From predisclosure-applications-bounces@lists.xenproject.org Mon Nov 02 22:44:34 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Mon, 02 Nov 2015 22:44:34 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1ZtNq5-0000wO-7E; Mon, 02 Nov 2015 22:44:33 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1ZtNq3-0000wJ-Ha for predisclosure-applications@lists.xenproject.org; Mon, 02 Nov 2015 22:44:31 +0000 Received: from [85.158.139.211] by server-3.bemta-5.messagelabs.com id 5C/98-06179-E47E7365; Mon, 02 Nov 2015 22:44:30 +0000 X-Env-Sender: marc.deslauriers@canonical.com X-Msg-Ref: server-13.tower-206.messagelabs.com!1446504270!382390!1 X-Originating-IP: [91.189.89.112] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 7.19.2; banners=-,-,- X-VirusChecked: Checked Received: (qmail 61435 invoked from network); 2 Nov 2015 22:44:30 -0000 Received: from youngberry.canonical.com (HELO youngberry.canonical.com) (91.189.89.112) by server-13.tower-206.messagelabs.com with AES256-SHA encrypted SMTP; 2 Nov 2015 22:44:30 -0000 Received: from rrcs-67-79-14-238.sw.biz.rr.com ([67.79.14.238] helo=[172.20.1.6]) by youngberry.canonical.com with esmtpsa (TLS1.0:DHE_RSA_AES_128_CBC_SHA1:16) (Exim 4.76) (envelope-from ) id 1ZtNq1-0008VT-KA; Mon, 02 Nov 2015 22:44:29 +0000 To: predisclosure-applications@lists.xenproject.org From: Marc Deslauriers X-Enigmail-Draft-Status: N1110 Message-ID: <5637E74A.2080108@canonical.com> Date: Mon, 2 Nov 2015 16:44:26 -0600 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 MIME-Version: 1.0 Cc: Stefan Bader Subject: [Predisclosure-applications] Addition to Canonical list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org Hello, Could you please add Stefan Bader to the list of Canonical employees subscribed to the predisclosure list? He takes care of the Xen security updates in Ubuntu, and is aware of responsible disclosure policies. Thanks, Marc. -- Marc Deslauriers Ubuntu Security Engineer | http://www.ubuntu.com/ Canonical Ltd. | http://www.canonical.com/ _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Mon Nov 02 22:44:34 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Mon, 02 Nov 2015 22:44:34 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1ZtNq5-0000wO-7E; Mon, 02 Nov 2015 22:44:33 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1ZtNq3-0000wJ-Ha for predisclosure-applications@lists.xenproject.org; Mon, 02 Nov 2015 22:44:31 +0000 Received: from [85.158.139.211] by server-3.bemta-5.messagelabs.com id 5C/98-06179-E47E7365; Mon, 02 Nov 2015 22:44:30 +0000 X-Env-Sender: marc.deslauriers@canonical.com X-Msg-Ref: server-13.tower-206.messagelabs.com!1446504270!382390!1 X-Originating-IP: [91.189.89.112] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 7.19.2; banners=-,-,- X-VirusChecked: Checked Received: (qmail 61435 invoked from network); 2 Nov 2015 22:44:30 -0000 Received: from youngberry.canonical.com (HELO youngberry.canonical.com) (91.189.89.112) by server-13.tower-206.messagelabs.com with AES256-SHA encrypted SMTP; 2 Nov 2015 22:44:30 -0000 Received: from rrcs-67-79-14-238.sw.biz.rr.com ([67.79.14.238] helo=[172.20.1.6]) by youngberry.canonical.com with esmtpsa (TLS1.0:DHE_RSA_AES_128_CBC_SHA1:16) (Exim 4.76) (envelope-from ) id 1ZtNq1-0008VT-KA; Mon, 02 Nov 2015 22:44:29 +0000 To: predisclosure-applications@lists.xenproject.org From: Marc Deslauriers X-Enigmail-Draft-Status: N1110 Message-ID: <5637E74A.2080108@canonical.com> Date: Mon, 2 Nov 2015 16:44:26 -0600 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 MIME-Version: 1.0 Cc: Stefan Bader Subject: [Predisclosure-applications] Addition to Canonical list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org Hello, Could you please add Stefan Bader to the list of Canonical employees subscribed to the predisclosure list? He takes care of the Xen security updates in Ubuntu, and is aware of responsible disclosure policies. Thanks, Marc. -- Marc Deslauriers Ubuntu Security Engineer | http://www.ubuntu.com/ Canonical Ltd. | http://www.canonical.com/ _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Tue Nov 03 12:46:10 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Tue, 03 Nov 2015 12:46:10 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1ZtayW-0008TY-Qc; Tue, 03 Nov 2015 12:46:08 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1ZtayU-0008TR-Up for predisclosure-applications@lists.xenproject.org; Tue, 03 Nov 2015 12:46:07 +0000 Received: from [85.158.139.211] by server-15.bemta-5.messagelabs.com id F6/3F-16870-E8CA8365; Tue, 03 Nov 2015 12:46:06 +0000 X-Env-Sender: prvs=74295b113=Ian.Campbell@citrix.com X-Msg-Ref: server-9.tower-206.messagelabs.com!1446554764!625624!1 X-Originating-IP: [66.165.176.89] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogNjYuMTY1LjE3Ni44OSA9PiAyMDMwMDc=\n, received_headers: No Received headers X-StarScan-Received: X-StarScan-Version: 7.19.2; banners=-,-,- X-VirusChecked: Checked Received: (qmail 33587 invoked from network); 3 Nov 2015 12:46:05 -0000 Received: from smtp.citrix.com (HELO SMTP.CITRIX.COM) (66.165.176.89) by server-9.tower-206.messagelabs.com with RC4-SHA encrypted SMTP; 3 Nov 2015 12:46:05 -0000 X-IronPort-AV: E=Sophos;i="5.20,238,1444694400"; d="scan'208";a="309978937" Message-ID: <1446554762.10390.25.camel@citrix.com> From: Ian Campbell To: Marc Deslauriers , Date: Tue, 3 Nov 2015 12:46:02 +0000 In-Reply-To: <5637E74A.2080108@canonical.com> References: <5637E74A.2080108@canonical.com> X-Mailer: Evolution 3.18.1-1 MIME-Version: 1.0 X-DLP: MIA2 Cc: Stefan Bader Subject: Re: [Predisclosure-applications] Addition to Canonical list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org T24gTW9uLCAyMDE1LTExLTAyIGF0IDE2OjQ0IC0wNjAwLCBNYXJjIERlc2xhdXJpZXJzIHdyb3Rl Ogo+IEhlbGxvLAoKSGkgTWFyYywKCj4gQ291bGQgeW91IHBsZWFzZSBhZGQgU3RlZmFuIEJhZGVy IDxzdGVmYW4uYmFkZXJAY2Fub25pY2FsLmNvbT4gdG8gdGhlIGxpc3Qgb2YKPiBDYW5vbmljYWwg ZW1wbG95ZWVzIHN1YnNjcmliZWQgdG8gdGhlIHByZWRpc2Nsb3N1cmUgbGlzdD8KCk91ciBwb2xp Y3lbMF0gcmVxdWlyZXMgdGhhdCBvbmx5IHJvbGUgYWRkcmVzc2VzIChlLmcuIHNlY3VyaXR5QCkg YW5kIG5vdAppbmRpdmlkdWFscyBiZSBzdWJzY3JpYmVkIHRvIHRoZSBwcmVkaXNjbG9zdXJlLCBz byBJJ20gYWZyYWlkIHRoaXMgd2lsbCBub3QKYmUgZGlyZWN0bHkgcG9zc2libGUuCgpZb3UgY291 bGQgb2YgY291cnNlIGFkZCBTdGVmYW4gdG8geW91ciBleGlzdGluZyBzZWN1cml0eUAgYWxpYXMg KHdoaWNoIGlzCmN1cnJlbnRseSBzdWJzY3JpYmVkKS4gWW91IGNvdWxkIGFsc28gYXNrIGZvciB5 b3VyIGV4aXN0aW5nIHNlY3VyaXR5QApzdWJzY3JpcHRpb24gdG8gYmUgc3dpdGNoZWQgdG8gYSBt b3JlIHNwZWNpZmljIGFsaWFzIChlLmcuIHNlY3VyaXR5LXhlbkApCndoaWNoIGNhbiBiZSBkZWxp dmVyZWQgb24geW91ciBlbmQgdG8gc2VjdXJpdHlAICsgU3RlZmFuIGV0YyBhcyB5b3Ugd2lzaC4K Cj4gSGUgdGFrZXMgY2FyZSBvZiB0aGUgWGVuIHNlY3VyaXR5IHVwZGF0ZXMgaW4gVWJ1bnR1LCBh bmQgaXMgYXdhcmUgb2YgcmVzcG9uc2libGUKPiBkaXNjbG9zdXJlIHBvbGljaWVzLgoKVGhhbmtz LCB0aGlzIGlzIG9mIGNvdXJzZSBzb21ldGhpbmcgd2Ugd291bGQgZXhwZWN0IG9mIGFueW9uZSB5 b3UgYWRkZWQgdG8KYW55CnN1YnNjcmliZWQgYWxpYXMuCgpJYW4uCgpbMF3CoHd3dy54ZW5wcm9q ZWN0Lm9yZy9zZWN1cml0eS1wb2xpY3kuaHRtbAoKPiAKCl9fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fClByZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25zIG1haWxp bmcgbGlzdApQcmVkaXNjbG9zdXJlLWFwcGxpY2F0aW9uc0BsaXN0cy54ZW5wcm9qZWN0Lm9yZwpo dHRwOi8vbGlzdHMueGVucHJvamVjdC5vcmcvY2dpLWJpbi9tYWlsbWFuL2xpc3RpbmZvL3ByZWRp c2Nsb3N1cmUtYXBwbGljYXRpb25z From predisclosure-applications-bounces@lists.xenproject.org Tue Nov 03 12:46:10 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Tue, 03 Nov 2015 12:46:10 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1ZtayW-0008TY-Qc; Tue, 03 Nov 2015 12:46:08 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1ZtayU-0008TR-Up for predisclosure-applications@lists.xenproject.org; Tue, 03 Nov 2015 12:46:07 +0000 Received: from [85.158.139.211] by server-15.bemta-5.messagelabs.com id F6/3F-16870-E8CA8365; Tue, 03 Nov 2015 12:46:06 +0000 X-Env-Sender: prvs=74295b113=Ian.Campbell@citrix.com X-Msg-Ref: server-9.tower-206.messagelabs.com!1446554764!625624!1 X-Originating-IP: [66.165.176.89] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogNjYuMTY1LjE3Ni44OSA9PiAyMDMwMDc=\n, received_headers: No Received headers X-StarScan-Received: X-StarScan-Version: 7.19.2; banners=-,-,- X-VirusChecked: Checked Received: (qmail 33587 invoked from network); 3 Nov 2015 12:46:05 -0000 Received: from smtp.citrix.com (HELO SMTP.CITRIX.COM) (66.165.176.89) by server-9.tower-206.messagelabs.com with RC4-SHA encrypted SMTP; 3 Nov 2015 12:46:05 -0000 X-IronPort-AV: E=Sophos;i="5.20,238,1444694400"; d="scan'208";a="309978937" Message-ID: <1446554762.10390.25.camel@citrix.com> From: Ian Campbell To: Marc Deslauriers , Date: Tue, 3 Nov 2015 12:46:02 +0000 In-Reply-To: <5637E74A.2080108@canonical.com> References: <5637E74A.2080108@canonical.com> X-Mailer: Evolution 3.18.1-1 MIME-Version: 1.0 X-DLP: MIA2 Cc: Stefan Bader Subject: Re: [Predisclosure-applications] Addition to Canonical list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org T24gTW9uLCAyMDE1LTExLTAyIGF0IDE2OjQ0IC0wNjAwLCBNYXJjIERlc2xhdXJpZXJzIHdyb3Rl Ogo+IEhlbGxvLAoKSGkgTWFyYywKCj4gQ291bGQgeW91IHBsZWFzZSBhZGQgU3RlZmFuIEJhZGVy IDxzdGVmYW4uYmFkZXJAY2Fub25pY2FsLmNvbT4gdG8gdGhlIGxpc3Qgb2YKPiBDYW5vbmljYWwg ZW1wbG95ZWVzIHN1YnNjcmliZWQgdG8gdGhlIHByZWRpc2Nsb3N1cmUgbGlzdD8KCk91ciBwb2xp Y3lbMF0gcmVxdWlyZXMgdGhhdCBvbmx5IHJvbGUgYWRkcmVzc2VzIChlLmcuIHNlY3VyaXR5QCkg YW5kIG5vdAppbmRpdmlkdWFscyBiZSBzdWJzY3JpYmVkIHRvIHRoZSBwcmVkaXNjbG9zdXJlLCBz byBJJ20gYWZyYWlkIHRoaXMgd2lsbCBub3QKYmUgZGlyZWN0bHkgcG9zc2libGUuCgpZb3UgY291 bGQgb2YgY291cnNlIGFkZCBTdGVmYW4gdG8geW91ciBleGlzdGluZyBzZWN1cml0eUAgYWxpYXMg KHdoaWNoIGlzCmN1cnJlbnRseSBzdWJzY3JpYmVkKS4gWW91IGNvdWxkIGFsc28gYXNrIGZvciB5 b3VyIGV4aXN0aW5nIHNlY3VyaXR5QApzdWJzY3JpcHRpb24gdG8gYmUgc3dpdGNoZWQgdG8gYSBt b3JlIHNwZWNpZmljIGFsaWFzIChlLmcuIHNlY3VyaXR5LXhlbkApCndoaWNoIGNhbiBiZSBkZWxp dmVyZWQgb24geW91ciBlbmQgdG8gc2VjdXJpdHlAICsgU3RlZmFuIGV0YyBhcyB5b3Ugd2lzaC4K Cj4gSGUgdGFrZXMgY2FyZSBvZiB0aGUgWGVuIHNlY3VyaXR5IHVwZGF0ZXMgaW4gVWJ1bnR1LCBh bmQgaXMgYXdhcmUgb2YgcmVzcG9uc2libGUKPiBkaXNjbG9zdXJlIHBvbGljaWVzLgoKVGhhbmtz LCB0aGlzIGlzIG9mIGNvdXJzZSBzb21ldGhpbmcgd2Ugd291bGQgZXhwZWN0IG9mIGFueW9uZSB5 b3UgYWRkZWQgdG8KYW55CnN1YnNjcmliZWQgYWxpYXMuCgpJYW4uCgpbMF3CoHd3dy54ZW5wcm9q ZWN0Lm9yZy9zZWN1cml0eS1wb2xpY3kuaHRtbAoKPiAKCl9fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fClByZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25zIG1haWxp bmcgbGlzdApQcmVkaXNjbG9zdXJlLWFwcGxpY2F0aW9uc0BsaXN0cy54ZW5wcm9qZWN0Lm9yZwpo dHRwOi8vbGlzdHMueGVucHJvamVjdC5vcmcvY2dpLWJpbi9tYWlsbWFuL2xpc3RpbmZvL3ByZWRp c2Nsb3N1cmUtYXBwbGljYXRpb25z From predisclosure-applications-bounces@lists.xenproject.org