is > a public hosting provider with >100 Xen hypervisors. My reading of the security policy (and other members of the Xen Project Security team agree) is that this 300K number applies only to applications by "Large-scale organisational users of Xen" whereas you are applying as a "Public hosting provider". Therefore your application appears to all be in order. > > The single (non-personal) email alias you wish added to the > > predisclosure list. > > security(at)wavecon(dot)de Added. You should have received a subscription notification. There are no currently embargoed advisories so I have not sent you any copies of anything. Ian. _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Fri Mar 13 16:43:19 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Fri, 13 Mar 2015 16:43:19 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YWSgA-0007Cm-W5; Fri, 13 Mar 2015 16:43:18 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YWSgA-0007Cg-2q for predisclosure-applications@lists.xenproject.org; Fri, 13 Mar 2015 16:43:18 +0000 Received: from [193.109.254.147] by server-4.bemta-14.messagelabs.com id 72/B8-24920-5A313055; Fri, 13 Mar 2015 16:43:17 +0000 X-Env-Sender: ijc@hellion.org.uk X-Msg-Ref: server-3.tower-27.messagelabs.com!1426264996!12587456!1 X-Originating-IP: [212.110.190.137] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 14172 invoked from network); 13 Mar 2015 16:43:16 -0000 Received: from benson.vm.bytemark.co.uk (HELO benson.vm.bytemark.co.uk) (212.110.190.137) by server-3.tower-27.messagelabs.com with DHE-RSA-AES128-SHA encrypted SMTP; 13 Mar 2015 16:43:16 -0000 Received: from [185.25.64.249] (helo=kazak) by benson.vm.bytemark.co.uk with esmtpsa (TLS1.2:RSA_AES_128_CBC_SHA1:128) (Exim 4.80) (envelope-from ) id 1YWSg7-0007P9-Rh; Fri, 13 Mar 2015 16:43:15 +0000 Message-ID: <1426264994.32572.182.camel@xen.org> From: Ian Campbell To: Sebastian Pipping Date: Fri, 13 Mar 2015 16:43:14 +0000 In-Reply-To: <5502D773.1010706@wavecon.de> References: <5502D773.1010706@wavecon.de> X-Mailer: Evolution 3.12.9-1+b1 Mime-Version: 1.0 Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Xen predisclosure application: Wavecon GmbH X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org On Fri, 2015-03-13 at 13:26 +0100, Sebastian Pipping wrote: > > A brief description of why you fit the criteria > > Wavecon does not fit the 300k definition of "large-scale users" but is > a public hosting provider with >100 Xen hypervisors. My reading of the security policy (and other members of the Xen Project Security team agree) is that this 300K number applies only to applications by "Large-scale organisational users of Xen" whereas you are applying as a "Public hosting provider". Therefore your application appears to all be in order. > > The single (non-personal) email alias you wish added to the > > predisclosure list. > > security(at)wavecon(dot)de Added. You should have received a subscription notification. There are no currently embargoed advisories so I have not sent you any copies of anything. Ian. _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Fri Mar 13 17:48:31 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Fri, 13 Mar 2015 17:48:31 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YWThH-0003R7-Az; Fri, 13 Mar 2015 17:48:31 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YWThF-0003QB-OO for predisclosure-applications@lists.xenproject.org; Fri, 13 Mar 2015 17:48:29 +0000 Received: from [193.109.254.147] by server-14.bemta-14.messagelabs.com id 6B/E2-06842-DE223055; Fri, 13 Mar 2015 17:48:29 +0000 X-Env-Sender: spipping@wavecon.de X-Msg-Ref: server-6.tower-27.messagelabs.com!1426268908!12689208!1 X-Originating-IP: [185.22.221.185] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 9489 invoked from network); 13 Mar 2015 17:48:28 -0000 Received: from wv-mail-smtp2.wavecloud.de (HELO mail.xchangecloud.eu) (185.22.221.185) by server-6.tower-27.messagelabs.com with DHE-RSA-AES256-SHA encrypted SMTP; 13 Mar 2015 17:48:28 -0000 Received: from virenmassaker.xchangecloud.eu (localhost [127.0.0.1]) by postapocalypse.xchangecloud.eu (Postfix) with ESMTP id 6F2A820C3A for ; Fri, 13 Mar 2015 18:48:27 +0100 (CET) X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on wv-mail-smtp2 X-Spam-Level: X-Spam-Status: No, score=-1.0 required=5.0 tests=ALL_TRUSTED,SHORTCIRCUIT X-Spam-Pyzor: X-Spam-Score: -1.0/5.0 X-Spam-Report: * -0.0 SHORTCIRCUIT Not all rules were run, due to a shortcircuited rule * -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP Received: from [192.168.42.168] (berlin.wavecon.de [217.92.161.189]) (Authenticated sender: spipping@wavecon.de) by mail.xchangecloud.eu (Postfix) with ESMTPSA id 5388320C30 for ; Fri, 13 Mar 2015 18:48:27 +0100 (CET) Message-ID: <5503238C.2090009@wavecon.de> Date: Fri, 13 Mar 2015 18:51:08 +0100 From: Sebastian Pipping User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Icedove/31.5.0 MIME-Version: 1.0 To: predisclosure-applications@lists.xenproject.org References: <5502D773.1010706@wavecon.de> <1426264994.32572.182.camel@xen.org> In-Reply-To: <1426264994.32572.182.camel@xen.org> 'X-AV-Checked: Binford Spam- und Virenmassakermaschine 6000 next generation @ Fri Mar 13 18:48:27 2015 +0100 (CET)' X-Envelope-From: Subject: Re: [Predisclosure-applications] Xen predisclosure application: Wavecon GmbH X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org On 03/13/2015 05:43 PM, Ian Campbell wrote: > Added. You should have received a subscription notification. There are > no currently embargoed advisories so I have not sent you any copies of > anything. Many thanks! Best, Sebastian Pipping _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Fri Mar 13 17:48:31 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Fri, 13 Mar 2015 17:48:31 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YWThH-0003R7-Az; Fri, 13 Mar 2015 17:48:31 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YWThF-0003QB-OO for predisclosure-applications@lists.xenproject.org; Fri, 13 Mar 2015 17:48:29 +0000 Received: from [193.109.254.147] by server-14.bemta-14.messagelabs.com id 6B/E2-06842-DE223055; Fri, 13 Mar 2015 17:48:29 +0000 X-Env-Sender: spipping@wavecon.de X-Msg-Ref: server-6.tower-27.messagelabs.com!1426268908!12689208!1 X-Originating-IP: [185.22.221.185] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 9489 invoked from network); 13 Mar 2015 17:48:28 -0000 Received: from wv-mail-smtp2.wavecloud.de (HELO mail.xchangecloud.eu) (185.22.221.185) by server-6.tower-27.messagelabs.com with DHE-RSA-AES256-SHA encrypted SMTP; 13 Mar 2015 17:48:28 -0000 Received: from virenmassaker.xchangecloud.eu (localhost [127.0.0.1]) by postapocalypse.xchangecloud.eu (Postfix) with ESMTP id 6F2A820C3A for ; Fri, 13 Mar 2015 18:48:27 +0100 (CET) X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on wv-mail-smtp2 X-Spam-Level: X-Spam-Status: No, score=-1.0 required=5.0 tests=ALL_TRUSTED,SHORTCIRCUIT X-Spam-Pyzor: X-Spam-Score: -1.0/5.0 X-Spam-Report: * -0.0 SHORTCIRCUIT Not all rules were run, due to a shortcircuited rule * -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP Received: from [192.168.42.168] (berlin.wavecon.de [217.92.161.189]) (Authenticated sender: spipping@wavecon.de) by mail.xchangecloud.eu (Postfix) with ESMTPSA id 5388320C30 for ; Fri, 13 Mar 2015 18:48:27 +0100 (CET) Message-ID: <5503238C.2090009@wavecon.de> Date: Fri, 13 Mar 2015 18:51:08 +0100 From: Sebastian Pipping User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Icedove/31.5.0 MIME-Version: 1.0 To: predisclosure-applications@lists.xenproject.org References: <5502D773.1010706@wavecon.de> <1426264994.32572.182.camel@xen.org> In-Reply-To: <1426264994.32572.182.camel@xen.org> 'X-AV-Checked: Binford Spam- und Virenmassakermaschine 6000 next generation @ Fri Mar 13 18:48:27 2015 +0100 (CET)' X-Envelope-From: Subject: Re: [Predisclosure-applications] Xen predisclosure application: Wavecon GmbH X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org On 03/13/2015 05:43 PM, Ian Campbell wrote: > Added. You should have received a subscription notification. There are > no currently embargoed advisories so I have not sent you any copies of > anything. Many thanks! Best, Sebastian Pipping _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Mon Mar 16 20:11:18 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Mon, 16 Mar 2015 20:11:18 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YXbM6-0002tf-DY; Mon, 16 Mar 2015 20:11:18 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YXbM5-0002tV-Ka for predisclosure-applications@lists.xenproject.org; Mon, 16 Mar 2015 20:11:17 +0000 Received: from [193.109.254.147] by server-3.bemta-14.messagelabs.com id D9/0D-07844-4E837055; Mon, 16 Mar 2015 20:11:16 +0000 X-Env-Sender: simon@bromium.com X-Msg-Ref: server-10.tower-27.messagelabs.com!1426536673!13425819!1 X-Originating-IP: [209.85.218.54] X-SpamReason: No, hits=0.5 required=7.0 tests=BODY_RANDOM_LONG, HTML_MESSAGE X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 24750 invoked from network); 16 Mar 2015 20:11:14 -0000 Received: from mail-oi0-f54.google.com (HELO mail-oi0-f54.google.com) (209.85.218.54) by server-10.tower-27.messagelabs.com with RC4-SHA encrypted SMTP; 16 Mar 2015 20:11:14 -0000 Received: by oiag65 with SMTP id g65so47905253oia.2 for ; Mon, 16 Mar 2015 13:11:13 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:mime-version:thread-index:date:message-id :subject:to:cc:content-type; bh=qEswU2JbxTZ6wFlImbH7z0J8iOgd5OAW6/BRcDXuH4E=; b=U4T6sLdvo0VPuBpqKOmGOhz3a4CkQ1z8Ie17O+hSfNbeCyQnSuaofQ6JdbH+l0f2m6 bqnLg0P5VenknMkogLKuMJyqbXcUPZKXz82XEdBTa2cGHIBqOBPE9cYFYkNCPHTFP3+A YTcumE5VxsAEzpteftb8gM7ZTL3oujbwVlx3/cHIkRERJYmqPchL10njKvUuEzFit4Zj X//kBhoRmhfFAeBd1IqZCWV/EH0BoOW9jlMFsR2Br2qKRHt8JhjsDZrW/HOeqPvp+DeV CCb5CrHoviMvFedd744b1FP0FevEQf524z0J0KGCg676Nb4Qsiv0jYgajz2rONZLzClj jYRg== X-Gm-Message-State: ALoCoQm7VkcuVc4cBmVV/0pLHzR5mwC86dFjnjCf6pEVE3K/27SkAdbTuiWh7okMhAu48AcB0a8u X-Received: by 10.202.77.198 with SMTP id a189mr8864892oib.49.1426536673207; Mon, 16 Mar 2015 13:11:13 -0700 (PDT) From: Simon Crosby MIME-Version: 1.0 X-Mailer: Microsoft Outlook 15.0 Thread-Index: AdBgJU5mXo3wgwRqRbC8wnykug4ZQA== Date: Mon, 16 Mar 2015 13:11:12 -0700 Message-ID: To: predisclosure-applications@lists.xenproject.org Cc: security@bromium.com, xen-predisclosure-advisory@bromium.com Subject: [Predisclosure-applications] Application for addition to Xen predisclosure list. X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============1803566510698098919==" Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org --===============1803566510698098919== Content-Type: multipart/alternative; boundary=001a1134fdc8aa7cc105116d733c --001a1134fdc8aa7cc105116d733c Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Applicant: Bromium, Inc. Domain Names: bromium.com, bromium.co.uk Detail: =C2=B7 Bromium delivers endpoint security solutions that use a Xen-= based hypervisor, called a Microvisor , to isolate untrusted execution. The security of our customers=E2=80=99 en= dpoints depends on the security of the Microvisor, and therefore on Xen. As a security vendor Bromium needs to rapidly assess vulnerabilities discovered in Xen, to deliver timely product updates/patches to its customers. Bromi= um labs actively hardens our Xen-based codebase and conducts security research on hardware , OS and hypervisor security. Bromium reports all vulnerabilities to relevant vendors / communities in accordance with the principle of responsible disclosure. =C2=B7 A Wikipedia page for Bromium describes the Microvisor . Additional public statements on our use of Xen can be found here and here , and on our product pages: o Bromium vSentry uses the Microvisor to isolate untrusted execution. o Bromium LAVA uses vSentry to detect malware. Our products are not available for download. =C2=B7 Bromium operates a security mailing list for use by its customers, at security@bromium.com. Bromium is cognizant of the responsibility and the legal and procedural requirements involved with membership of the Xen Project pre-disclosure list. We have read this policy and agree to it, including its terms of confidentiality. We request that you add xen-predisclosure-advisory@bromium.com to the Xen Project pre-disclosure list. Sincerely, Bromium --001a1134fdc8aa7cc105116d733c Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable <= div class=3D"WordSection1">

Applicant: Bromium, Inc.

Domain= Names: =C2=A0bromium.com, bromium.co.uk

Detail= :

=C2=B7=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0 Bromium delive= rs endpoint security solutions that use a Xen-based hypervisor, called a Microvisor, =C2=A0to is= olate untrusted execution.=C2=A0 The security of our customers=E2=80=99 end= points depends on the security of the Microvisor, and therefore on Xen.=C2= =A0=C2=A0 As a security vendor Bromium needs to rapidly assess vulnerabilit= ies discovered in Xen, to deliver timely product updates/patches to its cus= tomers. =C2=A0=C2=A0Bromium labs a= ctively hardens our Xen-based codebase and conducts security research on hardware, OS and h= ypervisor security.=C2=A0 Bromium reports all vulnerabilities to releva= nt vendors / communities in accordance with the principle of responsible di= sclosure.

=C2=B7=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 A Wikipedia page for Bromium describes t= he Microvisor. Additi= onal public statements on our use of Xen can be found he= re and here, and on our pro= duct pages:

= o=C2=A0=C2=A0=C2=A0 = Bromium vSentry uses the Microvisor to is= olate untrusted execution.=C2=A0

o=C2=A0=C2=A0=C2=A0 Bro= mium LAVA uses vS= entry to detect malware. =C2=A0=C2=A0

Our products are not available for download.

<= span style>=C2=B7=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Bromium operates a security mailing list for use by its = customers, at s= ecurity@bromium.com.=C2=A0=C2=A0 <= /span>

Bromium is cognizant = of the responsibility and the legal and procedural requirements involved wi= th membership of the Xen Project pre-disclosure list.=C2=A0=C2=A0 We have r= ead this policy and agree to it, including its terms of confidentiality.

We request that you add= xen-predisclosur= e-advisory@bromium.com to the Xen Project pre-disclosure list.

Sincerely,

Bromium

--001a1134fdc8aa7cc105116d733c-- --===============1803566510698098919== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications --===============1803566510698098919==-- From predisclosure-applications-bounces@lists.xenproject.org Mon Mar 16 20:11:18 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Mon, 16 Mar 2015 20:11:18 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YXbM6-0002tf-DY; Mon, 16 Mar 2015 20:11:18 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YXbM5-0002tV-Ka for predisclosure-applications@lists.xenproject.org; Mon, 16 Mar 2015 20:11:17 +0000 Received: from [193.109.254.147] by server-3.bemta-14.messagelabs.com id D9/0D-07844-4E837055; Mon, 16 Mar 2015 20:11:16 +0000 X-Env-Sender: simon@bromium.com X-Msg-Ref: server-10.tower-27.messagelabs.com!1426536673!13425819!1 X-Originating-IP: [209.85.218.54] X-SpamReason: No, hits=0.5 required=7.0 tests=BODY_RANDOM_LONG, HTML_MESSAGE X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 24750 invoked from network); 16 Mar 2015 20:11:14 -0000 Received: from mail-oi0-f54.google.com (HELO mail-oi0-f54.google.com) (209.85.218.54) by server-10.tower-27.messagelabs.com with RC4-SHA encrypted SMTP; 16 Mar 2015 20:11:14 -0000 Received: by oiag65 with SMTP id g65so47905253oia.2 for ; Mon, 16 Mar 2015 13:11:13 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:mime-version:thread-index:date:message-id :subject:to:cc:content-type; bh=qEswU2JbxTZ6wFlImbH7z0J8iOgd5OAW6/BRcDXuH4E=; b=U4T6sLdvo0VPuBpqKOmGOhz3a4CkQ1z8Ie17O+hSfNbeCyQnSuaofQ6JdbH+l0f2m6 bqnLg0P5VenknMkogLKuMJyqbXcUPZKXz82XEdBTa2cGHIBqOBPE9cYFYkNCPHTFP3+A YTcumE5VxsAEzpteftb8gM7ZTL3oujbwVlx3/cHIkRERJYmqPchL10njKvUuEzFit4Zj X//kBhoRmhfFAeBd1IqZCWV/EH0BoOW9jlMFsR2Br2qKRHt8JhjsDZrW/HOeqPvp+DeV CCb5CrHoviMvFedd744b1FP0FevEQf524z0J0KGCg676Nb4Qsiv0jYgajz2rONZLzClj jYRg== X-Gm-Message-State: ALoCoQm7VkcuVc4cBmVV/0pLHzR5mwC86dFjnjCf6pEVE3K/27SkAdbTuiWh7okMhAu48AcB0a8u X-Received: by 10.202.77.198 with SMTP id a189mr8864892oib.49.1426536673207; Mon, 16 Mar 2015 13:11:13 -0700 (PDT) From: Simon Crosby MIME-Version: 1.0 X-Mailer: Microsoft Outlook 15.0 Thread-Index: AdBgJU5mXo3wgwRqRbC8wnykug4ZQA== Date: Mon, 16 Mar 2015 13:11:12 -0700 Message-ID: To: predisclosure-applications@lists.xenproject.org Cc: security@bromium.com, xen-predisclosure-advisory@bromium.com Subject: [Predisclosure-applications] Application for addition to Xen predisclosure list. X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============1803566510698098919==" Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org --===============1803566510698098919== Content-Type: multipart/alternative; boundary=001a1134fdc8aa7cc105116d733c --001a1134fdc8aa7cc105116d733c Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Applicant: Bromium, Inc. Domain Names: bromium.com, bromium.co.uk Detail: =C2=B7 Bromium delivers endpoint security solutions that use a Xen-= based hypervisor, called a Microvisor , to isolate untrusted execution. The security of our customers=E2=80=99 en= dpoints depends on the security of the Microvisor, and therefore on Xen. As a security vendor Bromium needs to rapidly assess vulnerabilities discovered in Xen, to deliver timely product updates/patches to its customers. Bromi= um labs actively hardens our Xen-based codebase and conducts security research on hardware , OS and hypervisor security. Bromium reports all vulnerabilities to relevant vendors / communities in accordance with the principle of responsible disclosure. =C2=B7 A Wikipedia page for Bromium describes the Microvisor . Additional public statements on our use of Xen can be found here and here , and on our product pages: o Bromium vSentry uses the Microvisor to isolate untrusted execution. o Bromium LAVA uses vSentry to detect malware. Our products are not available for download. =C2=B7 Bromium operates a security mailing list for use by its customers, at security@bromium.com. Bromium is cognizant of the responsibility and the legal and procedural requirements involved with membership of the Xen Project pre-disclosure list. We have read this policy and agree to it, including its terms of confidentiality. We request that you add xen-predisclosure-advisory@bromium.com to the Xen Project pre-disclosure list. Sincerely, Bromium --001a1134fdc8aa7cc105116d733c Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable <= div class=3D"WordSection1">

Applicant: Bromium, Inc.

Domain= Names: =C2=A0bromium.com, bromium.co.uk

Detail= :

=C2=B7=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0 Bromium delive= rs endpoint security solutions that use a Xen-based hypervisor, called a Microvisor, =C2=A0to is= olate untrusted execution.=C2=A0 The security of our customers=E2=80=99 end= points depends on the security of the Microvisor, and therefore on Xen.=C2= =A0=C2=A0 As a security vendor Bromium needs to rapidly assess vulnerabilit= ies discovered in Xen, to deliver timely product updates/patches to its cus= tomers. =C2=A0=C2=A0Bromium labs a= ctively hardens our Xen-based codebase and conducts security research on hardware, OS and h= ypervisor security.=C2=A0 Bromium reports all vulnerabilities to releva= nt vendors / communities in accordance with the principle of responsible di= sclosure.

=C2=B7=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 A Wikipedia page for Bromium describes t= he Microvisor. Additi= onal public statements on our use of Xen can be found he= re and here, and on our pro= duct pages:

= o=C2=A0=C2=A0=C2=A0 = Bromium vSentry uses the Microvisor to is= olate untrusted execution.=C2=A0

o=C2=A0=C2=A0=C2=A0 Bro= mium LAVA uses vS= entry to detect malware. =C2=A0=C2=A0

Our products are not available for download.

<= span style>=C2=B7=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Bromium operates a security mailing list for use by its = customers, at s= ecurity@bromium.com.=C2=A0=C2=A0 <= /span>

Bromium is cognizant = of the responsibility and the legal and procedural requirements involved wi= th membership of the Xen Project pre-disclosure list.=C2=A0=C2=A0 We have r= ead this policy and agree to it, including its terms of confidentiality.

We request that you add= xen-predisclosur= e-advisory@bromium.com to the Xen Project pre-disclosure list.

Sincerely,

Bromium

--001a1134fdc8aa7cc105116d733c-- --===============1803566510698098919== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications --===============1803566510698098919==-- From predisclosure-applications-bounces@lists.xenproject.org Wed Mar 18 01:05:25 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Wed, 18 Mar 2015 01:05:25 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YY2QG-0005AR-VZ; Wed, 18 Mar 2015 01:05:24 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YY2QF-0005A8-Ah for predisclosure-applications@lists.xenproject.org; Wed, 18 Mar 2015 01:05:23 +0000 Received: from [85.158.137.68] by server-3.bemta-3.messagelabs.com id 7C/91-02488-25FC8055; Wed, 18 Mar 2015 01:05:22 +0000 X-Env-Sender: security@tencent.com X-Msg-Ref: server-9.tower-31.messagelabs.com!1426640696!9390462!1 X-Originating-IP: [163.177.67.149] X-SpamReason: No, hits=-1.5 required=7.0 tests=HTML_60_70,HTML_MESSAGE, MIME_BASE64_TEXT,ML_RADAR_FP_R_14,spamassassin: X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 31773 invoked from network); 18 Mar 2015 01:04:59 -0000 Received: from mail2.tencent.com (HELO mail2.tencent.com) (163.177.67.149) by server-9.tower-31.messagelabs.com with SMTP; 18 Mar 2015 01:04:59 -0000 Received: from EXHUB-SZMail03.tencent.com (unknown [10.14.6.33]) by mail2.tencent.com (Postfix) with ESMTP id 2D05D8E5CF for ; Wed, 18 Mar 2015 09:04:47 +0800 (CST) Received: from EXMBX-SZMail004.tencent.com ([fe80::40cf:facd:eed0:7eab]) by EXHUB-SZMail03.tencent.com ([::1]) with mapi id 14.03.0123.003; Wed, 18 Mar 2015 09:04:46 +0800 From: =?gb2312?B?c2VjdXJpdHko0rXO8dXLusUp?= To: predisclosure-applications Thread-Topic: apply to join the Predisclosure list Thread-Index: AdBhFttZB+q0qB9NThqqHeabG2tzMg== Date: Wed, 18 Mar 2015 01:04:45 +0000 Message-ID: <201503180904366173838@tencent.com> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.26.71.36] MIME-Version: 1.0 Subject: [Predisclosure-applications] apply to join the Predisclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============5656550209651250831==" Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org --===============5656550209651250831== Content-Language: zh-CN Content-Type: multipart/alternative; boundary="_000_201503180904366173838tencentcom_" --_000_201503180904366173838tencentcom_ Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: base64 DQpoaSxkZWFyIHhlbjoNCg0KV2UgYXJlIHRoZSBzZWN1cml0eSB0ZWFtIG9mIHRlbmNlbnQuDQoN ClRoZSBEb21haW4gd2hpY2ggd2UgdXNlIHRvIHByb3ZpZGUgWGVuIHNlcnZpY2VzIGlzIHd3dy5x Y2xvdWQuY29tIC4NCg0KV2UgYXJlIG9uZSB0aGUgYmlnZXN0IGNsb3VkIHNlcnZpY2UgcHJvdmlk ZXIgaW4gY2hpbmEuDQoNCldlIHdhbnQgdG8gam9pbiBQcmVkaXNjbG9zdXJlIGxpc3QsIHdlIGhh dmUgcmVhZCB0aGlzIHBvbGljeSBhbmQgYWdyZWUgdG8gYWJpZGUgYnkgdGhlIHRlcm1zIGZvciBp bmNsdXNpb24gaW4gdGhlIGxpc3QuDQoNCk91ciBlbWFpbCB3ZSB3aXNoIGFkZGVkIHRvIHRoZSBw cmVkaXNjbG9zdXJlIGxpc3QgaXMgc2VjdXJpdHlAdGVuY2VudC5jb20uDQoNCl9fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fDQpzZWN1cml0eSjStc7x1cu6xSkNCg== --_000_201503180904366173838tencentcom_ Content-Type: text/html; charset="gb2312" Content-Transfer-Encoding: quoted-printable

hi,dear xen:

We are the security team of tencent.

The Domain which we use to provide Xen services is www.qcloud.com .

We are one the bigest cloud service provider in china.

We want to join Predisclosure list, we have read this policy and agree to a= bide by the terms for inclusion in the list.

Our email we wish added to the predisclosure list is security@tencent.com.<= /span>

security(=D2=B5=CE=F1=D5=CB=BA=C5)
--_000_201503180904366173838tencentcom_-- --===============5656550209651250831== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications --===============5656550209651250831==-- From predisclosure-applications-bounces@lists.xenproject.org Wed Mar 18 01:05:25 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Wed, 18 Mar 2015 01:05:25 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YY2QG-0005AR-VZ; Wed, 18 Mar 2015 01:05:24 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YY2QF-0005A8-Ah for predisclosure-applications@lists.xenproject.org; Wed, 18 Mar 2015 01:05:23 +0000 Received: from [85.158.137.68] by server-3.bemta-3.messagelabs.com id 7C/91-02488-25FC8055; Wed, 18 Mar 2015 01:05:22 +0000 X-Env-Sender: security@tencent.com X-Msg-Ref: server-9.tower-31.messagelabs.com!1426640696!9390462!1 X-Originating-IP: [163.177.67.149] X-SpamReason: No, hits=-1.5 required=7.0 tests=HTML_60_70,HTML_MESSAGE, MIME_BASE64_TEXT,ML_RADAR_FP_R_14,spamassassin: X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 31773 invoked from network); 18 Mar 2015 01:04:59 -0000 Received: from mail2.tencent.com (HELO mail2.tencent.com) (163.177.67.149) by server-9.tower-31.messagelabs.com with SMTP; 18 Mar 2015 01:04:59 -0000 Received: from EXHUB-SZMail03.tencent.com (unknown [10.14.6.33]) by mail2.tencent.com (Postfix) with ESMTP id 2D05D8E5CF for ; Wed, 18 Mar 2015 09:04:47 +0800 (CST) Received: from EXMBX-SZMail004.tencent.com ([fe80::40cf:facd:eed0:7eab]) by EXHUB-SZMail03.tencent.com ([::1]) with mapi id 14.03.0123.003; Wed, 18 Mar 2015 09:04:46 +0800 From: =?gb2312?B?c2VjdXJpdHko0rXO8dXLusUp?= To: predisclosure-applications Thread-Topic: apply to join the Predisclosure list Thread-Index: AdBhFttZB+q0qB9NThqqHeabG2tzMg== Date: Wed, 18 Mar 2015 01:04:45 +0000 Message-ID: <201503180904366173838@tencent.com> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.26.71.36] MIME-Version: 1.0 Subject: [Predisclosure-applications] apply to join the Predisclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============5656550209651250831==" Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org --===============5656550209651250831== Content-Language: zh-CN Content-Type: multipart/alternative; boundary="_000_201503180904366173838tencentcom_" --_000_201503180904366173838tencentcom_ Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: base64 DQpoaSxkZWFyIHhlbjoNCg0KV2UgYXJlIHRoZSBzZWN1cml0eSB0ZWFtIG9mIHRlbmNlbnQuDQoN ClRoZSBEb21haW4gd2hpY2ggd2UgdXNlIHRvIHByb3ZpZGUgWGVuIHNlcnZpY2VzIGlzIHd3dy5x Y2xvdWQuY29tIC4NCg0KV2UgYXJlIG9uZSB0aGUgYmlnZXN0IGNsb3VkIHNlcnZpY2UgcHJvdmlk ZXIgaW4gY2hpbmEuDQoNCldlIHdhbnQgdG8gam9pbiBQcmVkaXNjbG9zdXJlIGxpc3QsIHdlIGhh dmUgcmVhZCB0aGlzIHBvbGljeSBhbmQgYWdyZWUgdG8gYWJpZGUgYnkgdGhlIHRlcm1zIGZvciBp bmNsdXNpb24gaW4gdGhlIGxpc3QuDQoNCk91ciBlbWFpbCB3ZSB3aXNoIGFkZGVkIHRvIHRoZSBw cmVkaXNjbG9zdXJlIGxpc3QgaXMgc2VjdXJpdHlAdGVuY2VudC5jb20uDQoNCl9fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fDQpzZWN1cml0eSjStc7x1cu6xSkNCg== --_000_201503180904366173838tencentcom_ Content-Type: text/html; charset="gb2312" Content-Transfer-Encoding: quoted-printable

hi,dear xen:

We are the security team of tencent.

The Domain which we use to provide Xen services is www.qcloud.com .

We are one the bigest cloud service provider in china.

We want to join Predisclosure list, we have read this policy and agree to a= bide by the terms for inclusion in the list.

Our email we wish added to the predisclosure list is security@tencent.com.<= /span>

security(=D2=B5=CE=F1=D5=CB=BA=C5)
--_000_201503180904366173838tencentcom_-- --===============5656550209651250831== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications --===============5656550209651250831==-- From predisclosure-applications-bounces@lists.xenproject.org Wed Mar 18 09:48:56 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Wed, 18 Mar 2015 09:48:56 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YYAau-0003pP-SV; Wed, 18 Mar 2015 09:48:56 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YYAat-0003pK-4h for predisclosure-applications@lists.xenproject.org; Wed, 18 Mar 2015 09:48:55 +0000 Received: from [193.109.254.147] by server-2.bemta-14.messagelabs.com id 94/61-08971-60A49055; Wed, 18 Mar 2015 09:48:54 +0000 X-Env-Sender: Ian.Campbell@citrix.com X-Msg-Ref: server-9.tower-27.messagelabs.com!1426672131!13870111!1 X-Originating-IP: [66.165.176.63] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogNjYuMTY1LjE3Ni42MyA9PiAzMDYwNDg=\n, received_headers: No Received headers X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 8168 invoked from network); 18 Mar 2015 09:48:52 -0000 Received: from smtp02.citrix.com (HELO SMTP02.CITRIX.COM) (66.165.176.63) by server-9.tower-27.messagelabs.com with RC4-SHA encrypted SMTP; 18 Mar 2015 09:48:52 -0000 X-IronPort-AV: E=Sophos;i="5.11,421,1422921600"; d="scan'208";a="246110505" Message-ID: <1426672129.18247.286.camel@citrix.com> From: Ian Campbell To: Simon Crosby Date: Wed, 18 Mar 2015 09:48:49 +0000 In-Reply-To: References: X-Mailer: Evolution 3.12.9-1+b1 MIME-Version: 1.0 X-DLP: MIA1 Cc: predisclosure-applications@lists.xenproject.org, security@bromium.com, xen-predisclosure-advisory@bromium.com Subject: Re: [Predisclosure-applications] Application for addition to Xen predisclosure list. X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org On Mon, 2015-03-16 at 13:11 -0700, Simon Crosby wrote: > Applicant: Bromium, Inc. Hi Simon, Thanks for your application. We take it you are applying under the "Vendors of Xen-based systems" case. The Xen project security policy requires us to ask for "Link(s) to current public web pages, belonging to your organisation," for each piece of information, where a couple seem to be missing from your application: * For "Evidence of your status as a service/software provider": If you are a software provider, how your software can be downloaded or purchased. (There are other options, this seems to be the one which would apply in your case) * For "Information about your handling of security problems": Your invitation to members of the public, who discover security problems with your products/services, to report them in confidence to you; With those I think we should be able to process your request. Thanks, Ian. _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Wed Mar 18 09:48:56 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Wed, 18 Mar 2015 09:48:56 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YYAau-0003pP-SV; Wed, 18 Mar 2015 09:48:56 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YYAat-0003pK-4h for predisclosure-applications@lists.xenproject.org; Wed, 18 Mar 2015 09:48:55 +0000 Received: from [193.109.254.147] by server-2.bemta-14.messagelabs.com id 94/61-08971-60A49055; Wed, 18 Mar 2015 09:48:54 +0000 X-Env-Sender: Ian.Campbell@citrix.com X-Msg-Ref: server-9.tower-27.messagelabs.com!1426672131!13870111!1 X-Originating-IP: [66.165.176.63] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogNjYuMTY1LjE3Ni42MyA9PiAzMDYwNDg=\n, received_headers: No Received headers X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 8168 invoked from network); 18 Mar 2015 09:48:52 -0000 Received: from smtp02.citrix.com (HELO SMTP02.CITRIX.COM) (66.165.176.63) by server-9.tower-27.messagelabs.com with RC4-SHA encrypted SMTP; 18 Mar 2015 09:48:52 -0000 X-IronPort-AV: E=Sophos;i="5.11,421,1422921600"; d="scan'208";a="246110505" Message-ID: <1426672129.18247.286.camel@citrix.com> From: Ian Campbell To: Simon Crosby Date: Wed, 18 Mar 2015 09:48:49 +0000 In-Reply-To: References: X-Mailer: Evolution 3.12.9-1+b1 MIME-Version: 1.0 X-DLP: MIA1 Cc: predisclosure-applications@lists.xenproject.org, security@bromium.com, xen-predisclosure-advisory@bromium.com Subject: Re: [Predisclosure-applications] Application for addition to Xen predisclosure list. X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org On Mon, 2015-03-16 at 13:11 -0700, Simon Crosby wrote: > Applicant: Bromium, Inc. Hi Simon, Thanks for your application. We take it you are applying under the "Vendors of Xen-based systems" case. The Xen project security policy requires us to ask for "Link(s) to current public web pages, belonging to your organisation," for each piece of information, where a couple seem to be missing from your application: * For "Evidence of your status as a service/software provider": If you are a software provider, how your software can be downloaded or purchased. (There are other options, this seems to be the one which would apply in your case) * For "Information about your handling of security problems": Your invitation to members of the public, who discover security problems with your products/services, to report them in confidence to you; With those I think we should be able to process your request. Thanks, Ian. _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Thu Mar 19 02:34:03 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Thu, 19 Mar 2015 02:34:03 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YYQHb-0004nf-OU; Thu, 19 Mar 2015 02:34:03 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YYQHb-0004na-08 for predisclosure-applications@lists.xenproject.org; Thu, 19 Mar 2015 02:34:03 +0000 Received: from [85.158.137.68] by server-16.bemta-3.messagelabs.com id EA/64-13627-A953A055; Thu, 19 Mar 2015 02:34:02 +0000 X-Env-Sender: simon@bromium.com X-Msg-Ref: server-8.tower-31.messagelabs.com!1426732438!13518166!1 X-Originating-IP: [209.85.218.48] X-SpamReason: No, hits=0.3 required=7.0 tests=HTML_60_70,HTML_MESSAGE X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 29216 invoked from network); 19 Mar 2015 02:33:59 -0000 Received: from mail-oi0-f48.google.com (HELO mail-oi0-f48.google.com) (209.85.218.48) by server-8.tower-31.messagelabs.com with RC4-SHA encrypted SMTP; 19 Mar 2015 02:33:59 -0000 Received: by oigv203 with SMTP id v203so54175596oig.3 for ; Wed, 18 Mar 2015 19:33:58 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:references:in-reply-to:mime-version :thread-index:date:message-id:subject:to:cc:content-type; bh=YiU7rOGDpeLofxWETPTc6CfSDxSiqiDvKmFpKBlKz2c=; b=YD6ajpy92JAQBkNkHkwB2QuZHzxvpcBg96Dbds+NYPJE45stSsVhC3JTwf+0pJTb2+ k5rv7rE07yqD4mkR53iieoUNm/1RgkXTw2oJQgWfvNb/FUrLYDK1EBd94PKWSnCf18md vYDi1ZWYKzfLsd/e31E0z3VIBdVhT1hIwP19Sb6T0lQQPslMwyv4z/vq4OBIOFFWfhWc bPhQJcZcFvpQknh++hooEVhyFRlpGOxywn3OFwttK1SMPtnwgwGFltwQs/C5CeKoWJ7j sBE1i/tx4Zeh6/6OUc0NEyEjXyxbISH5FznjUrsQZObM5WBQ6IsXkQK7YXM8EuVgfJkc b93g== X-Gm-Message-State: ALoCoQk0ps3pP7TFsEde1wAdHwWkNInnkm2cLTR+o3DTzoFZdRwun74LoPdoBV8/3ILqN5w6f1zi X-Received: by 10.202.7.1 with SMTP id 1mr55790409oih.16.1426732438402; Wed, 18 Mar 2015 19:33:58 -0700 (PDT) From: Simon Crosby References: <1426672129.18247.286.camel@citrix.com> In-Reply-To: <1426672129.18247.286.camel@citrix.com> MIME-Version: 1.0 X-Mailer: Microsoft Outlook 15.0 Thread-Index: AQJZmkmo8O+LHuzkutEA1DkLpv2eogIVe02Tm//Zm4A= Date: Wed, 18 Mar 2015 19:33:56 -0700 Message-ID: <4c44d5c2ec9715f7cc1bfa0754cf8bd3@mail.gmail.com> To: Ian Campbell Cc: predisclosure-applications@lists.xenproject.org, Security , Xen Predisclosure Subject: Re: [Predisclosure-applications] Application for addition to Xen predisclosure list. X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============4393538873969809223==" Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org --===============4393538873969809223== Content-Type: multipart/alternative; boundary=001a113d19d62e51df05119b0845 --001a113d19d62e51df05119b0845 Content-Type: text/plain; charset=UTF-8 Ian I've provided what I believe are the missing bits of information below. Moved to HTML so you can see my inline edits in color, prefixed *[SC>].* Many thanks for your quick response Simon CTO, Bromium Inc. @simoncrosby -----Original Message----- From: Ian Campbell [mailto:ian.campbell@citrix.com] Sent: Wednesday, March 18, 2015 2:49 AM To: Simon Crosby Cc: predisclosure-applications@lists.xenproject.org; security@bromium.com; xen-predisclosure-advisory@bromium.com Subject: Re: [Predisclosure-applications] Application for addition to Xen predisclosure list. On Mon, 2015-03-16 at 13:11 -0700, Simon Crosby wrote: > Applicant: Bromium, Inc. We take it you are applying under the "Vendors of Xen-based systems" case. *[SC >] Yes * The Xen project security policy requires us to ask for "Link(s) to current public web pages, belonging to your organisation," for each piece of information, where a couple seem to be missing from your application: * For "Evidence of your status as a service/software provider": If you are a software provider, how your software can be downloaded or purchased. (There are other options, this seems to be the one which would apply in your case) *[SC >] *Our products are not available for download. Email to sales@bromium.com is the best way to learn how to purchase our products, or you can fill out a web form here . There is no online purchase option. * For "Information about your handling of security problems": Your invitation to members of the public, who discover security problems with your products/services, to report them in confidence to you; [SC >] The Contact page on our site asks anyone that discovers a security issue with our product to email us in confidence at security@bromium.com With those I think we should be able to process your request. Thanks, Ian. --001a113d19d62e51df05119b0845 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable <= div class=3D"WordSection1">