Tue Nov 03 16:27:58 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Tue, 03 Nov 2015 16:27:58 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1ZteRB-0005rO-Gq; Tue, 03 Nov 2015 16:27:57 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1ZteRA-0005rJ-5j for predisclosure-applications@lists.xenproject.org; Tue, 03 Nov 2015 16:27:56 +0000 Received: from [85.158.139.211] by server-7.bemta-5.messagelabs.com id DD/41-13905-B80E8365; Tue, 03 Nov 2015 16:27:55 +0000 X-Env-Sender: prvs=742cf893e=Ian.Jackson@citrix.com X-Msg-Ref: server-4.tower-206.messagelabs.com!1446568073!701477!1 X-Originating-IP: [66.165.176.89] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogNjYuMTY1LjE3Ni44OSA9PiAyMDMwMDc=\n, received_headers: No Received headers X-StarScan-Received: X-StarScan-Version: 7.19.2; banners=-,-,- X-VirusChecked: Checked Received: (qmail 18590 invoked from network); 3 Nov 2015 16:27:54 -0000 Received: from smtp.citrix.com (HELO SMTP.CITRIX.COM) (66.165.176.89) by server-4.tower-206.messagelabs.com with RC4-SHA encrypted SMTP; 3 Nov 2015 16:27:54 -0000 X-IronPort-AV: E=Sophos;i="5.20,239,1444694400"; d="scan'208";a="310044154" From: Ian Jackson MIME-Version: 1.0 Content-Length: 894 Message-ID: <22072.57472.753870.393484@mariner.uk.xensource.com> Date: Tue, 3 Nov 2015 16:27:44 +0000 To: Alex Zorin In-Reply-To: References: X-Mailer: VM 8.1.0 under 23.4.1 (i486-pc-linux-gnu) X-DLP: MIA2 Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Predisclosure list application - Serversaurus X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org Thanks for your application. On Fri, 2015-10-30 at 10:28 +1100, Alex Zorin wrote: > Evidence of status as a user of Xen: > = > * We are users of the OnApp Cloud plaform which, in our deployment, is > underpinned by the Xen virtualization platform. = The Xen security policy[0] requires: Link(s) to current public web pages, belonging to your organisation... Evidence of your status as a user/distributor of Xen: I'm afraid that the above does not meet this criterion since it is not a link to a public web page belonging to your organisation. The rest of your application appeared fine. Regards, Ian. [0]=A0http://www.xenproject.org/security-policy.html _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applicat= ions From predisclosure-applications-bounces@lists.xenproject.org Tue Nov 03 16:27:58 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Tue, 03 Nov 2015 16:27:58 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1ZteRB-0005rO-Gq; Tue, 03 Nov 2015 16:27:57 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1ZteRA-0005rJ-5j for predisclosure-applications@lists.xenproject.org; Tue, 03 Nov 2015 16:27:56 +0000 Received: from [85.158.139.211] by server-7.bemta-5.messagelabs.com id DD/41-13905-B80E8365; Tue, 03 Nov 2015 16:27:55 +0000 X-Env-Sender: prvs=742cf893e=Ian.Jackson@citrix.com X-Msg-Ref: server-4.tower-206.messagelabs.com!1446568073!701477!1 X-Originating-IP: [66.165.176.89] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogNjYuMTY1LjE3Ni44OSA9PiAyMDMwMDc=\n, received_headers: No Received headers X-StarScan-Received: X-StarScan-Version: 7.19.2; banners=-,-,- X-VirusChecked: Checked Received: (qmail 18590 invoked from network); 3 Nov 2015 16:27:54 -0000 Received: from smtp.citrix.com (HELO SMTP.CITRIX.COM) (66.165.176.89) by server-4.tower-206.messagelabs.com with RC4-SHA encrypted SMTP; 3 Nov 2015 16:27:54 -0000 X-IronPort-AV: E=Sophos;i="5.20,239,1444694400"; d="scan'208";a="310044154" From: Ian Jackson MIME-Version: 1.0 Content-Length: 894 Message-ID: <22072.57472.753870.393484@mariner.uk.xensource.com> Date: Tue, 3 Nov 2015 16:27:44 +0000 To: Alex Zorin In-Reply-To: References: X-Mailer: VM 8.1.0 under 23.4.1 (i486-pc-linux-gnu) X-DLP: MIA2 Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Predisclosure list application - Serversaurus X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org Thanks for your application. On Fri, 2015-10-30 at 10:28 +1100, Alex Zorin wrote: > Evidence of status as a user of Xen: > = > * We are users of the OnApp Cloud plaform which, in our deployment, is > underpinned by the Xen virtualization platform. = The Xen security policy[0] requires: Link(s) to current public web pages, belonging to your organisation... Evidence of your status as a user/distributor of Xen: I'm afraid that the above does not meet this criterion since it is not a link to a public web page belonging to your organisation. The rest of your application appeared fine. Regards, Ian. [0]=A0http://www.xenproject.org/security-policy.html _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applicat= ions From predisclosure-applications-bounces@lists.xenproject.org Tue Nov 03 16:29:23 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Tue, 03 Nov 2015 16:29:23 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1ZteSZ-0005s6-Kz; Tue, 03 Nov 2015 16:29:23 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1ZteSY-0005s1-AO for predisclosure-applications@lists.xenproject.org; Tue, 03 Nov 2015 16:29:22 +0000 Received: from [85.158.137.68] by server-12.bemta-3.messagelabs.com id F9/CF-14900-1E0E8365; Tue, 03 Nov 2015 16:29:21 +0000 X-Env-Sender: prvs=742cf893e=Ian.Jackson@citrix.com X-Msg-Ref: server-8.tower-31.messagelabs.com!1446568159!784110!1 X-Originating-IP: [66.165.176.63] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogNjYuMTY1LjE3Ni42MyA9PiAzMDYwNDg=\n, received_headers: No Received headers X-StarScan-Received: X-StarScan-Version: 7.19.2; banners=-,-,- X-VirusChecked: Checked Received: (qmail 836 invoked from network); 3 Nov 2015 16:29:20 -0000 Received: from smtp02.citrix.com (HELO SMTP02.CITRIX.COM) (66.165.176.63) by server-8.tower-31.messagelabs.com with RC4-SHA encrypted SMTP; 3 Nov 2015 16:29:20 -0000 X-IronPort-AV: E=Sophos;i="5.20,239,1444694400"; d="scan'208";a="315349950" From: Ian Jackson MIME-Version: 1.0 Content-Length: 1863 Message-ID: <22072.57540.977385.575012@mariner.uk.xensource.com> Date: Tue, 3 Nov 2015 16:28:52 +0000 To: Peter Radavich In-Reply-To: <703980A4-D1D5-43AA-8B0E-ECEAFE8A8182@cloudpassage.com> References: <252D59DC-729C-444A-A675-75F07032E46E@cloudpassage.com> <703980A4-D1D5-43AA-8B0E-ECEAFE8A8182@cloudpassage.com> X-Mailer: VM 8.1.0 under 23.4.1 (i486-pc-linux-gnu) X-DLP: MIA2 Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Fwd: Requesting access for CloudPassage Inc X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org Hi Peter, Thank you for your application. Please can you clarify under which classification you are applying, from the list in the policy[0]: * Public hosting providers; * Large-scale organisational users of Xen; * Vendors of Xen-based systems; * Distributors of operating systems with Xen support. Depending on which of those you think apply to you will determine which other pieces of information we are then required to consider. Based on the information you provided it is missing at least: * Link(s) to current public web pages, belonging to your organisation, for each of following pieces of information: * ... * Statements about, or descriptions of, your eligible production services or released software, from which it is immediately evident that they use Xen. * ... * Information about your handling of security problems: * Your invitation to members of the public, who discover security problems with your products/services, to report them in confidence to you; * Specifically, the contact information (email addresses or other contact instructions) which such a member of the public should use. Depending on which classification you are applying under there may be other things, so please pay close attention to the list in the policy as we have no discretion to accept applications which do not provide all of the above. It would be useful to us when evaluating the application if you could tie each of your responses to the specific requirement which it is addressing. Thanks, Ian. [0]=A0http://www.xenproject.org/security-policy.html _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applicat= ions From predisclosure-applications-bounces@lists.xenproject.org Tue Nov 03 16:29:23 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Tue, 03 Nov 2015 16:29:23 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1ZteSZ-0005s6-Kz; Tue, 03 Nov 2015 16:29:23 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1ZteSY-0005s1-AO for predisclosure-applications@lists.xenproject.org; Tue, 03 Nov 2015 16:29:22 +0000 Received: from [85.158.137.68] by server-12.bemta-3.messagelabs.com id F9/CF-14900-1E0E8365; Tue, 03 Nov 2015 16:29:21 +0000 X-Env-Sender: prvs=742cf893e=Ian.Jackson@citrix.com X-Msg-Ref: server-8.tower-31.messagelabs.com!1446568159!784110!1 X-Originating-IP: [66.165.176.63] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogNjYuMTY1LjE3Ni42MyA9PiAzMDYwNDg=\n, received_headers: No Received headers X-StarScan-Received: X-StarScan-Version: 7.19.2; banners=-,-,- X-VirusChecked: Checked Received: (qmail 836 invoked from network); 3 Nov 2015 16:29:20 -0000 Received: from smtp02.citrix.com (HELO SMTP02.CITRIX.COM) (66.165.176.63) by server-8.tower-31.messagelabs.com with RC4-SHA encrypted SMTP; 3 Nov 2015 16:29:20 -0000 X-IronPort-AV: E=Sophos;i="5.20,239,1444694400"; d="scan'208";a="315349950" From: Ian Jackson MIME-Version: 1.0 Content-Length: 1863 Message-ID: <22072.57540.977385.575012@mariner.uk.xensource.com> Date: Tue, 3 Nov 2015 16:28:52 +0000 To: Peter Radavich In-Reply-To: <703980A4-D1D5-43AA-8B0E-ECEAFE8A8182@cloudpassage.com> References: <252D59DC-729C-444A-A675-75F07032E46E@cloudpassage.com> <703980A4-D1D5-43AA-8B0E-ECEAFE8A8182@cloudpassage.com> X-Mailer: VM 8.1.0 under 23.4.1 (i486-pc-linux-gnu) X-DLP: MIA2 Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Fwd: Requesting access for CloudPassage Inc X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org Hi Peter, Thank you for your application. Please can you clarify under which classification you are applying, from the list in the policy[0]: * Public hosting providers; * Large-scale organisational users of Xen; * Vendors of Xen-based systems; * Distributors of operating systems with Xen support. Depending on which of those you think apply to you will determine which other pieces of information we are then required to consider. Based on the information you provided it is missing at least: * Link(s) to current public web pages, belonging to your organisation, for each of following pieces of information: * ... * Statements