Ian

=C2=A0

I've provided what I believe are the missing bits of information below= .=C2=A0

= Moved to HTML so you can see my inline edits in color, prefixed [SC>]= .

=C2= =A0

Many = thanks for your quick response

=C2=A0

Simon

=C2=A0

CTO, Bromium Inc.

@simoncrosby

=C2=A0

-----Original Message-----
From: I= an Campbell [mailto:ian.campbell= @citrix.com]
Sent: Wednesday, March 18, 2015 2:49 AM
To: Simon C= rosby
Cc: predisclosure-applications@lists.xenproject.org; security@bromium.com; xen-predisclosure-advisory@bromium.com<= br>Subject: Re: [Predisclosure-applications] Application for addition to Xe= n predisclosure list.

=C2=A0

On Mon, 2015-03-16 at 13:11 -0700, Simon Crosby wrote:

> Applicant: Bromium, Inc.

=C2=A0

We take it you are applying under = the "Vendors of Xen-based systems"

c= ase.

[SC &= gt;] Yes=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0

=C2=A0

The Xen= project security policy requires us to ask for "Link(s) to current pu= blic web pages, belonging to your organisation," for each piece of inf= ormation, where a couple seem to be missing from your

application:

=C2=A0

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 * For "Evidence of your stat= us as a service/software provider":

=C2= =A0

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 If you are a software prov= ider, how your software can be

=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= downloaded or purchased.

=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0(There are other options= , this seems to be the one which

=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0 would apply in your case)

[SC >] Our products are not available for downloa= d.=C2=A0 Email to sales@bromium.com is the best way to learn how to purc= hase our products, or you can fill out a web form here.=C2=A0 There is no online purchase option.

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 * For "Information about your ha= ndling of security problems":

=C2=A0

<= p class=3D"MsoPlainText">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Your invitation to members of th= e public, who discover

=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 secur= ity problems with your products/services, to report

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0 them in confidence to you;

=C2=A0

<= span style=3D"color:#44546a">[SC >]= The Contact page on our site asks anyone that discov= ers a security issue with our product to email us in confidence at security@bro= mium.com

=C2=A0

With those I think we= should be able to process your request.

=C2= =A0

Thanks,

Ian.<= /p>

=C2=A0

--001a113d19d62e51df05119b0845-- --===============4393538873969809223== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications --===============4393538873969809223==-- From predisclosure-applications-bounces@lists.xenproject.org Thu Mar 19 02:34:03 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Thu, 19 Mar 2015 02:34:03 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YYQHb-0004nf-OU; Thu, 19 Mar 2015 02:34:03 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YYQHb-0004na-08 for predisclosure-applications@lists.xenproject.org; Thu, 19 Mar 2015 02:34:03 +0000 Received: from [85.158.137.68] by server-16.bemta-3.messagelabs.com id EA/64-13627-A953A055; Thu, 19 Mar 2015 02:34:02 +0000 X-Env-Sender: simon@bromium.com X-Msg-Ref: server-8.tower-31.messagelabs.com!1426732438!13518166!1 X-Originating-IP: [209.85.218.48] X-SpamReason: No, hits=0.3 required=7.0 tests=HTML_60_70,HTML_MESSAGE X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 29216 invoked from network); 19 Mar 2015 02:33:59 -0000 Received: from mail-oi0-f48.google.com (HELO mail-oi0-f48.google.com) (209.85.218.48) by server-8.tower-31.messagelabs.com with RC4-SHA encrypted SMTP; 19 Mar 2015 02:33:59 -0000 Received: by oigv203 with SMTP id v203so54175596oig.3 for ; Wed, 18 Mar 2015 19:33:58 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:references:in-reply-to:mime-version :thread-index:date:message-id:subject:to:cc:content-type; bh=YiU7rOGDpeLofxWETPTc6CfSDxSiqiDvKmFpKBlKz2c=; b=YD6ajpy92JAQBkNkHkwB2QuZHzxvpcBg96Dbds+NYPJE45stSsVhC3JTwf+0pJTb2+ k5rv7rE07yqD4mkR53iieoUNm/1RgkXTw2oJQgWfvNb/FUrLYDK1EBd94PKWSnCf18md vYDi1ZWYKzfLsd/e31E0z3VIBdVhT1hIwP19Sb6T0lQQPslMwyv4z/vq4OBIOFFWfhWc bPhQJcZcFvpQknh++hooEVhyFRlpGOxywn3OFwttK1SMPtnwgwGFltwQs/C5CeKoWJ7j sBE1i/tx4Zeh6/6OUc0NEyEjXyxbISH5FznjUrsQZObM5WBQ6IsXkQK7YXM8EuVgfJkc b93g== X-Gm-Message-State: ALoCoQk0ps3pP7TFsEde1wAdHwWkNInnkm2cLTR+o3DTzoFZdRwun74LoPdoBV8/3ILqN5w6f1zi X-Received: by 10.202.7.1 with SMTP id 1mr55790409oih.16.1426732438402; Wed, 18 Mar 2015 19:33:58 -0700 (PDT) From: Simon Crosby References: <1426672129.18247.286.camel@citrix.com> In-Reply-To: <1426672129.18247.286.camel@citrix.com> MIME-Version: 1.0 X-Mailer: Microsoft Outlook 15.0 Thread-Index: AQJZmkmo8O+LHuzkutEA1DkLpv2eogIVe02Tm//Zm4A= Date: Wed, 18 Mar 2015 19:33:56 -0700 Message-ID: <4c44d5c2ec9715f7cc1bfa0754cf8bd3@mail.gmail.com> To: Ian Campbell Cc: predisclosure-applications@lists.xenproject.org, Security , Xen Predisclosure Subject: Re: [Predisclosure-applications] Application for addition to Xen predisclosure list. X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============4393538873969809223==" Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org --===============4393538873969809223== Content-Type: multipart/alternative; boundary=001a113d19d62e51df05119b0845 --001a113d19d62e51df05119b0845 Content-Type: text/plain; charset=UTF-8 Ian I've provided what I believe are the missing bits of information below. Moved to HTML so you can see my inline edits in color, prefixed *[SC>].* Many thanks for your quick response Simon CTO, Bromium Inc. @simoncrosby -----Original Message----- From: Ian Campbell [mailto:ian.campbell@citrix.com] Sent: Wednesday, March 18, 2015 2:49 AM To: Simon Crosby Cc: predisclosure-applications@lists.xenproject.org; security@bromium.com; xen-predisclosure-advisory@bromium.com Subject: Re: [Predisclosure-applications] Application for addition to Xen predisclosure list. On Mon, 2015-03-16 at 13:11 -0700, Simon Crosby wrote: > Applicant: Bromium, Inc. We take it you are applying under the "Vendors of Xen-based systems" case. *[SC >] Yes * The Xen project security policy requires us to ask for "Link(s) to current public web pages, belonging to your organisation," for each piece of information, where a couple seem to be missing from your application: * For "Evidence of your status as a service/software provider": If you are a software provider, how your software can be downloaded or purchased. (There are other options, this seems to be the one which would apply in your case) *[SC >] *Our products are not available for download. Email to sales@bromium.com is the best way to learn how to purchase our products, or you can fill out a web form here . There is no online purchase option. * For "Information about your handling of security problems": Your invitation to members of the public, who discover security problems with your products/services, to report them in confidence to you; [SC >] The Contact page on our site asks anyone that discovers a security issue with our product to email us in confidence at security@bromium.com With those I think we should be able to process your request. Thanks, Ian. --001a113d19d62e51df05119b0845 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable <= div class=3D"WordSection1">

Ian

=C2=A0

I've provided what I believe are the missing bits of information below= .=C2=A0

= Moved to HTML so you can see my inline edits in color, prefixed [SC>]= .

=C2= =A0

Many = thanks for your quick response

=C2=A0

Simon

=C2=A0

CTO, Bromium Inc.

@simoncrosby

=C2=A0

-----Original Message-----
From: I= an Campbell [mailto:ian.campbell= @citrix.com]
Sent: Wednesday, March 18, 2015 2:49 AM
To: Simon C= rosby
Cc: predisclosure-applications@lists.xenproject.org; security@bromium.com; xen-predisclosure-advisory@bromium.com<= br>Subject: Re: [Predisclosure-applications] Application for addition to Xe= n predisclosure list.

=C2=A0

On Mon, 2015-03-16 at 13:11 -0700, Simon Crosby wrote:

> Applicant: Bromium, Inc.

=C2=A0

We take it you are applying under = the "Vendors of Xen-based systems"

c= ase.

[SC &= gt;] Yes=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0

=C2=A0

The Xen= project security policy requires us to ask for "Link(s) to current pu= blic web pages, belonging to your organisation," for each piece of inf= ormation, where a couple seem to be missing from your

application:

=C2=A0

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 * For "Evidence of your stat= us as a service/software provider":

=C2= =A0

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 If you are a software prov= ider, how your software can be

=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= downloaded or purchased.

=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0(There are other options= , this seems to be the one which

=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0 would apply in your case)

[SC >] Our products are not available for downloa= d.=C2=A0 Email to sales@bromium.com is the best way to learn how to purc= hase our products, or you can fill out a web form here.=C2=A0 There is no online purchase option.

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 * For "Information about your ha= ndling of security problems":

=C2=A0

<= p class=3D"MsoPlainText">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Your invitation to members of th= e public, who discover

=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 secur= ity problems with your products/services, to report

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0 them in confidence to you;

=C2=A0

<= span style=3D"color:#44546a">[SC >]= The Contact page on our site asks anyone that discov= ers a security issue with our product to email us in confidence at security@bro= mium.com

=C2=A0

With those I think we= should be able to process your request.