about, or descriptions of, your eligible production services or released software, from which it is immediately evident that they use Xen. * ... * Information about your handling of security problems: * Your invitation to members of the public, who discover security problems with your products/services, to report them in confidence to you; * Specifically, the contact information (email addresses or other contact instructions) which such a member of the public should use. Depending on which classification you are applying under there may be other things, so please pay close attention to the list in the policy as we have no discretion to accept applications which do not provide all of the above. It would be useful to us when evaluating the application if you could tie each of your responses to the specific requirement which it is addressing. Thanks, Ian. [0]=A0http://www.xenproject.org/security-policy.html _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applicat= ions From predisclosure-applications-bounces@lists.xenproject.org Mon Nov 16 22:08:54 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Mon, 16 Nov 2015 22:08:54 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1ZyRxF-0004BS-8a; Mon, 16 Nov 2015 22:08:53 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1ZyRxD-0004BN-NV for predisclosure-applications@lists.xenproject.org; Mon, 16 Nov 2015 22:08:51 +0000 Received: from [85.158.137.68] by server-2.bemta-3.messagelabs.com id 53/71-21201-2F35A465; Mon, 16 Nov 2015 22:08:50 +0000 X-Env-Sender: alex@serversaurus.com.au X-Msg-Ref: server-10.tower-31.messagelabs.com!1447711729!4091487!1 X-Originating-IP: [209.85.217.180] X-SpamReason: No, hits=0.4 required=7.0 tests=HTML_30_40,HTML_MESSAGE, RCVD_BY_IP X-StarScan-Received: X-StarScan-Version: 7.19.2; banners=-,-,- X-VirusChecked: Checked Received: (qmail 13774 invoked from network); 16 Nov 2015 22:08:50 -0000 Received: from mail-lb0-f180.google.com (HELO mail-lb0-f180.google.com) (209.85.217.180) by server-10.tower-31.messagelabs.com with AES128-GCM-SHA256 encrypted SMTP; 16 Nov 2015 22:08:50 -0000 Received: by lbbkw15 with SMTP id kw15so97301495lbb.0 for ; Mon, 16 Nov 2015 14:08:49 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=serversaurus_com_au.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=nwsW9NcFaLz9Pt9OzAePT0Ua/6+K94nXfkDKi29t8Rs=; b=c6PnD/yv77RpMaRSxArSrGWMG3II6nLJfQAStd2cQaM3+KbGHKAvs8xqFaasPA81HX KG3HJ6OTVleyi1vJRiis2A3FMhkyegdmPgXMYFCDWp1nSJN3DWYzVUn6uYtBU8vwh7oW j8whjyqMygrVFVBmRajqKTXW6OWfMLVqwAWKy7I8BUWOngXfuZ9RYy4HXJRzI5w2ri8z 4nBY18AdPgQpStikbiK1/BYALCBSWjGrWvhGNQLxSElqkUL+frf7piVqWej0Gw35ZoRj HGxkLQN7OqnZ7iRIfFBnLYSnWCNMzSrqWgvzjEr1Q6B49h8gbUmeI0xZgA9f51gKztLv x8ag== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=nwsW9NcFaLz9Pt9OzAePT0Ua/6+K94nXfkDKi29t8Rs=; b=YLWTYv9f2SAiUL9juOwLpA5p4dtVs70XCGkN3D7jU4CMAVq6mmZtcLKuY70lrjV0Se 2M+LYZiscUz46quluO4K7KVws631vMg4qvsnT4o2nwoW0WzbNrFf1vtZmvvPMtwtZXgY G8AngFG3PIloca8e5Nig5Pf3IxMss1wT9LKT3G18O3P69vt2QmbyzFeQcnoNJDLn8Tu1 oF+ecum3gntjMjDwk5awOwV1lvImaEMQ3nAaMcnNYyZ7Jt+WjKwxLuvqjkB+JwQ8bLPB tEOfTdSYDZqbt544ovg5O5x1ohk+V8tVyOqkd/QD6zp6ITSxAGI50eCKEJ99CXSbv/4Y NeQQ== X-Gm-Message-State: ALoCoQlyijReb/w3ko8R8JS5IucrEGCeZiv+/ECO7CRUtVilpwTqXJKJi8Q3h35N6dDwiZDfpWVD MIME-Version: 1.0 X-Received: by 10.112.147.10 with SMTP id tg10mr18842907lbb.58.1447711729320; Mon, 16 Nov 2015 14:08:49 -0800 (PST) Received: by 10.114.182.202 with HTTP; Mon, 16 Nov 2015 14:08:49 -0800 (PST) In-Reply-To: <22072.57472.753870.393484@mariner.uk.xensource.com> References: <22072.57472.753870.393484@mariner.uk.xensource.com> Date: Tue, 17 Nov 2015 09:08:49 +1100 Message-ID: From: Alex Zorin To: Ian Jackson Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Predisclosure list application - Serversaurus X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============1330447973300522675==" Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org --===============1330447973300522675== Content-Type: multipart/alternative; boundary=047d7b3a8ec05d1db70524afa790 --047d7b3a8ec05d1db70524afa790 Content-Type: text/plain; charset=UTF-8 Hi Ian, Thanks for the reviewing the application. I am not sure what constitutes evidence of use/distribution of Xen. Our story page (https://serversaurus.com.au/story) includes a description of our infrastructure that does mention the Xen hypervisor. Let me know if that is suitable. Alex (Copying to list) On Wed, Nov 4, 2015 at 3:27 AM, Ian Jackson wrote: > Thanks for your application. > > On Fri, 2015-10-30 at 10:28 +1100, Alex Zorin wrote: > > Evidence of status as a user of Xen: > > > > * We are users of the OnApp Cloud plaform which, in our deployment, is > > underpinned by the Xen virtualization platform. > > The Xen security policy[0] requires: > Link(s) to current public web pages, belonging to your organisation... > > Evidence of your status as a user/distributor of Xen: > > I'm afraid that the above does not meet this criterion since it is not a > link to a public web page belonging to your organisation. > > The rest of your application appeared fine. > > Regards, > Ian. > > [0] http://www.xenproject.org/security-policy.html > --047d7b3a8ec05d1db70524afa790 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi Ian,

Thanks for t= he reviewing the application.

I am not sure what constitutes e= vidence of use/distribution of Xen.

Our story page (https://serversaurus.= com.au/story) includes a description of our infrastructure that does me= ntion the Xen hypervisor.

Let me know if that is suitable.
Alex

(Copying to list)

On Wed, Nov 4, 2015 = at 3:27 AM, Ian Jackson <Ian.Jackson@eu.citrix.com> = wrote:
Thanks for your application.

On Fri, 2015-10-30 at 10:28 +1100, Alex Zorin wrote:
> Evidence of status as a user of Xen:
>
> * We are users of the OnApp Cloud plaform which, in our deployment, is=
> underpinned by the Xen virtualization platform.

The Xen security policy[0] requires:
=C2=A0 =C2=A0 Link(s) to current public web pages, belonging to your organi= sation...

=C2=A0 =C2=A0 =C2=A0 =C2=A0 Evidence of your status as a user/distributor o= f Xen:

I'm afraid that the above does not meet this criterion since it is not = a
link to a public web page belonging to your organisation.

The rest of your application appeared fine.

Regards,
Ian.

[0]=C2=A0http://www.xenproject.org/security-policy.htm= l

--047d7b3a8ec05d1db70524afa790-- --===============1330447973300522675== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications --===============1330447973300522675==-- From predisclosure-applications-bounces@lists.xenproject.org Mon Nov 16 22:08:54 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Mon, 16 Nov 2015 22:08:54 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1ZyRxF-0004BS-8a; Mon, 16 Nov 2015 22:08:53 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1ZyRxD-0004BN-NV for predisclosure-applications@lists.xenproject.org; Mon, 16 Nov 2015 22:08:51 +0000 Received: from [85.158.137.68] by server-2.bemta-3.messagelabs.com id 53/71-21201-2F35A465; Mon, 16 Nov 2015 22:08:50 +0000 X-Env-Sender: alex@serversaurus.com.au X-Msg-Ref: server-10.tower-31.messagelabs.com!1447711729!4091487!1 X-Originating-IP: [209.85.217.180] X-SpamReason: No, hits=0.4 required=7.0 tests=HTML_30_40,HTML_MESSAGE, RCVD_BY_IP X-StarScan-Received: X-StarScan-Version: 7.19.2; banners=-,-,- X-VirusChecked: Checked Received: (qmail 13774 invoked from network); 16 Nov 2015 22:08:50 -0000 Received: from mail-lb0-f180.google.com (HELO mail-lb0-f180.google.com) (209.85.217.180) by server-10.tower-31.messagelabs.com with AES128-GCM-SHA256 encrypted SMTP; 16 Nov 2015 22:08:50 -0000 Received: by lbbkw15 with SMTP id kw15so97301495lbb.0 for ; Mon, 16 Nov 2015 14:08:49 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=serversaurus_com_au.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=nwsW9NcFaLz9Pt9OzAePT0Ua/6+K94nXfkDKi29t8Rs=; b=c6PnD/yv77RpMaRSxArSrGWMG3II6nLJfQAStd2cQaM3+KbGHKAvs8xqFaasPA81HX KG3HJ6OTVleyi1vJRiis2A3FMhkyegdmPgXMYFCDWp1nSJN3DWYzVUn6uYtBU8vwh7oW j8whjyqMygrVFVBmRajqKTXW6OWfMLVqwAWKy7I8BUWOngXfuZ9RYy4HXJRzI5w2ri8z 4nBY18AdPgQpStikbiK1/BYALCBSWjGrWvhGNQLxSElqkUL+frf7piVqWej0Gw35ZoRj HGxkLQN7OqnZ7iRIfFBnLYSnWCNMzSrqWgvzjEr1Q6B49h8gbUmeI0xZgA9f51gKztLv x8ag== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=nwsW9NcFaLz9Pt9OzAePT0Ua/6+K94nXfkDKi29t8Rs=; b=YLWTYv9f2SAiUL9juOwLpA5p4dtVs70XCGkN3D7jU4CMAVq6mmZtcLKuY70lrjV0Se 2M+LYZiscUz46quluO4K7KVws631vMg4qvsnT4o2nwoW0WzbNrFf1vtZmvvPMtwtZXgY G8AngFG3PIloca8e5Nig5Pf3IxMss1wT9LKT3G18O3P69vt2QmbyzFeQcnoNJDLn8Tu1 oF+ecum3gntjMjDwk5awOwV1lvImaEMQ3nAaMcnNYyZ7Jt+WjKwxLuvqjkB+JwQ8bLPB tEOfTdSYDZqbt544ovg5O5x1ohk+V8tVyOqkd/QD6zp6ITSxAGI50eCKEJ99CXSbv/4Y NeQQ== X-Gm-Message-State: ALoCoQlyijReb/w3ko8R8JS5IucrEGCeZiv+/ECO7CRUtVilpwTqXJKJi8Q3h35N6dDwiZDfpWVD MIME-Version: 1.0 X-Received: by 10.112.147.10 with SMTP id tg10mr18842907lbb.58.1447711729320; Mon, 16 Nov 2015 14:08:49 -0800 (PST) Received: by 10.114.182.202 with HTTP; Mon, 16 Nov 2015 14:08:49 -0800 (PST) In-Reply-To: <22072.57472.753870.393484@mariner.uk.xensource.com> References: <22072.57472.753870.393484@mariner.uk.xensource.com> Date: Tue, 17 Nov 2015 09:08:49 +1100 Message-ID: From: Alex Zorin To: Ian Jackson Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Predisclosure list application - Serversaurus X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============1330447973300522675==" Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org --===============1330447973300522675== Content-Type: multipart/alternative; boundary=047d7b3a8ec05d1db70524afa790 --047d7b3a8ec05d1db70524afa790 Content-Type: text/plain; charset=UTF-8 Hi Ian, Thanks for the reviewing the application. I am not sure what constitutes evidence of use/distribution of Xen. Our story page (https://serversaurus.com.au/story) includes a description of our infrastructure that does mention the Xen hypervisor. Let me know if that is suitable. Alex (Copying to list) On Wed, Nov 4, 2015 at 3:27 AM, Ian Jackson wrote: > Thanks for your application. > > On Fri, 2015-10-30 at 10:28 +1100, Alex Zorin wrote: > > Evidence of status as a user of Xen: > > > > * We are users of the OnApp Cloud plaform which, in our deployment, is > > underpinned by the Xen virtualization platform. > > The Xen security policy[0] requires: > Link(s) to current public web pages, belonging to your organisation... > > Evidence of your status as a user/distributor of Xen: > > I'm afraid that the above does not meet this criterion since it is not a > link to a public web page belonging to your organisation. > > The rest of your application appeared fine. > > Regards, > Ian. > > [0] http://www.xenproject.org/security-policy.html > --047d7b3a8ec05d1db70524afa790 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi Ian,

Thanks for t= he reviewing the application.