=C2= =A0

Thanks,

Ian.<= /p>

=C2=A0

--001a113d19d62e51df05119b0845-- --===============4393538873969809223== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications --===============4393538873969809223==-- From predisclosure-applications-bounces@lists.xenproject.org Thu Mar 19 11:03:27 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Thu, 19 Mar 2015 11:03:27 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YYYEY-0001Rh-Vq; Thu, 19 Mar 2015 11:03:26 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YYYEX-0001Rc-47 for predisclosure-applications@lists.xenproject.org; Thu, 19 Mar 2015 11:03:25 +0000 Received: from [85.158.139.211] by server-14.bemta-5.messagelabs.com id DC/6C-02124-CFCAA055; Thu, 19 Mar 2015 11:03:24 +0000 X-Env-Sender: ijc@hellion.org.uk X-Msg-Ref: server-6.tower-206.messagelabs.com!1426763003!11813770!1 X-Originating-IP: [212.110.190.137] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 17493 invoked from network); 19 Mar 2015 11:03:23 -0000 Received: from benson.vm.bytemark.co.uk (HELO benson.vm.bytemark.co.uk) (212.110.190.137) by server-6.tower-206.messagelabs.com with DHE-RSA-AES128-SHA encrypted SMTP; 19 Mar 2015 11:03:23 -0000 Received: from [185.25.64.249] (helo=kazak) by benson.vm.bytemark.co.uk with esmtpsa (TLS1.2:RSA_AES_128_CBC_SHA1:128) (Exim 4.80) (envelope-from ) id 1YYYEV-00041H-5B; Thu, 19 Mar 2015 11:03:23 +0000 Message-ID: <1426763002.610.31.camel@xen.org> From: Ian Campbell To: Simon Crosby Date: Thu, 19 Mar 2015 11:03:22 +0000 In-Reply-To: <4c44d5c2ec9715f7cc1bfa0754cf8bd3@mail.gmail.com> References: <1426672129.18247.286.camel@citrix.com> <4c44d5c2ec9715f7cc1bfa0754cf8bd3@mail.gmail.com> X-Mailer: Evolution 3.12.9-1+b1 Mime-Version: 1.0 Cc: predisclosure-applications@lists.xenproject.org, Security , Xen Predisclosure Subject: Re: [Predisclosure-applications] Application for addition to Xen predisclosure list. X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org On Wed, 2015-03-18 at 19:33 -0700, Simon Crosby wrote: > I've provided what I believe are the missing bits of information > below. Thanks. This all now looks good. > We request that you add xen-predisclosure-advisory@bromium.com to the > Xen Project pre-disclosure list. Done. You should have received a subscription notification as well as copies of the currently embargoed advisories, XSA-125, -126 and -127. Cheers, Ian. _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Thu Mar 19 11:03:27 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Thu, 19 Mar 2015 11:03:27 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YYYEY-0001Rh-Vq; Thu, 19 Mar 2015 11:03:26 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YYYEX-0001Rc-47 for predisclosure-applications@lists.xenproject.org; Thu, 19 Mar 2015 11:03:25 +0000 Received: from [85.158.139.211] by server-14.bemta-5.messagelabs.com id DC/6C-02124-CFCAA055; Thu, 19 Mar 2015 11:03:24 +0000 X-Env-Sender: ijc@hellion.org.uk X-Msg-Ref: server-6.tower-206.messagelabs.com!1426763003!11813770!1 X-Originating-IP: [212.110.190.137] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 17493 invoked from network); 19 Mar 2015 11:03:23 -0000 Received: from benson.vm.bytemark.co.uk (HELO benson.vm.bytemark.co.uk) (212.110.190.137) by server-6.tower-206.messagelabs.com with DHE-RSA-AES128-SHA encrypted SMTP; 19 Mar 2015 11:03:23 -0000 Received: from [185.25.64.249] (helo=kazak) by benson.vm.bytemark.co.uk with esmtpsa (TLS1.2:RSA_AES_128_CBC_SHA1:128) (Exim 4.80) (envelope-from ) id 1YYYEV-00041H-5B; Thu, 19 Mar 2015 11:03:23 +0000 Message-ID: <1426763002.610.31.camel@xen.org> From: Ian Campbell To: Simon Crosby Date: Thu, 19 Mar 2015 11:03:22 +0000 In-Reply-To: <4c44d5c2ec9715f7cc1bfa0754cf8bd3@mail.gmail.com> References: <1426672129.18247.286.camel@citrix.com> <4c44d5c2ec9715f7cc1bfa0754cf8bd3@mail.gmail.com> X-Mailer: Evolution 3.12.9-1+b1 Mime-Version: 1.0 Cc: predisclosure-applications@lists.xenproject.org, Security , Xen Predisclosure Subject: Re: [Predisclosure-applications] Application for addition to Xen predisclosure list. X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org On Wed, 2015-03-18 at 19:33 -0700, Simon Crosby wrote: > I've provided what I believe are the missing bits of information > below. Thanks. This all now looks good. > We request that you add xen-predisclosure-advisory@bromium.com to the > Xen Project pre-disclosure list. Done. You should have received a subscription notification as well as copies of the currently embargoed advisories, XSA-125, -126 and -127. Cheers, Ian. _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Thu Mar 19 15:08:46 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Thu, 19 Mar 2015 15:08:46 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YYc3y-00022D-La; Thu, 19 Mar 2015 15:08:46 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YYc3y-000222-04 for predisclosure-applications@lists.xenproject.org; Thu, 19 Mar 2015 15:08:46 +0000 Received: from [85.158.137.68] by server-16.bemta-3.messagelabs.com id 4E/FE-01563-D76EA055; Thu, 19 Mar 2015 15:08:45 +0000 X-Env-Sender: simon@bromium.com X-Msg-Ref: server-8.tower-31.messagelabs.com!1426777723!13766021!1 X-Originating-IP: [209.85.214.178] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 26817 invoked from network); 19 Mar 2015 15:08:44 -0000 Received: from mail-ob0-f178.google.com (HELO mail-ob0-f178.google.com) (209.85.214.178) by server-8.tower-31.messagelabs.com with RC4-SHA encrypted SMTP; 19 Mar 2015 15:08:44 -0000 Received: by obcjt1 with SMTP id jt1so36427193obc.2 for ; Thu, 19 Mar 2015 08:08:43 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:references:in-reply-to:mime-version :thread-index:date:message-id:subject:to:cc:content-type; bh=cgvRV2dhfs//VRgttSb90DjqO2Oe+b75q6NhvGvkzxc=; b=hf8WDCVsWDrcDXYYP0G/eimYRZbniUygUs6q7NYpItlUI+3n37vKm8VQ9mz7y+BUFa syhFJQksf/lqFCaite3qnDvkRquxU59xXqTBrRNGuO+f48vZr1cEJt0WY6dPGBUyLVTt 8IC73h3HN44kO3SjCU0JZeuuDaw6uhUSgKaUUvkkzurSpoDtuBpxWxUO5g8lNu2xVtuW MRWoSMTD3DZxX4DAxPlFOR/sOR/qF58gCdrLHe/XSp0F6X9VXd4sgOG6tULyxIbG94l8 7TpjyaGFpivEca8D/h+JwObHPoRlR3DIcA6XSC5wv6LSUMMK++CsYpGitZAx/PurxK/u DBLg== X-Gm-Message-State: ALoCoQlWOjxOa64LtE/HO2u7y5MHUlEb2SxLiey2xojmnv6aYwHzCKD9Q/EsG/fIRM0GgUib/jUD X-Received: by 10.202.105.142 with SMTP id e136mr14490105oic.54.1426777723289; Thu, 19 Mar 2015 08:08:43 -0700 (PDT) From: Simon Crosby References: <1426672129.18247.286.camel@citrix.com> <4c44d5c2ec9715f7cc1bfa0754cf8bd3@mail.gmail.com> <1426763002.610.31.camel@xen.org> In-Reply-To: <1426763002.610.31.camel@xen.org> MIME-Version: 1.0 X-Mailer: Microsoft Outlook 15.0 Thread-Index: AQJZmkmo8O+LHuzkutEA1DkLpv2eogIVe02TAaaxJpoB8ykbhZvj/dEw Date: Thu, 19 Mar 2015 08:08:41 -0700 Message-ID: To: Ian Campbell Cc: predisclosure-applications@lists.xenproject.org, Security , Xen Predisclosure Subject: Re: [Predisclosure-applications] Application for addition to Xen predisclosure list. X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org Thanks Ian, received and good to go. Simon CTO, Bromium Inc. @simoncrosby -----Original Message----- From: ijc@hellion.org.uk [mailto:ijc@hellion.org.uk] On Behalf Of Ian Campbell Sent: Thursday, March 19, 2015 4:03 AM To: Simon Crosby Cc: predisclosure-applications@lists.xenproject.org; Security; Xen Predisclosure Subject: Re: [Predisclosure-applications] Application for addition to Xen predisclosure list. On Wed, 2015-03-18 at 19:33 -0700, Simon Crosby wrote: > I've provided what I believe are the missing bits of information > below. Thanks. This all now looks good. > We request that you add xen-predisclosure-advisory@bromium.com to the > Xen Project pre-disclosure list. Done. You should have received a subscription notification as well as copies of the currently embargoed advisories, XSA-125, -126 and -127. Cheers, Ian. _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Thu Mar 19 15:08:46 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Thu, 19 Mar 2015 15:08:46 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YYc3y-00022D-La; Thu, 19 Mar 2015 15:08:46 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YYc3y-000222-04 for predisclosure-applications@lists.xenproject.org; Thu, 19 Mar 2015 15:08:46 +0000 Received: from [85.158.137.68] by server-16.bemta-3.messagelabs.com id 4E/FE-01563-D76EA055; Thu, 19 Mar 2015 15:08:45 +0000 X-Env-Sender: simon@bromium.com X-Msg-Ref: server-8.tower-31.messagelabs.com!1426777723!13766021!1 X-Originating-IP: [209.85.214.178] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 26817 invoked from network); 19 Mar 2015 15:08:44 -0000 Received: from mail-ob0-f178.google.com (HELO mail-ob0-f178.google.com) (209.85.214.178) by server-8.tower-31.messagelabs.com with RC4-SHA encrypted SMTP; 19 Mar 2015 15:08:44 -0000 Received: by obcjt1 with SMTP id jt1so36427193obc.2 for ; Thu, 19 Mar 2015 08:08:43 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:references:in-reply-to:mime-version :thread-index:date:message-id:subject:to:cc:content-type; bh=cgvRV2dhfs//VRgttSb90DjqO2Oe+b75q6NhvGvkzxc=; b=hf8WDCVsWDrcDXYYP0G/eimYRZbniUygUs6q7NYpItlUI+3n37vKm8VQ9mz7y+BUFa syhFJQksf/lqFCaite3qnDvkRquxU59xXqTBrRNGuO+f48vZr1cEJt0WY6dPGBUyLVTt 8IC73h3HN44kO3SjCU0JZeuuDaw6uhUSgKaUUvkkzurSpoDtuBpxWxUO5g8lNu2xVtuW MRWoSMTD3DZxX4DAxPlFOR/sOR/qF58gCdrLHe/XSp0F6X9VXd4sgOG6tULyxIbG94l8 7TpjyaGFpivEca8D/h+JwObHPoRlR3DIcA6XSC5wv6LSUMMK++CsYpGitZAx/PurxK/u DBLg== X-Gm-Message-State: ALoCoQlWOjxOa64LtE/HO2u7y5MHUlEb2SxLiey2xojmnv6aYwHzCKD9Q/EsG/fIRM0GgUib/jUD X-Received: by 10.202.105.142 with SMTP id e136mr14490105oic.54.1426777723289; Thu, 19 Mar 2015 08:08:43 -0700 (PDT) From: Simon Crosby References: <1426672129.18247.286.camel@citrix.com> <4c44d5c2ec9715f7cc1bfa0754cf8bd3@mail.gmail.com> <1426763002.610.31.camel@xen.org> In-Reply-To: <1426763002.610.31.camel@xen.org> MIME-Version: 1.0 X-Mailer: Microsoft Outlook 15.0 Thread-Index: AQJZmkmo8O+LHuzkutEA1DkLpv2eogIVe02TAaaxJpoB8ykbhZvj/dEw Date: Thu, 19 Mar 2015 08:08:41 -0700 Message-ID: To: Ian Campbell Cc: predisclosure-applications@lists.xenproject.org, Security , Xen Predisclosure Subject: Re: [Predisclosure-applications] Application for addition to Xen predisclosure list. X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org Thanks Ian, received and good to go. Simon CTO, Bromium Inc. @simoncrosby -----Original Message----- From: ijc@hellion.org.uk [mailto:ijc@hellion.org.uk] On Behalf Of Ian Campbell Sent: Thursday, March 19, 2015 4:03 AM To: Simon Crosby Cc: predisclosure-applications@lists.xenproject.org; Security; Xen Predisclosure Subject: Re: [Predisclosure-applications] Application for addition to Xen predisclosure list. On Wed, 2015-03-18 at 19:33 -0700, Simon Crosby wrote: > I've provided what I believe are the missing bits of information > below. Thanks. This all now looks good. > We request that you add xen-predisclosure-advisory@bromium.com to the > Xen Project pre-disclosure list. Done. You should have received a subscription notification as well as copies of the currently embargoed advisories, XSA-125, -126 and -127. Cheers, Ian. _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Fri Mar 20 15:18:32 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Fri, 20 Mar 2015 15:18:32 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YYygy-0006Ru-L5; Fri, 20 Mar 2015 15:18:32 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YYygx-0006RP-6G for predisclosure-applications@lists.xenproject.org; Fri, 20 Mar 2015 15:18:31 +0000 Received: from [193.109.254.147] by server-13.bemta-14.messagelabs.com id 3B/84-23283-64A3C055; Fri, 20 Mar 2015 15:18:30 +0000 X-Env-Sender: lars.kurth@citrix.com X-Msg-Ref: server-8.tower-27.messagelabs.com!1426864708!11898406!1 X-Originating-IP: [185.25.65.24] X-SpamReason: No, hits=0.0 required=7.0 tests=HTML_MESSAGE, received_headers: No Received headers X-StarScan-Received: X-StarScan-Version: 6.13.6; banners=-,-,- X-VirusChecked: Checked Received: (qmail 26841 invoked from network); 20 Mar 2015 15:18:28 -0000 Received: from smtp.ctxuk.citrix.com (HELO SMTP.EU.CITRIX.COM) (185.25.65.24) by server-8.tower-27.messagelabs.com with RC4-SHA encrypted SMTP; 20 Mar 2015 15:18:28 -0000 X-IronPort-AV: E=Sophos;i="5.11,437,1422921600"; d="scan'208,217";a="32989583" From: Lars Kurth To: =?utf-8?B?c2VjdXJpdHko5Lia5Yqh6LSm5Y+3KQ==?= , predisclosure-applications Thread-Topic: [Predisclosure-applications] apply to join the Predisclosure list Thread-Index: AQHQYyEdSuSSJ5z0xES2N+kcpl4qdw== Date: Fri, 20 Mar 2015 15:18:28 +0000 Message-ID: Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.5.141003 MIME-Version: 1.0 X-DLP: AMS1 Subject: Re: [Predisclosure-applications] apply to join the Predisclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============8272164652983050538==" Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org --===============8272164652983050538== Content-Language: en-US Content-Type: multipart/alternative; boundary="_000_D131E6E9198EBlarskurthcitrixcom_" --_000_D131E6E9198EBlarskurthcitrixcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 RGVhciBwcmUtZGlzY2xvc3V0ZSBsaXN0IEFwcGxpY2FudCwNCg0KdGhhbmsgeW91IGZvciB0aGUg YXBwbGljYXRpb24uIE1heSBJIGFzayB5b3UgdG8gcmVhZCBodHRwOi8vd3d3LnhlbnByb2plY3Qu b3JnL3NlY3VyaXR5LXBvbGljeS5odG1sIGFuZCBwcm92aWRlICphbGwqIHRoZSBpbmZvcm1hdGlv biB0aGF0IGlzIHJlcXVpcmVkIGZvciBhIGNvbXBsZXRlIGFwcGxpY2F0aW9uLiBZb3UgY2FuIGZp bmQgdGhlIGluZm9ybWF0aW9uIHRoYXQgaXMgcmVxdWlyZWQgaW4gdGhlIHNlY3Rpb24gbGFiZWxs ZWQgIlByZWRpc2Nsb3N1cmUgbGlzdCBtZW1iZXJzaGlwIGFwcGxpY2F0aW9uIHByb2Nlc3MiIOKA piAiWW91IG11c3QgaW5jbHVkZSBpbiB0aGUgZS1tYWlsOiIuDQoNCkl0IGlzICp2ZXJ5IGltcG9y dGFudCogdGhhdCBmb3IgdGhlIHNlY3Rpb25zDQoqIEV2aWRlbmNlIG9mIHlvdXIgc3RhdHVzIGFz IGEgc2VydmljZS9zb2Z0d2FyZSBwcm92aWRlcg0KKiBFdmlkZW5jZSBvZiB5b3VyIHN0YXR1cyBh cyBhIHVzZXIvZGlzdHJpYnV0b3Igb2YgWGVuDQoqIEluZm9ybWF0aW9uIGFib3V0IHlvdXIgaGFu ZGxpbmcgb2Ygc2VjdXJpdHkgcHJvYmxlbXMNCg0K4oCmIHlvdSBwcm92aWRlIGxpbmsocykgdG8g cHVibGljIHdlYiBwYWdlcyB0aGF0IGNvbnRhaW4gdGhlIG5lY2Vzc2FyeSBpbmZvcm1hdGlvbi4g VGhlIGxpbmtzIHRvIHdlYiBwYWdlcyBjYW4gYmUgaW4gQ2hpbmVzZSAod2Ugd2lsbCBydW4gdGhl IHdlYiBwYWdlcyB0aHJvdWdoIGEgdHJhbnNsYXRpb24gc2VydmljZSkuIEl0IGRvZXMgaGVscCB1 cyB0aG91Z2gsIGlmIHlvdSBxdW90ZSByZWxldmFudCBzZWN0aW9ucyBvZiBsb25nZXIgd2ViIHBh Z2VzIGluIHRoZSBhcHBsaWNhdGlvbi4NCg0KWW91IGNhbiBmaW5kIGEgKnZlcnkqIGdvb2QgZXhh bXBsZSBvZiBhbiBhcHBsaWNhdGlvbiBhdCBodHRwOi8vbGlzdHMueGVucHJvamVjdC5vcmcvYXJj aGl2ZXMvaHRtbC9wcmVkaXNjbG9zdXJlLWFwcGxpY2F0aW9ucy8yMDE1LTAzL21zZzAwMDI4Lmh0 bWwuIFRoaXMgYXBwbGljYXRpb24gYWxzbyBpbmNsdWRlcyBxdW90ZXMgb2YgcmVsZXZhbnQgcGFn ZSBzZWN0aW9ucyBpbiB0aGUgYXBwbGljYXRpb24uDQoNCkJlc3QgUmVnYXJkcw0KTGFycw0KDQoN CkZyb206ICJzZWN1cml0eSAo5Lia5Yqh6LSm5Y+3KSIgPHNlY3VyaXR5QHRlbmNlbnQuY29tPG1h aWx0bzpzZWN1cml0eUB0ZW5jZW50LmNvbT4+DQpEYXRlOiBXZWRuZXNkYXksIDE4IE1hcmNoIDIw MTUgMDE6MDQNClRvOiBwcmVkaXNjbG9zdXJlLWFwcGxpY2F0aW9ucyA8cHJlZGlzY2xvc3VyZS1h cHBsaWNhdGlvbnNAbGlzdHMueGVucHJvamVjdC5vcmc8bWFpbHRvOnByZWRpc2Nsb3N1cmUtYXBw bGljYXRpb25zQGxpc3RzLnhlbnByb2plY3Qub3JnPj4NClN1YmplY3Q6IFtQcmVkaXNjbG9zdXJl LWFwcGxpY2F0aW9uc10gYXBwbHkgdG8gam9pbiB0aGUgUHJlZGlzY2xvc3VyZSBsaXN0DQoNCg0K aGksZGVhciB4ZW46DQoNCldlIGFyZSB0aGUgc2VjdXJpdHkgdGVhbSBvZiB0ZW5jZW50Lg0KDQpU aGUgRG9tYWluIHdoaWNoIHdlIHVzZSB0byBwcm92aWRlIFhlbiBzZXJ2aWNlcyBpcyBodHRwOi8v d3d3LnFjbG91ZC5jb20vLg0KDQpXZSBhcmUgb25lIHRoZSBiaWdlc3QgY2xvdWQgc2VydmljZSBw cm92aWRlciBpbiBjaGluYS4NCg0KV2Ugd2FudCB0byBqb2luIFByZWRpc2Nsb3N1cmUgbGlzdCwg d2UgaGF2ZSByZWFkIHRoaXMgcG9saWN5IGFuZCBhZ3JlZSB0byBhYmlkZSBieSB0aGUgdGVybXMg Zm9yIGluY2x1c2lvbiBpbiB0aGUgbGlzdC4NCg0KT3VyIGVtYWlsIHdlIHdpc2ggYWRkZWQgdG8g dGhlIHByZWRpc2Nsb3N1cmUgbGlzdCBpcyBzZWN1cml0eUB0ZW5jZW50LmNvbTxtYWlsdG86c2Vj dXJpdHlAdGVuY2VudC5jb20+Lg0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0K c2VjdXJpdHko5Lia5Yqh6LSm5Y+3KQ0K --_000_D131E6E9198EBlarskurthcitrixcom_ Content-Type: text/html; charset="utf-8" Content-ID: <6B01163849E32943A8F9E68876CA02BE@citrix.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiPg0KPGRpdiBzdHlsZT0iY29sb3I6IHJnYigwLCAwLCAw KTsiPjxmb250IGZhY2U9IkNhbGlicmkiPkRlYXIgcHJlLWRpc2Nsb3N1dGUgbGlzdCBBcHBsaWNh bnQsPC9mb250PjwvZGl2Pg0KPGRpdiBzdHlsZT0iY29sb3I6IHJnYigwLCAwLCAwKTsiPjxmb250 IGZhY2U9IkNhbGlicmkiPjxicj4NCjwvZm9udD48L2Rpdj4NCjxkaXYgc3R5bGU9ImNvbG9yOiBy Z2IoMCwgMCwgMCk7Ij48Zm9udCBmYWNlPSJDYWxpYnJpIj50aGFuayB5b3UgZm9yIHRoZSBhcHBs aWNhdGlvbi4gTWF5IEkgYXNrIHlvdSB0byByZWFkJm5ic3A7PGEgaHJlZj0iaHR0cDovL3d3dy54 ZW5wcm9qZWN0Lm9yZy9zZWN1cml0eS1wb2xpY3kuaHRtbCIgc3R5bGU9ImxpbmUtaGVpZ2h0OiAx LjU7Ij5odHRwOi8vd3d3LnhlbnByb2plY3Qub3JnL3NlY3VyaXR5LXBvbGljeS5odG1sPC9hPiZu YnNwO2FuZCBwcm92aWRlICphbGwqDQogdGhlIGluZm9ybWF0aW9uIHRoYXQgaXMgcmVxdWlyZWQg Zm9yIGEgY29tcGxldGUgYXBwbGljYXRpb24uIFlvdSBjYW4gZmluZCB0aGUgaW5mb3JtYXRpb24g dGhhdCBpcyByZXF1aXJlZCBpbiB0aGUgc2VjdGlvbiBsYWJlbGxlZCAmcXVvdDtQcmVkaXNjbG9z dXJlIGxpc3QgbWVtYmVyc2hpcCBhcHBsaWNhdGlvbiBwcm9jZXNzJnF1b3Q7IOKApiAmcXVvdDs8 c3BhbiBzdHlsZT0iY29sb3I6IHJnYig1MSwgNTEsIDUxKTsgbGluZS1oZWlnaHQ6IDE4cHg7IHdp ZG93czogMTsgYmFja2dyb3VuZC1jb2xvcjogcmdiKDI1NSwgMjU1LCAyNTUpOyI+WW91DQogbXVz dCBpbmNsdWRlIGluIHRoZSBlLW1haWw6JnF1b3Q7LiZuYnNwOzwvc3Bhbj48L2ZvbnQ+PC9kaXY+ DQo8ZGl2IHN0eWxlPSJjb2xvcjogcmdiKDAsIDAsIDApOyI+PGZvbnQgZmFjZT0iQ2FsaWJyaSI+ PHNwYW4gc3R5bGU9ImNvbG9yOiByZ2IoNTEsIDUxLCA1MSk7IGxpbmUtaGVpZ2h0OiAxOHB4OyB3 aWRvd3M6IDE7IGJhY2tncm91bmQtY29sb3I6IHJnYigyNTUsIDI1NSwgMjU1KTsiPjxicj4NCjwv c3Bhbj48L2ZvbnQ+PC9kaXY+DQo8ZGl2IHN0eWxlPSJjb2xvcjogcmdiKDAsIDAsIDApOyI+PGZv bnQgZmFjZT0iQ2FsaWJyaSI+PHNwYW4gc3R5bGU9ImNvbG9yOiByZ2IoNTEsIDUxLCA1MSk7IGxp bmUtaGVpZ2h0OiAxOHB4OyB3aWRvd3M6IDE7IGJhY2tncm91bmQtY29sb3I6IHJnYigyNTUsIDI1 NSwgMjU1KTsiPkl0IGlzICp2ZXJ5IGltcG9ydGFudCogdGhhdCBmb3IgdGhlIHNlY3Rpb25zPC9z cGFuPjwvZm9udD48L2Rpdj4NCjxkaXYgc3R5bGU9ImNvbG9yOiByZ2IoMCwgMCwgMCk7Ij48c3Bh biBzdHlsZT0iZm9udC1mYW1pbHk6IENhbGlicmk7IGZvbnQtc2l6ZTogMTAuNXB0OyBsaW5lLWhl aWdodDogMS41OyI+KiBFdmlkZW5jZSBvZiB5b3VyIHN0YXR1cyBhcyBhIHNlcnZpY2Uvc29mdHdh cmUgcHJvdmlkZXI8L3NwYW4+PC9kaXY+DQo8ZGl2IHN0eWxlPSJjb2xvcjogcmdiKDAsIDAsIDAp OyI+DQo8ZGl2Pg0KPGRpdj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IENhbGlicmk7IGZvbnQt c2l6ZTogMTAuNXB0OyBsaW5lLWhlaWdodDogMS41OyI+KiBFdmlkZW5jZSBvZiB5b3VyIHN0YXR1 cyBhcyBhIHVzZXIvZGlzdHJpYnV0b3Igb2YgWGVuPC9zcGFuPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2 Pg0KPGRpdj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IENhbGlicmk7IGNvbG9yOiByZ2IoNTEs IDUxLCA1MSk7IGxpbmUtaGVpZ2h0OiAxOHB4OyB3aWRvd3M6IDE7IGZvbnQtc2l6ZTogMTAuNXB0 OyBiYWNrZ3JvdW5kLWNvbG9yOiByZ2IoMjU1LCAyNTQsIDI1NCk7Ij4qJm5ic3A7PC9zcGFuPjxz cGFuIHN0eWxlPSJmb250LWZhbWlseTogQ2FsaWJyaTsgY29sb3I6IHJnYig1MSwgNTEsIDUxKTsg bGluZS1oZWlnaHQ6IDE4cHg7IHdpZG93czogMTsgYmFja2dyb3VuZC1jb2xvcjogcmdiKDI1NSwg MjU1LCAyNTUpOyBmb250LXNpemU6IDEwLjVwdDsiPkluZm9ybWF0aW9uDQogYWJvdXQgeW91ciBo YW5kbGluZyBvZiBzZWN1cml0eSBwcm9ibGVtczwvc3Bhbj48L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+ DQo8ZGl2IHN0eWxlPSJ3aWRvd3M6IDE7Ij48Zm9udCBjb2xvcj0iIzMzMzMzMyIgZmFjZT0iQ2Fs aWJyaSI+PHNwYW4gc3R5bGU9ImxpbmUtaGVpZ2h0OiAxOHB4OyI+PGJyPg0KPC9zcGFuPjwvZm9u dD48L2Rpdj4NCjxkaXYgc3R5bGU9IndpZG93czogMTsiPjxmb250IGNvbG9yPSIjMzMzMzMzIiBm YWNlPSJDYWxpYnJpIj48c3BhbiBzdHlsZT0ibGluZS1oZWlnaHQ6IDE4cHg7Ij7igKYgeTwvc3Bh bj48L2ZvbnQ+PHNwYW4gc3R5bGU9IndpZG93czogMTsgYmFja2dyb3VuZC1jb2xvcjogcmdiKDI1 NSwgMjU1LCAyNTUpOyI+PGZvbnQgY29sb3I9IiMzMzMzMzMiIGZhY2U9IkNhbGlicmkiIHNpemU9 IjMiPjxzcGFuIHN0eWxlPSJsaW5lLWhlaWdodDogMThweDsiPm91Jm5ic3A7PC9zcGFuPjwvZm9u dD48Zm9udCBjb2xvcj0iIzMzMzMzMyIgZmFjZT0iQ2FsaWJyaSI+PHNwYW4gc3R5bGU9ImxpbmUt aGVpZ2h0OiAxOHB4OyI+cHJvdmlkZTwvc3Bhbj48L2ZvbnQ+PGZvbnQgY29sb3I9IiMzMzMzMzMi IGZhY2U9IkNhbGlicmkiIHNpemU9IjMiPjxzcGFuIHN0eWxlPSJsaW5lLWhlaWdodDogMThweDsi PiZuYnNwO2xpbmsocykNCiB0byBwdWJsaWMgd2ViIHBhZ2VzIHRoYXQgY29udGFpbiB0aGUgbmVj ZXNzYXJ5IGluZm9ybWF0aW9uLiBUaGUgbGlua3MgdG8gd2ViIHBhZ2VzIGNhbiBiZSBpbiBDaGlu ZXNlICh3ZSB3aWxsIHJ1biB0aGUgd2ViIHBhZ2VzIHRocm91Z2ggYSB0cmFuc2xhdGlvbiBzZXJ2 aWNlKS4gSXQgZG9lcyBoZWxwIHVzIHRob3VnaCwgaWYgeW91IHF1b3RlIHJlbGV2YW50IHNlY3Rp b25zIG9mIGxvbmdlciB3ZWIgcGFnZXMgaW4gdGhlIGFwcGxpY2F0aW9uLiAmbmJzcDs8L3NwYW4+ PC9mb250Pjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9IndpZG93czogMTsiPjxzcGFuIHN0eWxl PSJ3aWRvd3M6IDE7IGJhY2tncm91bmQtY29sb3I6IHJnYigyNTUsIDI1NSwgMjU1KTsiPjxmb250 IGNvbG9yPSIjMzMzMzMzIiBmYWNlPSJDYWxpYnJpIiBzaXplPSIzIj48c3BhbiBzdHlsZT0ibGlu ZS1oZWlnaHQ6IDE4cHg7Ij48YnI+DQo8L3NwYW4+PC9mb250Pjwvc3Bhbj48L2Rpdj4NCjxkaXYg c3R5bGU9IndpZG93czogMTsiPjxzcGFuIHN0eWxlPSJ3aWRvd3M6IDE7Ij48Zm9udCBjb2xvcj0i IzMzMzMzMyIgZmFjZT0iQ2FsaWJyaSIgc2l6ZT0iMyI+PHNwYW4gc3R5bGU9ImxpbmUtaGVpZ2h0 OiAxOHB4OyBiYWNrZ3JvdW5kLWNvbG9yOiByZ2IoMjU1LCAyNTQsIDI1NCk7Ij5Zb3UgY2FuIGZp bmQgYSAqdmVyeSogZ29vZCBleGFtcGxlIG9mIGFuIGFwcGxpY2F0aW9uIGF0Jm5ic3A7PC9zcGFu PjwvZm9udD48L3NwYW4+PGEgaHJlZj0iaHR0cDovL2xpc3RzLnhlbnByb2plY3Qub3JnL2FyY2hp dmVzL2h0bWwvcHJlZGlzY2xvc3VyZS1hcHBsaWNhdGlvbnMvMjAxNS0wMy9tc2cwMDAyOC5odG1s IiBzdHlsZT0iZm9udC1zaXplOiAxMC41cHQ7IGxpbmUtaGVpZ2h0OiAxLjU7Ij5odHRwOi8vbGlz dHMueGVucHJvamVjdC5vcmcvYXJjaGl2ZXMvaHRtbC9wcmVkaXNjbG9zdXJlLWFwcGxpY2F0aW9u cy8yMDE1LTAzL21zZzAwMDI4Lmh0bWw8L2E+Lg0KIFRoaXMgYXBwbGljYXRpb24gYWxzbyBpbmNs dWRlcyZuYnNwO3F1b3RlcyBvZiByZWxldmFudCBwYWdlIHNlY3Rpb25zIGluIHRoZSBhcHBsaWNh dGlvbi48L2Rpdj4NCjxkaXYgc3R5bGU9IndpZG93czogMTsiPjxicj4NCjwvZGl2Pg0KPGRpdiBz dHlsZT0id2lkb3dzOiAxOyI+QmVzdCBSZWdhcmRzPC9kaXY+DQo8ZGl2IHN0eWxlPSJ3aWRvd3M6 IDE7Ij5MYXJzPC9kaXY+DQo8ZGl2IHN0eWxlPSJjb2xvcjogcmdiKDAsIDAsIDApOyBmb250LXNp emU6IDE0cHg7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyI+DQo8YnI+DQo8L2Rp dj4NCjxkaXYgc3R5bGU9ImNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtc2l6ZTogMTRweDsgZm9u dC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7Ij4NCjxzcGFuIHN0eWxlPSJsaW5lLWhlaWdo dDogMS41OyI+Jm5ic3A7PC9zcGFuPjwvZGl2Pg0KPHNwYW4gaWQ9Ik9MS19TUkNfQk9EWV9TRUNU SU9OIiBzdHlsZT0iY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1zaXplOiAxNHB4OyBmb250LWZh bWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiPg0KPGRpdiBzdHlsZT0iZm9udC1mYW1pbHk6Q2Fs aWJyaTsgZm9udC1zaXplOjExcHQ7IHRleHQtYWxpZ246bGVmdDsgY29sb3I6YmxhY2s7IEJPUkRF Ui1CT1RUT006IG1lZGl1bSBub25lOyBCT1JERVItTEVGVDogbWVkaXVtIG5vbmU7IFBBRERJTkct Qk9UVE9NOiAwaW47IFBBRERJTkctTEVGVDogMGluOyBQQURESU5HLVJJR0hUOiAwaW47IEJPUkRF Ui1UT1A6ICNiNWM0ZGYgMXB0IHNvbGlkOyBCT1JERVItUklHSFQ6IG1lZGl1bSBub25lOyBQQURE SU5HLVRPUDogM3B0Ij4NCjxzcGFuIHN0eWxlPSJmb250LXdlaWdodDpib2xkIj5Gcm9tOiA8L3Nw YW4+JnF1b3Q7c2VjdXJpdHkgKOS4muWKoei0puWPtykmcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0 bzpzZWN1cml0eUB0ZW5jZW50LmNvbSI+c2VjdXJpdHlAdGVuY2VudC5jb208L2E+Jmd0Ozxicj4N CjxzcGFuIHN0eWxlPSJmb250LXdlaWdodDpib2xkIj5EYXRlOiA8L3NwYW4+V2VkbmVzZGF5LCAx OCBNYXJjaCAyMDE1IDAxOjA0PGJyPg0KPHNwYW4gc3R5bGU9ImZvbnQtd2VpZ2h0OmJvbGQiPlRv OiA8L3NwYW4+cHJlZGlzY2xvc3VyZS1hcHBsaWNhdGlvbnMgJmx0OzxhIGhyZWY9Im1haWx0bzpw cmVkaXNjbG9zdXJlLWFwcGxpY2F0aW9uc0BsaXN0cy54ZW5wcm9qZWN0Lm9yZyI+cHJlZGlzY2xv c3VyZS1hcHBsaWNhdGlvbnNAbGlzdHMueGVucHJvamVjdC5vcmc8L2E+Jmd0Ozxicj4NCjxzcGFu IHN0eWxlPSJmb250LXdlaWdodDpib2xkIj5TdWJqZWN0OiA8L3NwYW4+W1ByZWRpc2Nsb3N1cmUt YXBwbGljYXRpb25zXSBhcHBseSB0byBqb2luIHRoZSBQcmVkaXNjbG9zdXJlIGxpc3Q8YnI+DQo8 L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2PjxzdHlsZT5ib2R5IHsgbGluZS1oZWlnaHQ6 IDEuNTsgfWJvZHkgeyBmb250LXNpemU6IDEwLjVwdDsgZm9udC1mYW1pbHk6IOW+rui9r+mbhem7 kTsgY29sb3I6IHJnYigwLCAwLCAwKTsgbGluZS1oZWlnaHQ6IDEuNTsgfTwvc3R5bGU+DQo8ZGl2 Pg0KPGRpdj48c3Bhbj48L3NwYW4+PGJyPg0KPC9kaXY+DQo8ZGl2PjxzcGFuIHN0eWxlPSJiYWNr Z3JvdW5kLWNvbG9yOiByZ2JhKDAsIDAsIDAsIDApOyI+aGksZGVhciB4ZW46IDxicj4NCjxicj4N CldlIGFyZSB0aGUgc2VjdXJpdHkgdGVhbSBvZiB0ZW5jZW50LiA8YnI+DQo8YnI+DQpUaGUgRG9t YWluIHdoaWNoIHdlIHVzZSB0byBwcm92aWRlIFhlbiBzZXJ2aWNlcyBpcyZuYnNwOzwvc3Bhbj48 YSBocmVmPSJodHRwOi8vd3d3LnFjbG91ZC5jb20vIj5odHRwOi8vd3d3LnFjbG91ZC5jb20vPC9h PjxzcGFuIHN0eWxlPSJiYWNrZ3JvdW5kLWNvbG9yOiByZ2JhKDAsIDAsIDAsIDApOyI+Lg0KPGJy Pg0KPGJyPg0KV2UgYXJlIG9uZSB0aGUgYmlnZXN0IGNsb3VkIHNlcnZpY2UgcHJvdmlkZXIgaW4g Y2hpbmEuIDxicj4NCjxicj4NCldlIHdhbnQgdG8gam9pbiBQcmVkaXNjbG9zdXJlIGxpc3QsIHdl IGhhdmUgcmVhZCB0aGlzIHBvbGljeSBhbmQgYWdyZWUgdG8gYWJpZGUgYnkgdGhlIHRlcm1zIGZv ciBpbmNsdXNpb24gaW4gdGhlIGxpc3QuDQo8YnI+DQo8YnI+DQpPdXIgZW1haWwgd2Ugd2lzaCBh ZGRlZCB0byB0aGUgcHJlZGlzY2xvc3VyZSBsaXN0IGlzIDxhIGhyZWY9Im1haWx0bzpzZWN1cml0 eUB0ZW5jZW50LmNvbSI+DQpzZWN1cml0eUB0ZW5jZW50LmNvbTwvYT4uPC9zcGFuPjwvZGl2Pg0K PHNwYW4gc3R5bGU9ImJhY2tncm91bmQtY29sb3I6IHJnYmEoMCwgMCwgMCwgMCk7Ij48L3NwYW4+ DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPGhyIHN0eWxlPSJXSURUSDogMjEwcHg7IEhFSUdIVDogMXB4 IiBjb2xvcj0iI2I1YzRkZiIgc2l6ZT0iMSIgYWxpZ249ImxlZnQiPg0KPGRpdj48c3Bhbj4NCjxk aXYgc3R5bGU9Ik1BUkdJTjogMTBweDsgRk9OVC1GQU1JTFk6IHZlcmRhbmE7IEZPTlQtU0laRTog MTBwdCI+DQo8ZGl2PnNlY3VyaXR5KOS4muWKoei0puWPtyk8L2Rpdj4NCjwvZGl2Pg0KPC9zcGFu PjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvc3Bhbj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_D131E6E9198EBlarskurthcitrixcom_-- --===============8272164652983050538== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications --===============8272164652983050538==-- From predisclosure-applications-bounces@lists.xenproject.org Fri Mar 20 15:18:32 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Fri, 20 Mar 2015 15:18:32 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YYygy-0006Ru-L5; Fri, 20 Mar 2015 15:18:32 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YYygx-0006RP-6G for predisclosure-applications@lists.xenproject.org; Fri, 20 Mar 2015 15:18:31 +0000 Received: from [193.109.254.147] by server-13.bemta-14.messagelabs.com id 3B/84-23283-64A3C055; Fri, 20 Mar 2015 15:18:30 +0000 X-Env-Sender: lars.kurth@citrix.com X-Msg-Ref: server-8.tower-27.messagelabs.com!1426864708!11898406!1 X-Originating-IP: [185.25.65.24] X-SpamReason: No, hits=0.0 required=7.0 tests=HTML_MESSAGE, received_headers: No Received headers X-StarScan-Received: X-StarScan-Version: 6.13.6; banners=-,-,- X-VirusChecked: Checked Received: (qmail 26841 invoked from network); 20 Mar 2015 15:18:28 -0000 Received: from smtp.ctxuk.citrix.com (HELO SMTP.EU.CITRIX.COM) (185.25.65.24) by server-8.tower-27.messagelabs.com with RC4-SHA encrypted SMTP; 20 Mar 2015 15:18:28 -0000 X-IronPort-AV: E=Sophos;i="5.11,437,1422921600"; d="scan'208,217";a="32989583" From: Lars Kurth To: =?utf-8?B?c2VjdXJpdHko5Lia5Yqh6LSm5Y+3KQ==?= , predisclosure-applications Thread-Topic: [Predisclosure-applications] apply to join the Predisclosure list Thread-Index: AQHQYyEdSuSSJ5z0xES2N+kcpl4qdw== Date: Fri, 20 Mar 2015 15:18:28 +0000 Message-ID: Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.5.141003 MIME-Version: 1.0 X-DLP: AMS1 Subject: Re: [Predisclosure-applications] apply to join the Predisclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============8272164652983050538==" Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org --===============8272164652983050538== Content-Language: en-US Content-Type: multipart/alternative; boundary="_000_D131E6E9198EBlarskurthcitrixcom_" --_000_D131E6E9198EBlarskurthcitrixcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 RGVhciBwcmUtZGlzY2xvc3V0ZSBsaXN0IEFwcGxpY2FudCwNCg0KdGhhbmsgeW91IGZvciB0aGUg YXBwbGljYXRpb24uIE1heSBJIGFzayB5b3UgdG8gcmVhZCBodHRwOi8vd3d3LnhlbnByb2plY3Qu b3JnL3NlY3VyaXR5LXBvbGljeS5odG1sIGFuZCBwcm92aWRlICphbGwqIHRoZSBpbmZvcm1hdGlv biB0aGF0IGlzIHJlcXVpcmVkIGZvciBhIGNvbXBsZXRlIGFwcGxpY2F0aW9uLiBZb3UgY2FuIGZp bmQgdGhlIGluZm9ybWF0aW9uIHRoYXQgaXMgcmVxdWlyZWQgaW4gdGhlIHNlY3Rpb24gbGFiZWxs ZWQgIlByZWRpc2Nsb3N1cmUgbGlzdCBtZW1iZXJzaGlwIGFwcGxpY2F0aW9uIHByb2Nlc3MiIOKA piAiWW91IG11c3QgaW5jbHVkZSBpbiB0aGUgZS1tYWlsOiIuDQoNCkl0IGlzICp2ZXJ5IGltcG9y dGFudCogdGhhdCBmb3IgdGhlIHNlY3Rpb25zDQoqIEV2aWRlbmNlIG9mIHlvdXIgc3RhdHVzIGFz IGEgc2VydmljZS9zb2Z0d2FyZSBwcm92aWRlcg0KKiBFdmlkZW5jZSBvZiB5b3VyIHN0YXR1cyBh cyBhIHVzZXIvZGlzdHJpYnV0b3Igb2YgWGVuDQoqIEluZm9ybWF0aW9uIGFib3V0IHlvdXIgaGFu ZGxpbmcgb2Ygc2VjdXJpdHkgcHJvYmxlbXMNCg0K4oCmIHlvdSBwcm92aWRlIGxpbmsocykgdG8g cHVibGljIHdlYiBwYWdlcyB0aGF0IGNvbnRhaW4gdGhlIG5lY2Vzc2FyeSBpbmZvcm1hdGlvbi4g VGhlIGxpbmtzIHRvIHdlYiBwYWdlcyBjYW4gYmUgaW4gQ2hpbmVzZSAod2Ugd2lsbCBydW4gdGhl IHdlYiBwYWdlcyB0aHJvdWdoIGEgdHJhbnNsYXRpb24gc2VydmljZSkuIEl0IGRvZXMgaGVscCB1 cyB0aG91Z2gsIGlmIHlvdSBxdW90ZSByZWxldmFudCBzZWN0aW9ucyBvZiBsb25nZXIgd2ViIHBh Z2VzIGluIHRoZSBhcHBsaWNhdGlvbi4NCg0KWW91IGNhbiBmaW5kIGEgKnZlcnkqIGdvb2QgZXhh bXBsZSBvZiBhbiBhcHBsaWNhdGlvbiBhdCBodHRwOi8vbGlzdHMueGVucHJvamVjdC5vcmcvYXJj aGl2ZXMvaHRtbC9wcmVkaXNjbG9zdXJlLWFwcGxpY2F0aW9ucy8yMDE1LTAzL21zZzAwMDI4Lmh0 bWwuIFRoaXMgYXBwbGljYXRpb24gYWxzbyBpbmNsdWRlcyBxdW90ZXMgb2YgcmVsZXZhbnQgcGFn ZSBzZWN0aW9ucyBpbiB0aGUgYXBwbGljYXRpb24uDQoNCkJlc3QgUmVnYXJkcw0KTGFycw0KDQoN CkZyb206ICJzZWN1cml0eSAo5Lia5Yqh6LSm5Y+3KSIgPHNlY3VyaXR5QHRlbmNlbnQuY29tPG1h aWx0bzpzZWN1cml0eUB0ZW5jZW50LmNvbT4+DQpEYXRlOiBXZWRuZXNkYXksIDE4IE1hcmNoIDIw MTUgMDE6MDQNClRvOiBwcmVkaXNjbG9zdXJlLWFwcGxpY2F0aW9ucyA8cHJlZGlzY2xvc3VyZS1h cHBsaWNhdGlvbnNAbGlzdHMueGVucHJvamVjdC5vcmc8bWFpbHRvOnByZWRpc2Nsb3N1cmUtYXBw bGljYXRpb25zQGxpc3RzLnhlbnByb2plY3Qub3JnPj4NClN1YmplY3Q6IFtQcmVkaXNjbG9zdXJl LWFwcGxpY2F0aW9uc10gYXBwbHkgdG8gam9pbiB0aGUgUHJlZGlzY2xvc3VyZSBsaXN0DQoNCg0K aGksZGVhciB4ZW46DQoNCldlIGFyZSB0aGUgc2VjdXJpdHkgdGVhbSBvZiB0ZW5jZW50Lg0KDQpU aGUgRG9tYWluIHdoaWNoIHdlIHVzZSB0byBwcm92aWRlIFhlbiBzZXJ2aWNlcyBpcyBodHRwOi8v d3d3LnFjbG91ZC5jb20vLg0KDQpXZSBhcmUgb25lIHRoZSBiaWdlc3QgY2xvdWQgc2VydmljZSBw cm92aWRlciBpbiBjaGluYS4NCg0KV2Ugd2FudCB0byBqb2luIFByZWRpc2Nsb3N1cmUgbGlzdCwg d2UgaGF2ZSByZWFkIHRoaXMgcG9saWN5IGFuZCBhZ3JlZSB0byBhYmlkZSBieSB0aGUgdGVybXMg Zm9yIGluY2x1c2lvbiBpbiB0aGUgbGlzdC4NCg0KT3VyIGVtYWlsIHdlIHdpc2ggYWRkZWQgdG8g dGhlIHByZWRpc2Nsb3N1cmUgbGlzdCBpcyBzZWN1cml0eUB0ZW5jZW50LmNvbTxtYWlsdG86c2Vj dXJpdHlAdGVuY2VudC5jb20+Lg0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0K c2VjdXJpdHko5Lia5Yqh6LSm5Y+3KQ0K --_000_D131E6E9198EBlarskurthcitrixcom_ Content-Type: text/html; charset="utf-8" Content-ID: <6B01163849E32943A8F9E68876CA02BE@citrix.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiPg0KPGRpdiBzdHlsZT0iY29sb3I6IHJnYigwLCAwLCAw KTsiPjxmb250IGZhY2U9IkNhbGlicmkiPkRlYXIgcHJlLWRpc2Nsb3N1dGUgbGlzdCBBcHBsaWNh bnQsPC9mb250PjwvZGl2Pg0KPGRpdiBzdHlsZT0iY29sb3I6IHJnYigwLCAwLCAwKTsiPjxmb250 IGZhY2U9IkNhbGlicmkiPjxicj4NCjwvZm9udD48L2Rpdj4NCjxkaXYgc3R5bGU9ImNvbG9yOiBy Z2IoMCwgMCwgMCk7Ij48Zm9udCBmYWNlPSJDYWxpYnJpIj50aGFuayB5b3UgZm9yIHRoZSBhcHBs aWNhdGlvbi4gTWF5IEkgYXNrIHlvdSB0byByZWFkJm5ic3A7PGEgaHJlZj0iaHR0cDovL3d3dy54 ZW5wcm9qZWN0Lm9yZy9zZWN1cml0eS1wb2xpY3kuaHRtbCIgc3R5bGU9ImxpbmUtaGVpZ2h0OiAx LjU7Ij5odHRwOi8vd3d3LnhlbnByb2plY3Qub3JnL3NlY3VyaXR5LXBvbGljeS5odG1sPC9hPiZu YnNwO2FuZCBwcm92aWRlICphbGwqDQogdGhlIGluZm9ybWF0aW9uIHRoYXQgaXMgcmVxdWlyZWQg Zm9yIGEgY29tcGxldGUgYXBwbGljYXRpb24uIFlvdSBjYW4gZmluZCB0aGUgaW5mb3JtYXRpb24g dGhhdCBpcyByZXF1aXJlZCBpbiB0aGUgc2VjdGlvbiBsYWJlbGxlZCAmcXVvdDtQcmVkaXNjbG9z dXJlIGxpc3QgbWVtYmVyc2hpcCBhcHBsaWNhdGlvbiBwcm9jZXNzJnF1b3Q7IOKApiAmcXVvdDs8 c3BhbiBzdHlsZT0iY29sb3I6IHJnYig1MSwgNTEsIDUxKTsgbGluZS1oZWlnaHQ6IDE4cHg7IHdp ZG93czogMTsgYmFja2dyb3VuZC1jb2xvcjogcmdiKDI1NSwgMjU1LCAyNTUpOyI+WW91DQogbXVz dCBpbmNsdWRlIGluIHRoZSBlLW1haWw6JnF1b3Q7LiZuYnNwOzwvc3Bhbj48L2ZvbnQ+PC9kaXY+ DQo8ZGl2IHN0eWxlPSJjb2xvcjogcmdiKDAsIDAsIDApOyI+PGZvbnQgZmFjZT0iQ2FsaWJyaSI+ PHNwYW4gc3R5bGU9ImNvbG9yOiByZ2IoNTEsIDUxLCA1MSk7IGxpbmUtaGVpZ2h0OiAxOHB4OyB3 aWRvd3M6IDE7IGJhY2tncm91bmQtY29sb3I6IHJnYigyNTUsIDI1NSwgMjU1KTsiPjxicj4NCjwv c3Bhbj48L2ZvbnQ+PC9kaXY+DQo8ZGl2IHN0eWxlPSJjb2xvcjogcmdiKDAsIDAsIDApOyI+PGZv bnQgZmFjZT0iQ2FsaWJyaSI+PHNwYW4gc3R5bGU9ImNvbG9yOiByZ2IoNTEsIDUxLCA1MSk7IGxp bmUtaGVpZ2h0OiAxOHB4OyB3aWRvd3M6IDE7IGJhY2tncm91bmQtY29sb3I6IHJnYigyNTUsIDI1 NSwgMjU1KTsiPkl0IGlzICp2ZXJ5IGltcG9ydGFudCogdGhhdCBmb3IgdGhlIHNlY3Rpb25zPC9z cGFuPjwvZm9udD48L2Rpdj4NCjxkaXYgc3R5bGU9ImNvbG9yOiByZ2IoMCwgMCwgMCk7Ij48c3Bh biBzdHlsZT0iZm9udC1mYW1pbHk6IENhbGlicmk7IGZvbnQtc2l6ZTogMTAuNXB0OyBsaW5lLWhl aWdodDogMS41OyI+KiBFdmlkZW5jZSBvZiB5b3VyIHN0YXR1cyBhcyBhIHNlcnZpY2Uvc29mdHdh cmUgcHJvdmlkZXI8L3NwYW4+PC9kaXY+DQo8ZGl2IHN0eWxlPSJjb2xvcjogcmdiKDAsIDAsIDAp OyI+DQo8ZGl2Pg0KPGRpdj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IENhbGlicmk7IGZvbnQt c2l6ZTogMTAuNXB0OyBsaW5lLWhlaWdodDogMS41OyI+KiBFdmlkZW5jZSBvZiB5b3VyIHN0YXR1 cyBhcyBhIHVzZXIvZGlzdHJpYnV0b3Igb2YgWGVuPC9zcGFuPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2 Pg0KPGRpdj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IENhbGlicmk7IGNvbG9yOiByZ2IoNTEs IDUxLCA1MSk7IGxpbmUtaGVpZ2h0OiAxOHB4OyB3aWRvd3M6IDE7IGZvbnQtc2l6ZTogMTAuNXB0 OyBiYWNrZ3JvdW5kLWNvbG9yOiByZ2IoMjU1LCAyNTQsIDI1NCk7Ij4qJm5ic3A7PC9zcGFuPjxz cGFuIHN0eWxlPSJmb250LWZhbWlseTogQ2FsaWJyaTsgY29sb3I6IHJnYig1MSwgNTEsIDUxKTsg bGluZS1oZWlnaHQ6IDE4cHg7IHdpZG93czogMTsgYmFja2dyb3VuZC1jb2xvcjogcmdiKDI1NSwg MjU1LCAyNTUpOyBmb250LXNpemU6IDEwLjVwdDsiPkluZm9ybWF0aW9uDQogYWJvdXQgeW91ciBo YW5kbGluZyBvZiBzZWN1cml0eSBwcm9ibGVtczwvc3Bhbj48L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+ DQo8ZGl2IHN0eWxlPSJ3aWRvd3M6IDE7Ij48Zm9udCBjb2xvcj0iIzMzMzMzMyIgZmFjZT0iQ2Fs aWJyaSI+PHNwYW4gc3R5bGU9ImxpbmUtaGVpZ2h0OiAxOHB4OyI+PGJyPg0KPC9zcGFuPjwvZm9u dD48L2Rpdj4NCjxkaXYgc3R5bGU9IndpZG93czogMTsiPjxmb250IGNvbG9yPSIjMzMzMzMzIiBm YWNlPSJDYWxpYnJpIj48c3BhbiBzdHlsZT0ibGluZS1oZWlnaHQ6IDE4cHg7Ij7igKYgeTwvc3Bh bj48L2ZvbnQ+PHNwYW4gc3R5bGU9IndpZG93czogMTsgYmFja2dyb3VuZC1jb2xvcjogcmdiKDI1 NSwgMjU1LCAyNTUpOyI+PGZvbnQgY29sb3I9IiMzMzMzMzMiIGZhY2U9IkNhbGlicmkiIHNpemU9 IjMiPjxzcGFuIHN0eWxlPSJsaW5lLWhlaWdodDogMThweDsiPm91Jm5ic3A7PC9zcGFuPjwvZm9u dD48Zm9udCBjb2xvcj0iIzMzMzMzMyIgZmFjZT0iQ2FsaWJyaSI+PHNwYW4gc3R5bGU9ImxpbmUt aGVpZ2h0OiAxOHB4OyI+cHJvdmlkZTwvc3Bhbj48L2ZvbnQ+PGZvbnQgY29sb3I9IiMzMzMzMzMi IGZhY2U9IkNhbGlicmkiIHNpemU9IjMiPjxzcGFuIHN0eWxlPSJsaW5lLWhlaWdodDogMThweDsi PiZuYnNwO2xpbmsocykNCiB0byBwdWJsaWMgd2ViIHBhZ2VzIHRoYXQgY29udGFpbiB0aGUgbmVj ZXNzYXJ5IGluZm9ybWF0aW9uLiBUaGUgbGlua3MgdG8gd2ViIHBhZ2VzIGNhbiBiZSBpbiBDaGlu ZXNlICh3ZSB3aWxsIHJ1biB0aGUgd2ViIHBhZ2VzIHRocm91Z2ggYSB0cmFuc2xhdGlvbiBzZXJ2 aWNlKS4gSXQgZG9lcyBoZWxwIHVzIHRob3VnaCwgaWYgeW91IHF1b3RlIHJlbGV2YW50IHNlY3Rp b25zIG9mIGxvbmdlciB3ZWIgcGFnZXMgaW4gdGhlIGFwcGxpY2F0aW9uLiAmbmJzcDs8L3NwYW4+ PC9mb250Pjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9IndpZG93czogMTsiPjxzcGFuIHN0eWxl PSJ3aWRvd3M6IDE7IGJhY2tncm91bmQtY29sb3I6IHJnYigyNTUsIDI1NSwgMjU1KTsiPjxmb250 IGNvbG9yPSIjMzMzMzMzIiBmYWNlPSJDYWxpYnJpIiBzaXplPSIzIj48c3BhbiBzdHlsZT0ibGlu ZS1oZWlnaHQ6IDE4cHg7Ij48YnI+DQo8L3NwYW4+PC9mb250Pjwvc3Bhbj48L2Rpdj4NCjxkaXYg c3R5bGU9IndpZG93czogMTsiPjxzcGFuIHN0eWxlPSJ3aWRvd3M6IDE7Ij48Zm9udCBjb2xvcj0i IzMzMzMzMyIgZmFjZT0iQ2FsaWJyaSIgc2l6ZT0iMyI+PHNwYW4gc3R5bGU9ImxpbmUtaGVpZ2h0 OiAxOHB4OyBiYWNrZ3JvdW5kLWNvbG9yOiByZ2IoMjU1LCAyNTQsIDI1NCk7Ij5Zb3UgY2FuIGZp bmQgYSAqdmVyeSogZ29vZCBleGFtcGxlIG9mIGFuIGFwcGxpY2F0aW9uIGF0Jm5ic3A7PC9zcGFu PjwvZm9udD48L3NwYW4+PGEgaHJlZj0iaHR0cDovL2xpc3RzLnhlbnByb2plY3Qub3JnL2FyY2hp dmVzL2h0bWwvcHJlZGlzY2xvc3VyZS1hcHBsaWNhdGlvbnMvMjAxNS0wMy9tc2cwMDAyOC5odG1s IiBzdHlsZT0iZm9udC1zaXplOiAxMC41cHQ7IGxpbmUtaGVpZ2h0OiAxLjU7Ij5odHRwOi8vbGlz dHMueGVucHJvamVjdC5vcmcvYXJjaGl2ZXMvaHRtbC9wcmVkaXNjbG9zdXJlLWFwcGxpY2F0aW9u cy8yMDE1LTAzL21zZzAwMDI4Lmh0bWw8L2E+Lg0KIFRoaXMgYXBwbGljYXRpb24gYWxzbyBpbmNs dWRlcyZuYnNwO3F1b3RlcyBvZiByZWxldmFudCBwYWdlIHNlY3Rpb25zIGluIHRoZSBhcHBsaWNh dGlvbi48L2Rpdj4NCjxkaXYgc3R5bGU9IndpZG93czogMTsiPjxicj4NCjwvZGl2Pg0KPGRpdiBz dHlsZT0id2lkb3dzOiAxOyI+QmVzdCBSZWdhcmRzPC9kaXY+DQo8ZGl2IHN0eWxlPSJ3aWRvd3M6 IDE7Ij5MYXJzPC9kaXY+DQo8ZGl2IHN0eWxlPSJjb2xvcjogcmdiKDAsIDAsIDApOyBmb250LXNp emU6IDE0cHg7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyI+DQo8YnI+DQo8L2Rp dj4NCjxkaXYgc3R5bGU9ImNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtc2l6ZTogMTRweDsgZm9u dC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7Ij4NCjxzcGFuIHN0eWxlPSJsaW5lLWhlaWdo dDogMS41OyI+Jm5ic3A7PC9zcGFuPjwvZGl2Pg0KPHNwYW4gaWQ9Ik9MS19TUkNfQk9EWV9TRUNU SU9OIiBzdHlsZT0iY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1zaXplOiAxNHB4OyBmb250LWZh bWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiPg0KPGRpdiBzdHlsZT0iZm9udC1mYW1pbHk6Q2Fs aWJyaTsgZm9udC1zaXplOjExcHQ7IHRleHQtYWxpZ246bGVmdDsgY29sb3I6YmxhY2s7IEJPUkRF Ui1CT1RUT006IG1lZGl1bSBub25lOyBCT1JERVItTEVGVDogbWVkaXVtIG5vbmU7IFBBRERJTkct Qk9UVE9NOiAwaW47IFBBRERJTkctTEVGVDogMGluOyBQQURESU5HLVJJR0hUOiAwaW47IEJPUkRF Ui1UT1A6ICNiNWM0ZGYgMXB0IHNvbGlkOyBCT1JERVItUklHSFQ6IG1lZGl1bSBub25lOyBQQURE SU5HLVRPUDogM3B0Ij4NCjxzcGFuIHN0eWxlPSJmb250LXdlaWdodDpib2xkIj5Gcm9tOiA8L3Nw YW4+JnF1b3Q7c2VjdXJpdHkgKOS4muWKoei0puWPtykmcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0 bzpzZWN1cml0eUB0ZW5jZW50LmNvbSI+c2VjdXJpdHlAdGVuY2VudC5jb208L2E+Jmd0Ozxicj4N CjxzcGFuIHN0eWxlPSJmb250LXdlaWdodDpib2xkIj5EYXRlOiA8L3NwYW4+V2VkbmVzZGF5LCAx OCBNYXJjaCAyMDE1IDAxOjA0PGJyPg0KPHNwYW4gc3R5bGU9ImZvbnQtd2VpZ2h0OmJvbGQiPlRv OiA8L3NwYW4+cHJlZGlzY2xvc3VyZS1hcHBsaWNhdGlvbnMgJmx0OzxhIGhyZWY9Im1haWx0bzpw cmVkaXNjbG9zdXJlLWFwcGxpY2F0aW9uc0BsaXN0cy54ZW5wcm9qZWN0Lm9yZyI+cHJlZGlzY2xv c3VyZS1hcHBsaWNhdGlvbnNAbGlzdHMueGVucHJvamVjdC5vcmc8L2E+Jmd0Ozxicj4NCjxzcGFu IHN0eWxlPSJmb250LXdlaWdodDpib2xkIj5TdWJqZWN0OiA8L3NwYW4+W1ByZWRpc2Nsb3N1cmUt YXBwbGljYXRpb25zXSBhcHBseSB0byBqb2luIHRoZSBQcmVkaXNjbG9zdXJlIGxpc3Q8YnI+DQo8 L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2PjxzdHlsZT5ib2R5IHsgbGluZS1oZWlnaHQ6 IDEuNTsgfWJvZHkgeyBmb250LXNpemU6IDEwLjVwdDsgZm9udC1mYW1pbHk6IOW+rui9r+mbhem7 kTsgY29sb3I6IHJnYigwLCAwLCAwKTsgbGluZS1oZWlnaHQ6IDEuNTsgfTwvc3R5bGU+DQo8ZGl2 Pg0KPGRpdj48c3Bhbj48L3NwYW4+PGJyPg0KPC9kaXY+DQo8ZGl2PjxzcGFuIHN0eWxlPSJiYWNr Z3JvdW5kLWNvbG9yOiByZ2JhKDAsIDAsIDAsIDApOyI+aGksZGVhciB4ZW46IDxicj4NCjxicj4N CldlIGFyZSB0aGUgc2VjdXJpdHkgdGVhbSBvZiB0ZW5jZW50LiA8YnI+DQo8YnI+DQpUaGUgRG9t YWluIHdoaWNoIHdlIHVzZSB0byBwcm92aWRlIFhlbiBzZXJ2aWNlcyBpcyZuYnNwOzwvc3Bhbj48 YSBocmVmPSJodHRwOi8vd3d3LnFjbG91ZC5jb20vIj5odHRwOi8vd3d3LnFjbG91ZC5jb20vPC9h PjxzcGFuIHN0eWxlPSJiYWNrZ3JvdW5kLWNvbG9yOiByZ2JhKDAsIDAsIDAsIDApOyI+Lg0KPGJy Pg0KPGJyPg0KV2UgYXJlIG9uZSB0aGUgYmlnZXN0IGNsb3VkIHNlcnZpY2UgcHJvdmlkZXIgaW4g Y2hpbmEuIDxicj4NCjxicj4NCldlIHdhbnQgdG8gam9pbiBQcmVkaXNjbG9zdXJlIGxpc3QsIHdl IGhhdmUgcmVhZCB0aGlzIHBvbGljeSBhbmQgYWdyZWUgdG8gYWJpZGUgYnkgdGhlIHRlcm1zIGZv ciBpbmNsdXNpb24gaW4gdGhlIGxpc3QuDQo8YnI+DQo8YnI+DQpPdXIgZW1haWwgd2Ugd2lzaCBh ZGRlZCB0byB0aGUgcHJlZGlzY2xvc3VyZSBsaXN0IGlzIDxhIGhyZWY9Im1haWx0bzpzZWN1cml0 eUB0ZW5jZW50LmNvbSI+DQpzZWN1cml0eUB0ZW5jZW50LmNvbTwvYT4uPC9zcGFuPjwvZGl2Pg0K PHNwYW4gc3R5bGU9ImJhY2tncm91bmQtY29sb3I6IHJnYmEoMCwgMCwgMCwgMCk7Ij48L3NwYW4+ DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPGhyIHN0eWxlPSJXSURUSDogMjEwcHg7IEhFSUdIVDogMXB4 IiBjb2xvcj0iI2I1YzRkZiIgc2l6ZT0iMSIgYWxpZ249ImxlZnQiPg0KPGRpdj48c3Bhbj4NCjxk aXYgc3R5bGU9Ik1BUkdJTjogMTBweDsgRk9OVC1GQU1JTFk6IHZlcmRhbmE7IEZPTlQtU0laRTog MTBwdCI+DQo8ZGl2PnNlY3VyaXR5KOS4muWKoei0puWPtyk8L2Rpdj4NCjwvZGl2Pg0KPC9zcGFu PjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvc3Bhbj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_D131E6E9198EBlarskurthcitrixcom_-- --===============8272164652983050538== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications --===============8272164652983050538==-- From predisclosure-applications-bounces@lists.xenproject.org Mon Mar 30 14:41:16 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Mon, 30 Mar 2015 14:41:16 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YcasN-0002Rd-Sz; Mon, 30 Mar 2015 14:41:15 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YcasL-0002RV-UW for predisclosure-applications@lists.xenproject.org; Mon, 30 Mar 2015 14:41:14 +0000 Received: from [85.158.139.211] by server-15.bemta-5.messagelabs.com id B8/C3-14044-98069155; Mon, 30 Mar 2015 14:41:13 +0000 X-Env-Sender: daniel@vollmar.net X-Msg-Ref: server-7.tower-206.messagelabs.com!1427726472!12680992!1 X-Originating-IP: [134.0.28.11] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.6; banners=-,-,- X-VirusChecked: Checked Received: (qmail 9137 invoked from network); 30 Mar 2015 14:41:12 -0000 Received: from mxout1.masterlogin.de (HELO mxout1.masterlogin.de) (134.0.28.11) by server-7.tower-206.messagelabs.com with DHE-RSA-AES256-SHA encrypted SMTP; 30 Mar 2015 14:41:12 -0000 Received: from mxbox2.ac.twooit.com (unknown [192.168.10.253]) by mxout1.masterlogin.de (Postfix) with ESMTP id D70811FD43 for ; Mon, 30 Mar 2015 16:41:11 +0200 (CEST) Received: from mailerdienst.de (unknown [192.168.10.253]) by mxbox2.ac.twooit.com (Postfix) with ESMTPA id 70BE75402D for ; Mon, 30 Mar 2015 16:41:11 +0200 (CEST) MIME-Version: 1.0 Date: Mon, 30 Mar 2015 16:41:14 +0200 From: daniel@vollmar.net To: predisclosure-applications@lists.xenproject.org Message-ID: <928168400d2ff4aa7dec6e909d1b6972@vollmar.net> X-Sender: daniel@vollmar.net User-Agent: Webmail/RCMAIL_VERSION DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=mailerdienst.de; s=dkim; t=1427726471; bh=+b/D/RhHog91qqGQtl/20hpw43f6hVBCGNTI5hcpP3s=; h=Date:From:To:Subject:From; b=h34lEgKix1zPIdwyDjxzhif4u/4V4LumVpQFbMnYafyprtAcP8W9EpGKUWSe0FPAD St8y1N39S16syVJRmi+i7g4XjXUWXlCoeZN+uJaIVcIHXHAXTQYJfKIwl85JCWwkXO HsN96/5E00WmCFu4R3cPbWNHB+FPnFMWcXSSXhpc= Subject: [Predisclosure-applications] Application for Pre-disclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org Dear Xen-team, my name is Daniel from www.vollmar.net Our official company name is: vollmar.net GmbH We want to become a member of your Pre-disclosure list. We are an internet service provider for B2B and B2C customers in Germany, Switzerland and Austria. Our main business is VM/VPS and dedicated server hosting. We are using Xen since around 2006 (XEN 3.0) and we have currently more than 2500 customers on our Xen virtualization platform. You will find our website under the following URL: http://www.vollmar.net/ Please do not hesitate to contact me if there is something unclear. Kind regards, Daniel --- vollmar.net GmbH Franzstr. 51 52064 Aachen, Germany _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Mon Mar 30 14:41:16 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Mon, 30 Mar 2015 14:41:16 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YcasN-0002Rd-Sz; Mon, 30 Mar 2015 14:41:15 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YcasL-0002RV-UW for predisclosure-applications@lists.xenproject.org; Mon, 30 Mar 2015 14:41:14 +0000 Received: from [85.158.139.211] by server-15.bemta-5.messagelabs.com id B8/C3-14044-98069155; Mon, 30 Mar 2015 14:41:13 +0000 X-Env-Sender: daniel@vollmar.net X-Msg-Ref: server-7.tower-206.messagelabs.com!1427726472!12680992!1 X-Originating-IP: [134.0.28.11] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.6; banners=-,-,- X-VirusChecked: Checked Received: (qmail 9137 invoked from network); 30 Mar 2015 14:41:12 -0000 Received: from mxout1.masterlogin.de (HELO mxout1.masterlogin.de) (134.0.28.11) by server-7.tower-206.messagelabs.com with DHE-RSA-AES256-SHA encrypted SMTP; 30 Mar 2015 14:41:12 -0000 Received: from mxbox2.ac.twooit.com (unknown [192.168.10.253]) by mxout1.masterlogin.de (Postfix) with ESMTP id D70811FD43 for ; Mon, 30 Mar 2015 16:41:11 +0200 (CEST) Received: from mailerdienst.de (unknown [192.168.10.253]) by mxbox2.ac.twooit.com (Postfix) with ESMTPA id 70BE75402D for ; Mon, 30 Mar 2015 16:41:11 +0200 (CEST) MIME-Version: 1.0 Date: Mon, 30 Mar 2015 16:41:14 +0200 From: daniel@vollmar.net To: predisclosure-applications@lists.xenproject.org Message-ID: <928168400d2ff4aa7dec6e909d1b6972@vollmar.net> X-Sender: daniel@vollmar.net User-Agent: Webmail/RCMAIL_VERSION DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=mailerdienst.de; s=dkim; t=1427726471; bh=+b/D/RhHog91qqGQtl/20hpw43f6hVBCGNTI5hcpP3s=; h=Date:From:To:Subject:From; b=h34lEgKix1zPIdwyDjxzhif4u/4V4LumVpQFbMnYafyprtAcP8W9EpGKUWSe0FPAD St8y1N39S16syVJRmi+i7g4XjXUWXlCoeZN+uJaIVcIHXHAXTQYJfKIwl85JCWwkXO HsN96/5E00WmCFu4R3cPbWNHB+FPnFMWcXSSXhpc= Subject: [Predisclosure-applications] Application for Pre-disclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org Dear Xen-team, my name is Daniel from www.vollmar.net Our official company name is: vollmar.net GmbH We want to become a member of your Pre-disclosure list. We are an internet service provider for B2B and B2C customers in Germany, Switzerland and Austria. Our main business is VM/VPS and dedicated server hosting. We are using Xen since around 2006 (XEN 3.0) and we have currently more than 2500 customers on our Xen virtualization platform. You will find our website under the following URL: http://www.vollmar.net/ Please do not hesitate to contact me if there is something unclear. Kind regards, Daniel --- vollmar.net GmbH Franzstr. 51 52064 Aachen, Germany _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Tue Mar 31 08:50:33 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Tue, 31 Mar 2015 08:50:33 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YcrsW-0004nX-J7; Tue, 31 Mar 2015 08:50:32 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YcrsU-0004nS-Tx for predisclosure-applications@lists.xenproject.org; Tue, 31 Mar 2015 08:50:31 +0000 Received: from [85.158.137.68] by server-17.bemta-3.messagelabs.com id 08/FA-14975-6DF5A155; Tue, 31 Mar 2015 08:50:30 +0000 X-Env-Sender: ijc@hellion.org.uk X-Msg-Ref: server-12.tower-31.messagelabs.com!1427791828!12488237!1 X-Originating-IP: [212.110.190.137] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.6; banners=-,-,- X-VirusChecked: Checked Received: (qmail 24474 invoked from network); 31 Mar 2015 08:50:29 -0000 Received: from benson.vm.bytemark.co.uk (HELO benson.vm.bytemark.co.uk) (212.110.190.137) by server-12.tower-31.messagelabs.com with DHE-RSA-AES128-SHA encrypted SMTP; 31 Mar 2015 08:50:29 -0000 Received: from [185.25.64.249] (helo=kazak) by benson.vm.bytemark.co.uk with esmtpsa (TLS1.2:RSA_AES_128_CBC_SHA1:128) (Exim 4.80) (envelope-from ) id 1YcrsS-00078a-HG; Tue, 31 Mar 2015 09:50:28 +0100 Message-ID: <1427791827.2115.10.camel@xen.org> From: Ian Campbell To: daniel@vollmar.net Date: Tue, 31 Mar 2015 09:50:27 +0100 In-Reply-To: <928168400d2ff4aa7dec6e909d1b6972@vollmar.net> References: <928168400d2ff4aa7dec6e909d1b6972@vollmar.net> X-Mailer: Evolution 3.12.9-1+b1 Mime-Version: 1.0 Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Application for Pre-disclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org On Mon, 2015-03-30 at 16:41 +0200, daniel@vollmar.net wrote: > Dear Xen-team, > > my name is Daniel from www.vollmar.net > Our official company name is: vollmar.net GmbH > > We want to become a member of your Pre-disclosure list. Hi Daniel, Please could you reread the policy[0] paying special attention to the "Predisclosure list membership application process" and provide all of the information which is requested there. Thanks, Ian. [0] http://www.xenproject.org/security-policy.html _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Tue Mar 31 08:50:33 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Tue, 31 Mar 2015 08:50:33 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YcrsW-0004nX-J7; Tue, 31 Mar 2015 08:50:32 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YcrsU-0004nS-Tx for predisclosure-applications@lists.xenproject.org; Tue, 31 Mar 2015 08:50:31 +0000 Received: from [85.158.137.68] by server-17.bemta-3.messagelabs.com id 08/FA-14975-6DF5A155; Tue, 31 Mar 2015 08:50:30 +0000 X-Env-Sender: ijc@hellion.org.uk X-Msg-Ref: server-12.tower-31.messagelabs.com!1427791828!12488237!1 X-Originating-IP: [212.110.190.137] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.6; banners=-,-,- X-VirusChecked: Checked Received: (qmail 24474 invoked from network); 31 Mar 2015 08:50:29 -0000 Received: from benson.vm.bytemark.co.uk (HELO benson.vm.bytemark.co.uk) (212.110.190.137) by server-12.tower-31.messagelabs.com with DHE-RSA-AES128-SHA encrypted SMTP; 31 Mar 2015 08:50:29 -0000 Received: from [185.25.64.249] (helo=kazak) by benson.vm.bytemark.co.uk with esmtpsa (TLS1.2:RSA_AES_128_CBC_SHA1:128) (Exim 4.80) (envelope-from ) id 1YcrsS-00078a-HG; Tue, 31 Mar 2015 09:50:28 +0100 Message-ID: <1427791827.2115.10.camel@xen.org> From: Ian Campbell To: daniel@vollmar.net Date: Tue, 31 Mar 2015 09:50:27 +0100 In-Reply-To: <928168400d2ff4aa7dec6e909d1b6972@vollmar.net> References: <928168400d2ff4aa7dec6e909d1b6972@vollmar.net> X-Mailer: Evolution 3.12.9-1+b1 Mime-Version: 1.0 Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Application for Pre-disclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org On Mon, 2015-03-30 at 16:41 +0200, daniel@vollmar.net wrote: > Dear Xen-team, > > my name is Daniel from www.vollmar.net > Our official company name is: vollmar.net GmbH > > We want to become a member of your Pre-disclosure list. Hi Daniel, Please could you reread the policy[0] paying special attention to the "Predisclosure list membership application process" and provide all of the information which is requested there. Thanks, Ian. [0] http://www.xenproject.org/security-policy.html _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Tue Mar 31 15:01:07 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Tue, 31 Mar 2015 15:01:07 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1Ycxf7-0004nW-Vo; Tue, 31 Mar 2015 15:01:05 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1Ycxf7-0004mj-1v for predisclosure-applications@lists.xenproject.org; Tue, 31 Mar 2015 15:01:05 +0000 Received: from [85.158.137.68] by server-1.bemta-3.messagelabs.com id DC/65-13265-9A6BA155; Tue, 31 Mar 2015 15:00:57 +0000 X-Env-Sender: daniel@vollmar.net X-Msg-Ref: server-8.tower-31.messagelabs.com!1427814056!12742174!1 X-Originating-IP: [134.0.28.12] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.6; banners=-,-,- X-VirusChecked: Checked Received: (qmail 29030 invoked from network); 31 Mar 2015 15:00:56 -0000 Received: from mxout2.masterlogin.de (HELO mxout2.masterlogin.de) (134.0.28.12) by server-8.tower-31.messagelabs.com with DHE-RSA-AES256-SHA encrypted SMTP; 31 Mar 2015 15:00:56 -0000 Received: from mxbox4.masterlogin.de (unknown [192.168.10.253]) by mxout2.masterlogin.de (Postfix) with ESMTP id 4CC245F8CA for ; Tue, 31 Mar 2015 17:00:56 +0200 (CEST) Received: from mailerdienst.de (unknown [192.168.10.253]) by mxbox4.masterlogin.de (Postfix) with ESMTPA id EDDD810 for ; Tue, 31 Mar 2015 17:00:55 +0200 (CEST) MIME-Version: 1.0 Content-Length: 3644 Date: Tue, 31 Mar 2015 17:00:58 +0200 From: daniel@vollmar.net To: predisclosure-applications@lists.xenproject.org In-Reply-To: <1427791827.2115.10.camel@xen.org> References: <928168400d2ff4aa7dec6e909d1b6972@vollmar.net> <1427791827.2115.10.camel@xen.org> Message-ID: <234a5c12d8e61e874d99e220e0f2462b@vollmar.net> X-Sender: daniel@vollmar.net User-Agent: Webmail/RCMAIL_VERSION DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=mailerdienst.de; s=dkim; t=1427814056; bh=WFq9tCoUIa3QItvIPfbstisZAzGPtttLREFyyey5s4M=; h=Date:From:To:Subject:In-Reply-To:References:From; b=B419JHHIZRKM500RHbv+6zZFtLy0kQMDif2mDuje6Va10LxF6XDzH9DcIdPJTgiHv s9tYZLHnS1GYshxWov7dM031mrBQOmEv+9BaOa+2lEWakQbZ5Uj1VNiJJWdRJk8Iz+ QrZUVQFxZH5fxHwha6oQSw0vGWvS7w9vCB30AULE= Subject: Re: [Predisclosure-applications] Application for Pre-disclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: base64 Content-Type: text/plain; charset="utf-8"; Format="flowed" Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org SGVsbG8gSWFuLAoKZm9sbG93aW5nIHlvdSBjYW4gZmluZCB0aGUgcmVxdWlyZWQgaW5mb3JtYXRp b24uCgpZb3UgbXVzdCBpbmNsdWRlIGluIHRoZSBlLW1haWw6CgpUaGUgbmFtZSBvZiBvdXIgb3Jn YW5pemF0aW9uOgp2b2xsbWFyLm5ldCBHbWJICgpEb21haW4gbmFtZSB3aGljaCB3ZSB1c2UgdG8g cHJvdmlkZSBYZW4gc2VydmljZXM6Cmh0dHA6Ly93d3cudm9sbG1hci5uZXQvdnNlcnZlci12aXJ0 dWFsc2VydmVyICh1bmRlciDigJxTeXN0ZW0gRGV0YWlscyB1bmQgClByZWlzZeKAnSB5b3XigJls bCBmaW5kIFhlbikKCkJyaWVmIGRlc2NyaXB0aW9uIG9mIHdoeSB3ZSBmaXQgdGhlIGNyaXRlcmlh OgpBcyBJIGFscmVhZHkgbWVudGlvbmVkLCB3ZeKAmXZlIGFyb3VuZCAyNTAwIGN1c3RvbWVycyB3 aGljaCBhcmUgdXNpbmcgWGVuIAphbHJlYWR5LgoKSWYgbm90IGFsbCBvZiB5b3VyIHByb2R1Y3Rz L3NlcnZpY2VzIHVzZSBYZW4sIGEgbGlzdCBvZiAoc29tZSBvZikgeW91ciAKcHJvZHVjdHMvc2Vy dmljZXMgKG9yIGNhdGVnb3JpZXMgdGhlcmVvZikgd2hpY2ggZG8uCnZpcnR1YWwgc2VydmVyICho dHRwOi8vd3d3LnZvbGxtYXIubmV0L3ZzZXJ2ZXItdmlydHVhbHNlcnZlcikKCkV2aWRlbmNlIG9m IHlvdXIgc3RhdHVzIGFzIGEgc2VydmljZS9zb2Z0d2FyZSBwcm92aWRlcjoKUGxlYXNlIHNlZSB0 aGUgZm9sbG93aW5nIGxpbms6Cmh0dHA6Ly93d3cudm9sbG1hci5uZXQvCgpFdmlkZW5jZSBvZiB5 b3VyIHN0YXR1cyBhcyBhIHVzZXIvZGlzdHJpYnV0b3Igb2YgWGVuOgpXZeKAmXJlIHByb3ZpZGlu ZyB2aXJ0dWFsIGFuZCBkZWRpY2F0ZWQgc2VydmVyIHRvIG91ciBjbGllbnRzLiBUaGVzZSAKdmly dHVhbCBtYWNoaW5lcyBhcmUgdXNpbmcgWGVuIGFzIHRoZSB2aXJ0dWFsaXphdGlvbiBwbGF0Zm9y bSB3aGljaCBpcyBhIApwYXJ0IG9mIG91ciBwcm9kdWN0IGVudmlyb25tZW50LiBXZSBhcmUgYWxz byB1c2luZyBYZW4gYXMgdmlydHVhbGl6YXRpb24gCnBsYXRmb3JtIGZvciBpbnRlcm5hbCBwcm9q ZWN0cyB3aXRoIHZpcnR1YWwgbWFjaGluZXMuCgpJbmZvcm1hdGlvbiBhYm91dCB5b3VyIGhhbmRs aW5nIG9mIHNlY3VyaXR5IHByb2JsZW1zOgpVbmRlciB0aGUgZm9sbG93aW5nIGxpbmsgeW914oCZ cmUgYWJsZSB0byBmaW5kIG91ciBjb250YWN0IGZvcm0gd2hpY2ggY2FuIApiZSB1c2VkIHRvIGlu Zm9ybSBvdXIgY29tcGFueSBhYm91dCBhbnkgcHJvYmxlbXMuIApodHRwOi8vd3d3LnZvbGxtYXIu bmV0L2tvbnRha3QKClNwZWNpZmljYWxseSwgdGhlIGNvbnRhY3QgaW5mb3JtYXRpb24gKGVtYWls IGFkZHJlc3NlcyBvciBvdGhlciBjb250YWN0IAppbnN0cnVjdGlvbnMpIHdoaWNoIHN1Y2ggYSBt ZW1iZXIgb2YgdGhlIHB1YmxpYyBzaG91bGQgdXNlLgpFLU1haWw6IHNlY3VyaXR5QHZvbGxtYXIu bmV0ClRlbC46ICgrNDkpIDAyNDEgLSA0NjMgMTQgNDMwCkZheDogKCs0OSkgIDAyNDEgLSA0NjMg MTQgNDM5CgpBIHN0YXRlbWVudCB0byB0aGUgZWZmZWN0IHRoYXQgeW91IGhhdmUgcmVhZCB0aGlz IHBvbGljeSBhbmQgYWdyZWUgdG8gCmFiaWRlIGJ5IHRoZSB0ZXJtcyBmb3IgaW5jbHVzaW9uIGlu IHRoZSBsaXN0LCBzcGVjaWZpY2FsbHkgdGhlIApyZXF1aXJlbWVudHMgdG8gcmVnYXJkaW5nIGNv bmZpZGVudGlhbGl0eSBkdXJpbmcgYW4gZW1iYXJnbyBwZXJpb2Q6CldlIGhhdmUgcmVhZCB0aGUg cG9saWN5IGF0IApodHRwOi8vd3d3LnhlbnByb2plY3Qub3JnL3NlY3VyaXR5LXBvbGljeS5odG1s IGFuZCBhZ3JlZSB0byBpdC4KClRoZSBzaW5nbGUgKG5vbi1wZXJzb25hbCkgZW1haWwgYWxpYXMg eW91IHdpc2ggYWRkZWQgdG8gdGhlIApwcmVkaXNjbG9zdXJlIGxpc3Q6CnNlY3VyaXR5QHZvbGxt YXIubmV0CgpLaW5kIHJlZ2FyZHMsCkRhbmllbAoKCkFtIDMxLjAzLjIwMTUgMTA6NTAsIHNjaHJp ZWIgSWFuIENhbXBiZWxsOgo+IE9uIE1vbiwgMjAxNS0wMy0zMCBhdCAxNjo0MSArMDIwMCwgZGFu aWVsQHZvbGxtYXIubmV0IHdyb3RlOgo+PiBEZWFyIFhlbi10ZWFtLAo+PiAKPj4gbXkgbmFtZSBp cyBEYW5pZWwgZnJvbSB3d3cudm9sbG1hci5uZXQKPj4gT3VyIG9mZmljaWFsIGNvbXBhbnkgbmFt ZSBpczogdm9sbG1hci5uZXQgR21iSAo+PiAKPj4gV2Ugd2FudCB0byBiZWNvbWUgYSBtZW1iZXIg b2YgeW91ciBQcmUtZGlzY2xvc3VyZSBsaXN0Lgo+IAo+IEhpIERhbmllbCwKPiAKPiBQbGVhc2Ug Y291bGQgeW91IHJlcmVhZCB0aGUgcG9saWN5WzBdIHBheWluZyBzcGVjaWFsIGF0dGVudGlvbiB0 byB0aGUKPiAiUHJlZGlzY2xvc3VyZSBsaXN0IG1lbWJlcnNoaXAgYXBwbGljYXRpb24gcHJvY2Vz cyIgYW5kIHByb3ZpZGUgYWxsIG9mCj4gdGhlIGluZm9ybWF0aW9uIHdoaWNoIGlzIHJlcXVlc3Rl ZCB0aGVyZS4KPiAKPiBUaGFua3MsCj4gSWFuLgo+IAo+IFswXSBodHRwOi8vd3d3LnhlbnByb2pl Y3Qub3JnL3NlY3VyaXR5LXBvbGljeS5odG1sCgpfX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fXwpQcmVkaXNjbG9zdXJlLWFwcGxpY2F0aW9ucyBtYWlsaW5nIGxp c3QKUHJlZGlzY2xvc3VyZS1hcHBsaWNhdGlvbnNAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cDov L2xpc3RzLnhlbnByb2plY3Qub3JnL2NnaS1iaW4vbWFpbG1hbi9saXN0aW5mby9wcmVkaXNjbG9z dXJlLWFwcGxpY2F0aW9ucw== From predisclosure-applications-bounces@lists.xenproject.org Tue Mar 31 15:01:07 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Tue, 31 Mar 2015 15:01:07 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1Ycxf7-0004nW-Vo; Tue, 31 Mar 2015 15:01:05 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1Ycxf7-0004mj-1v for predisclosure-applications@lists.xenproject.org; Tue, 31 Mar 2015 15:01:05 +0000 Received: from [85.158.137.68] by server-1.bemta-3.messagelabs.com id DC/65-13265-9A6BA155; Tue, 31 Mar 2015 15:00:57 +0000 X-Env-Sender: daniel@vollmar.net X-Msg-Ref: server-8.tower-31.messagelabs.com!1427814056!12742174!1 X-Originating-IP: [134.0.28.12] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.6; banners=-,-,- X-VirusChecked: Checked Received: (qmail 29030 invoked from network); 31 Mar 2015 15:00:56 -0000 Received: from mxout2.masterlogin.de (HELO mxout2.masterlogin.de) (134.0.28.12) by server-8.tower-31.messagelabs.com with DHE-RSA-AES256-SHA encrypted SMTP; 31 Mar 2015 15:00:56 -0000 Received: from mxbox4.masterlogin.de (unknown [192.168.10.253]) by mxout2.masterlogin.de (Postfix) with ESMTP id 4CC245F8CA for ; Tue, 31 Mar 2015 17:00:56 +0200 (CEST) Received: from mailerdienst.de (unknown [192.168.10.253]) by mxbox4.masterlogin.de (Postfix) with ESMTPA id EDDD810 for ; Tue, 31 Mar 2015 17:00:55 +0200 (CEST) MIME-Version: 1.0 Content-Length: 3644 Date: Tue, 31 Mar 2015 17:00:58 +0200 From: daniel@vollmar.net To: predisclosure-applications@lists.xenproject.org In-Reply-To: <1427791827.2115.10.camel@xen.org> References: <928168400d2ff4aa7dec6e909d1b6972@vollmar.net> <1427791827.2115.10.camel@xen.org> Message-ID: <234a5c12d8e61e874d99e220e0f2462b@vollmar.net> X-Sender: daniel@vollmar.net User-Agent: Webmail/RCMAIL_VERSION DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=mailerdienst.de; s=dkim; t=1427814056; bh=WFq9tCoUIa3QItvIPfbstisZAzGPtttLREFyyey5s4M=; h=Date:From:To:Subject:In-Reply-To:References:From; b=B419JHHIZRKM500RHbv+6zZFtLy0kQMDif2mDuje6Va10LxF6XDzH9DcIdPJTgiHv s9tYZLHnS1GYshxWov7dM031mrBQOmEv+9BaOa+2lEWakQbZ5Uj1VNiJJWdRJk8Iz+ QrZUVQFxZH5fxHwha6oQSw0vGWvS7w9vCB30AULE= Subject: Re: [Predisclosure-applications] Application for Pre-disclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: base64 Content-Type: text/plain; charset="utf-8"; Format="flowed" Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org SGVsbG8gSWFuLAoKZm9sbG93aW5nIHlvdSBjYW4gZmluZCB0aGUgcmVxdWlyZWQgaW5mb3JtYXRp b24uCgpZb3UgbXVzdCBpbmNsdWRlIGluIHRoZSBlLW1haWw6CgpUaGUgbmFtZSBvZiBvdXIgb3Jn YW5pemF0aW9uOgp2b2xsbWFyLm5ldCBHbWJICgpEb21haW4gbmFtZSB3aGljaCB3ZSB1c2UgdG8g cHJvdmlkZSBYZW4gc2VydmljZXM6Cmh0dHA6Ly93d3cudm9sbG1hci5uZXQvdnNlcnZlci12aXJ0 dWFsc2VydmVyICh1bmRlciDigJxTeXN0ZW0gRGV0YWlscyB1bmQgClByZWlzZeKAnSB5b3XigJls bCBmaW5kIFhlbikKCkJyaWVmIGRlc2NyaXB0aW9uIG9mIHdoeSB3ZSBmaXQgdGhlIGNyaXRlcmlh OgpBcyBJIGFscmVhZHkgbWVudGlvbmVkLCB3ZeKAmXZlIGFyb3VuZCAyNTAwIGN1c3RvbWVycyB3 aGljaCBhcmUgdXNpbmcgWGVuIAphbHJlYWR5LgoKSWYgbm90IGFsbCBvZiB5b3VyIHByb2R1Y3Rz L3NlcnZpY2VzIHVzZSBYZW4sIGEgbGlzdCBvZiAoc29tZSBvZikgeW91ciAKcHJvZHVjdHMvc2Vy dmljZXMgKG9yIGNhdGVnb3JpZXMgdGhlcmVvZikgd2hpY2ggZG8uCnZpcnR1YWwgc2VydmVyICho dHRwOi8vd3d3LnZvbGxtYXIubmV0L3ZzZXJ2ZXItdmlydHVhbHNlcnZlcikKCkV2aWRlbmNlIG9m IHlvdXIgc3RhdHVzIGFzIGEgc2VydmljZS9zb2Z0d2FyZSBwcm92aWRlcjoKUGxlYXNlIHNlZSB0 aGUgZm9sbG93aW5nIGxpbms6Cmh0dHA6Ly93d3cudm9sbG1hci5uZXQvCgpFdmlkZW5jZSBvZiB5 b3VyIHN0YXR1cyBhcyBhIHVzZXIvZGlzdHJpYnV0b3Igb2YgWGVuOgpXZeKAmXJlIHByb3ZpZGlu ZyB2aXJ0dWFsIGFuZCBkZWRpY2F0ZWQgc2VydmVyIHRvIG91ciBjbGllbnRzLiBUaGVzZSAKdmly dHVhbCBtYWNoaW5lcyBhcmUgdXNpbmcgWGVuIGFzIHRoZSB2aXJ0dWFsaXphdGlvbiBwbGF0Zm9y bSB3aGljaCBpcyBhIApwYXJ0IG9mIG91ciBwcm9kdWN0IGVudmlyb25tZW50LiBXZSBhcmUgYWxz byB1c2luZyBYZW4gYXMgdmlydHVhbGl6YXRpb24gCnBsYXRmb3JtIGZvciBpbnRlcm5hbCBwcm9q ZWN0cyB3aXRoIHZpcnR1YWwgbWFjaGluZXMuCgpJbmZvcm1hdGlvbiBhYm91dCB5b3VyIGhhbmRs aW5nIG9mIHNlY3VyaXR5IHByb2JsZW1zOgpVbmRlciB0aGUgZm9sbG93aW5nIGxpbmsgeW914oCZ cmUgYWJsZSB0byBmaW5kIG91ciBjb250YWN0IGZvcm0gd2hpY2ggY2FuIApiZSB1c2VkIHRvIGlu Zm9ybSBvdXIgY29tcGFueSBhYm91dCBhbnkgcHJvYmxlbXMuIApodHRwOi8vd3d3LnZvbGxtYXIu bmV0L2tvbnRha3QKClNwZWNpZmljYWxseSwgdGhlIGNvbnRhY3QgaW5mb3JtYXRpb24gKGVtYWls IGFkZHJlc3NlcyBvciBvdGhlciBjb250YWN0IAppbnN0cnVjdGlvbnMpIHdoaWNoIHN1Y2ggYSBt ZW1iZXIgb2YgdGhlIHB1YmxpYyBzaG91bGQgdXNlLgpFLU1haWw6IHNlY3VyaXR5QHZvbGxtYXIu bmV0ClRlbC46ICgrNDkpIDAyNDEgLSA0NjMgMTQgNDMwCkZheDogKCs0OSkgIDAyNDEgLSA0NjMg MTQgNDM5CgpBIHN0YXRlbWVudCB0byB0aGUgZWZmZWN0IHRoYXQgeW91IGhhdmUgcmVhZCB0aGlz IHBvbGljeSBhbmQgYWdyZWUgdG8gCmFiaWRlIGJ5IHRoZSB0ZXJtcyBmb3IgaW5jbHVzaW9uIGlu IHRoZSBsaXN0LCBzcGVjaWZpY2FsbHkgdGhlIApyZXF1aXJlbWVudHMgdG8gcmVnYXJkaW5nIGNv bmZpZGVudGlhbGl0eSBkdXJpbmcgYW4gZW1iYXJnbyBwZXJpb2Q6CldlIGhhdmUgcmVhZCB0aGUg cG9saWN5IGF0IApodHRwOi8vd3d3LnhlbnByb2plY3Qub3JnL3NlY3VyaXR5LXBvbGljeS5odG1s IGFuZCBhZ3JlZSB0byBpdC4KClRoZSBzaW5nbGUgKG5vbi1wZXJzb25hbCkgZW1haWwgYWxpYXMg eW91IHdpc2ggYWRkZWQgdG8gdGhlIApwcmVkaXNjbG9zdXJlIGxpc3Q6CnNlY3VyaXR5QHZvbGxt YXIubmV0CgpLaW5kIHJlZ2FyZHMsCkRhbmllbAoKCkFtIDMxLjAzLjIwMTUgMTA6NTAsIHNjaHJp ZWIgSWFuIENhbXBiZWxsOgo+IE9uIE1vbiwgMjAxNS0wMy0zMCBhdCAxNjo0MSArMDIwMCwgZGFu aWVsQHZvbGxtYXIubmV0IHdyb3RlOgo+PiBEZWFyIFhlbi10ZWFtLAo+PiAKPj4gbXkgbmFtZSBp cyBEYW5pZWwgZnJvbSB3d3cudm9sbG1hci5uZXQKPj4gT3VyIG9mZmljaWFsIGNvbXBhbnkgbmFt ZSBpczogdm9sbG1hci5uZXQgR21iSAo+PiAKPj4gV2Ugd2FudCB0byBiZWNvbWUgYSBtZW1iZXIg b2YgeW91ciBQcmUtZGlzY2xvc3VyZSBsaXN0Lgo+IAo+IEhpIERhbmllbCwKPiAKPiBQbGVhc2Ug Y291bGQgeW91IHJlcmVhZCB0aGUgcG9saWN5WzBdIHBheWluZyBzcGVjaWFsIGF0dGVudGlvbiB0 byB0aGUKPiAiUHJlZGlzY2xvc3VyZSBsaXN0IG1lbWJlcnNoaXAgYXBwbGljYXRpb24gcHJvY2Vz cyIgYW5kIHByb3ZpZGUgYWxsIG9mCj4gdGhlIGluZm9ybWF0aW9uIHdoaWNoIGlzIHJlcXVlc3Rl ZCB0aGVyZS4KPiAKPiBUaGFua3MsCj4gSWFuLgo+IAo+IFswXSBodHRwOi8vd3d3LnhlbnByb2pl Y3Qub3JnL3NlY3VyaXR5LXBvbGljeS5odG1sCgpfX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fXwpQcmVkaXNjbG9zdXJlLWFwcGxpY2F0aW9ucyBtYWlsaW5nIGxp c3QKUHJlZGlzY2xvc3VyZS1hcHBsaWNhdGlvbnNAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cDov L2xpc3RzLnhlbnByb2plY3Qub3JnL2NnaS1iaW4vbWFpbG1hbi9saXN0aW5mby9wcmVkaXNjbG9z dXJlLWFwcGxpY2F0aW9ucw==