I am not sure what constitutes e= vidence of use/distribution of Xen.

Our story page (https://serversaurus.= com.au/story) includes a description of our infrastructure that does me= ntion the Xen hypervisor.

Let me know if that is suitable.
Alex

(Copying to list)

On Wed, Nov 4, 2015 = at 3:27 AM, Ian Jackson <Ian.Jackson@eu.citrix.com> = wrote:
Thanks for your application.

On Fri, 2015-10-30 at 10:28 +1100, Alex Zorin wrote:
> Evidence of status as a user of Xen:
>
> * We are users of the OnApp Cloud plaform which, in our deployment, is=
> underpinned by the Xen virtualization platform.

The Xen security policy[0] requires:
=C2=A0 =C2=A0 Link(s) to current public web pages, belonging to your organi= sation...

=C2=A0 =C2=A0 =C2=A0 =C2=A0 Evidence of your status as a user/distributor o= f Xen:

I'm afraid that the above does not meet this criterion since it is not = a
link to a public web page belonging to your organisation.

The rest of your application appeared fine.

Regards,
Ian.

[0]=C2=A0http://www.xenproject.org/security-policy.htm= l

--047d7b3a8ec05d1db70524afa790-- --===============1330447973300522675== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications --===============1330447973300522675==-- From predisclosure-applications-bounces@lists.xenproject.org Tue Nov 17 10:47:31 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Tue, 17 Nov 2015 10:47:31 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1ZydnO-00021i-Gu; Tue, 17 Nov 2015 10:47:30 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1ZydnN-00021R-5X for predisclosure-applications@lists.xenproject.org; Tue, 17 Nov 2015 10:47:29 +0000 Received: from [85.158.139.211] by server-9.bemta-5.messagelabs.com id 60/B5-30270-0C50B465; Tue, 17 Nov 2015 10:47:28 +0000 X-Env-Sender: prvs=756f2d3db=Ian.Jackson@citrix.com X-Msg-Ref: server-16.tower-206.messagelabs.com!1447757243!4259435!1 X-Originating-IP: [66.165.176.89] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogNjYuMTY1LjE3Ni44OSA9PiAyMDMwMDc=\n, received_headers: No Received headers X-StarScan-Received: X-StarScan-Version: 7.19.2; banners=-,-,- X-VirusChecked: Checked Received: (qmail 64561 invoked from network); 17 Nov 2015 10:47:25 -0000 Received: from smtp.citrix.com (HELO SMTP.CITRIX.COM) (66.165.176.89) by server-16.tower-206.messagelabs.com with RC4-SHA encrypted SMTP; 17 Nov 2015 10:47:25 -0000 X-IronPort-AV: E=Sophos;i="5.20,307,1444694400"; d="scan'208";a="312711495" From: Ian Jackson MIME-Version: 1.0 Message-ID: <22091.1464.740702.726953@mariner.uk.xensource.com> Date: Tue, 17 Nov 2015 10:47:20 +0000 To: Alex Zorin In-Reply-To: References: <22072.57472.753870.393484@mariner.uk.xensource.com> X-Mailer: VM 8.1.0 under 23.4.1 (i486-pc-linux-gnu) X-DLP: MIA2 Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Predisclosure list application - Serversaurus X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org Alex Zorin writes ("Re: [Predisclosure-applications] Predisclosure list application - Serversaurus"): > I am not sure what constitutes evidence of use/distribution of Xen. > > Our story page (https://serversaurus.com.au/story) includes a description of > our infrastructure that does mention the Xen hypervisor. Thanks, that is fine. I have added you to the list. I would send you the outstanding predisclosed embargoed advisories, but as you can see at http://xenbits.xen.org/xsa/ there are none. Regards, Ian. _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Tue Nov 17 10:47:31 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Tue, 17 Nov 2015 10:47:31 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1ZydnO-00021i-Gu; Tue, 17 Nov 2015 10:47:30 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1ZydnN-00021R-5X for predisclosure-applications@lists.xenproject.org; Tue, 17 Nov 2015 10:47:29 +0000 Received: from [85.158.139.211] by server-9.bemta-5.messagelabs.com id 60/B5-30270-0C50B465; Tue, 17 Nov 2015 10:47:28 +0000 X-Env-Sender: prvs=756f2d3db=Ian.Jackson@citrix.com X-Msg-Ref: server-16.tower-206.messagelabs.com!1447757243!4259435!1 X-Originating-IP: [66.165.176.89] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogNjYuMTY1LjE3Ni44OSA9PiAyMDMwMDc=\n, received_headers: No Received headers X-StarScan-Received: X-StarScan-Version: 7.19.2; banners=-,-,- X-VirusChecked: Checked Received: (qmail 64561 invoked from network); 17 Nov 2015 10:47:25 -0000 Received: from smtp.citrix.com (HELO SMTP.CITRIX.COM) (66.165.176.89) by server-16.tower-206.messagelabs.com with RC4-SHA encrypted SMTP; 17 Nov 2015 10:47:25 -0000 X-IronPort-AV: E=Sophos;i="5.20,307,1444694400"; d="scan'208";a="312711495" From: Ian Jackson MIME-Version: 1.0 Message-ID: <22091.1464.740702.726953@mariner.uk.xensource.com> Date: Tue, 17 Nov 2015 10:47:20 +0000 To: Alex Zorin In-Reply-To: References: <22072.57472.753870.393484@mariner.uk.xensource.com> X-Mailer: VM 8.1.0 under 23.4.1 (i486-pc-linux-gnu) X-DLP: MIA2 Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Predisclosure list application - Serversaurus X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org Alex Zorin writes ("Re: [Predisclosure-applications] Predisclosure list application - Serversaurus"): > I am not sure what constitutes evidence of use/distribution of Xen. > > Our story page (https://serversaurus.com.au/story) includes a description of > our infrastructure that does mention the Xen hypervisor. Thanks, that is fine. I have added you to the list. I would send you the outstanding predisclosed embargoed advisories, but as you can see at http://xenbits.xen.org/xsa/ there are none. Regards, Ian. _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Wed Nov 25 18:45:27 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Wed, 25 Nov 2015 18:45:27 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1a1f4H-0004L0-Ks; Wed, 25 Nov 2015 18:45:25 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1a1f4F-0004Kv-KD for predisclosure-applications@lists.xenproject.org; Wed, 25 Nov 2015 18:45:23 +0000 Received: from [193.109.254.147] by server-5.bemta-14.messagelabs.com id 86/33-00475-2C106565; Wed, 25 Nov 2015 18:45:22 +0000 X-Env-Sender: marc.deslauriers@canonical.com X-Msg-Ref: server-14.tower-27.messagelabs.com!1448477122!6301727!1 X-Originating-IP: [91.189.89.112] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 7.19.2; banners=-,-,- X-VirusChecked: Checked Received: (qmail 54294 invoked from network); 25 Nov 2015 18:45:22 -0000 Received: from youngberry.canonical.com (HELO youngberry.canonical.com) (91.189.89.112) by server-14.tower-27.messagelabs.com with AES256-SHA encrypted SMTP; 25 Nov 2015 18:45:22 -0000 Received: from [166.62.242.79] (helo=[192.168.66.150]) by youngberry.canonical.com with esmtpsa (TLS1.0:DHE_RSA_AES_128_CBC_SHA1:16) (Exim 4.76) (envelope-from ) id 1a1f4C-0007q7-Ll; Wed, 25 Nov 2015 18:45:20 +0000 To: Ian Campbell , predisclosure-applications@lists.xenproject.org References: <5637E74A.2080108@canonical.com> <1446554762.10390.25.camel@citrix.com> From: Marc Deslauriers Message-ID: <565601BE.8000702@canonical.com> Date: Wed, 25 Nov 2015 13:45:18 -0500 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 MIME-Version: 1.0 In-Reply-To: <1446554762.10390.25.camel@citrix.com> Cc: Stefan Bader Subject: Re: [Predisclosure-applications] Addition to Canonical list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org Hi Ian, On 2015-11-03 07:46 AM, Ian Campbell wrote: > On Mon, 2015-11-02 at 16:44 -0600, Marc Deslauriers wrote: >> Hello, > > Hi Marc, > >> Could you please add Stefan Bader to the list of >> Canonical employees subscribed to the predisclosure list? > > Our policy[0] requires that only role addresses (e.g. security@) and not > individuals be subscribed to the predisclosure, so I'm afraid this will not > be directly possible. Ah, yes, that makes sense. Apologies for not reading that more carefully before making this request. > > You could of course add Stefan to your existing security@ alias (which is > currently subscribed). You could also ask for your existing security@ > subscription to be switched to a more specific alias (e.g. security-xen@) > which can be delivered on your end to security@ + Stefan etc as you wish. We have now created "security-xen@ubuntu.com". Could you please replace our existing "security@ubuntu.com" subscription with the new one? > >> He takes care of the Xen security updates in Ubuntu, and is aware of responsible >> disclosure policies. > > Thanks, this is of course something we would expect of anyone you added to > any > subscribed alias. > > Ian. Thanks! Marc. -- Marc Deslauriers Ubuntu Security Engineer | http://www.ubuntu.com/ Canonical Ltd. | http://www.canonical.com/ _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Wed Nov 25 18:45:27 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Wed, 25 Nov 2015 18:45:27 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1a1f4H-0004L0-Ks; Wed, 25 Nov 2015 18:45:25 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1a1f4F-0004Kv-KD for predisclosure-applications@lists.xenproject.org; Wed, 25 Nov 2015 18:45:23 +0000 Received: from [193.109.254.147] by server-5.bemta-14.messagelabs.com id 86/33-00475-2C106565; Wed, 25 Nov 2015 18:45:22 +0000 X-Env-Sender: marc.deslauriers@canonical.com X-Msg-Ref: server-14.tower-27.messagelabs.com!1448477122!6301727!1 X-Originating-IP: [91.189.89.112] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 7.19.2; banners=-,-,- X-VirusChecked: Checked Received: (qmail 54294 invoked from network); 25 Nov 2015 18:45:22 -0000 Received: from youngberry.canonical.com (HELO youngberry.canonical.com) (91.189.89.112) by server-14.tower-27.messagelabs.com with AES256-SHA encrypted SMTP; 25 Nov 2015 18:45:22 -0000 Received: from [166.62.242.79] (helo=[192.168.66.150]) by youngberry.canonical.com with esmtpsa (TLS1.0:DHE_RSA_AES_128_CBC_SHA1:16) (Exim 4.76) (envelope-from ) id 1a1f4C-0007q7-Ll; Wed, 25 Nov 2015 18:45:20 +0000 To: Ian Campbell , predisclosure-applications@lists.xenproject.org References: <5637E74A.2080108@canonical.com> <1446554762.10390.25.camel@citrix.com> From: Marc Deslauriers Message-ID: <565601BE.8000702@canonical.com> Date: Wed, 25 Nov 2015 13:45:18 -0500 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 MIME-Version: 1.0 In-Reply-To: <1446554762.10390.25.camel@citrix.com> Cc: Stefan Bader Subject: Re: [Predisclosure-applications] Addition to Canonical list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org Hi Ian, On 2015-11-03 07:46 AM, Ian Campbell wrote: > On Mon, 2015-11-02 at 16:44 -0600, Marc Deslauriers wrote: >> Hello, > > Hi Marc, > >> Could you please add Stefan Bader to the list of >> Canonical employees subscribed to the predisclosure list? > > Our policy[0] requires that only role addresses (e.g. security@) and not > individuals be subscribed to the predisclosure, so I'm afraid this will not > be directly possible. Ah, yes, that makes sense. Apologies for not reading that more carefully before making this request. > > You could of course add Stefan to your existing security@ alias (which is > currently subscribed). You could also ask for your existing security@ > subscription to be switched to a more specific alias (e.g. security-xen@) > which can be delivered on your end to security@ + Stefan etc as you wish. We have now created "security-xen@ubuntu.com". Could you please replace our existing "security@ubuntu.com" subscription with the new one? > >> He takes care of the Xen security updates in Ubuntu, and is aware of responsible >> disclosure policies. > > Thanks, this is of course something we would expect of anyone you added to > any > subscribed alias. > > Ian. Thanks! Marc. -- Marc Deslauriers Ubuntu Security Engineer | http://www.ubuntu.com/ Canonical Ltd. | http://www.canonical.com/ _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications