From predisclosure-applications-bounces@lists.xenproject.org Tue Mar 21 16:45:30 2017 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Tue, 21 Mar 2017 16:45:30 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cqMuX-0007Vd-6W; Tue, 21 Mar 2017 16:45:29 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cqMuW-0007V6-7E for predisclosure-applications@lists.xenproject.org; Tue, 21 Mar 2017 16:45:28 +0000 Received: from [85.158.137.68] by server-7.bemta-3.messagelabs.com id A1/84-23854-7A851D85; Tue, 21 Mar 2017 16:45:27 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFuplleJIrShJLcpLzFFi42KJPp6xUHdZxMU Ig63rpS3uNd1ncmD0OPzhCksAYxRrZl5SfkUCa8a8+UeYCy7JV8y9MIG5gfGETBcjJ4eQgLtE x+rnTF2MXED2WkaJrz83sEI4bxklursfM3cxcgA5HhJ7nztCNMxklPh7ogzEZhFQlXh/eBkTi M0mYClxZsNhMFtEwFhi6q11zCC2sICJxPX/cxhBbF4BU4nl3dtZQUZyCphJrLwfDDHSVOLD5K mMIGF+AUmJZesEIaoFJU7OfMICYjML1Es0rmhnBbElBHIkXh3ZywZSLiEgJfG/VQnkYAmBv8w Sh1YfZIGokZF4NPEm2wRG4VlIRs1CMmoWUDuzgLrE+nlCEGFtiWULXzND2OoSE06+Y4ew9STe /u5lWcDItopRozi1qCy1SNfIRC+pKDM9oyQ3MTNH19DAWC83tbg4MT01JzGpWC85P3cTIzBS6 hkYGHcwvjrud4hRkoNJSZRXRfBEhBBfUn5KZUZicUZ8UWlOavEhRhkODiUJXu9woJxgUWp6ak VaZg4wZmHSEhw8SiK8kSBp3uKCxNzizHSI1ClGY445s3e/YeKY8vbIGyYhlrz8vFQpcd5ukFI BkNKM0jy4QbBUcolRVkqYl5GBgUGIpyC1KDezBFX+FaM4B6OSMK88yBSezLwSuH2vgE5hAjol 8ecRkFNKEhFSUg2MMfISc2/Hmeil9RZsqgyQ0oibfvTvrtffmTemhBxLkDI+vXCa04Xs88aht 77ULeG9P/GCYP2EuMx6nh+Hc/UMnYu1D+hX3el+xb4ovkL6HptN2uVzHjMjbhc7KZWdy3/axV 6VxPTnja3mTaulFbW7E+bxT9BTyrLPKM63Ojbx6bw3yjPl/psqsRRnJBpqMRcVJwIAMjZcMCA DAAA= X-Env-Sender: mdontu@bitdefender.com X-Msg-Ref: server-8.tower-31.messagelabs.com!1490114725!91423834!1 X-Originating-IP: [91.199.104.161] X-SpamReason: No, hits=0.5 required=7.0 tests=BODY_RANDOM_LONG X-StarScan-Received: X-StarScan-Version: 9.2.3; banners=-,-,- X-VirusChecked: Checked Received: (qmail 7995 invoked from network); 21 Mar 2017 16:45:26 -0000 Received: from mx01.bbu.dsd.mx.bitdefender.com (HELO mx01.bbu.dsd.mx.bitdefender.com) (91.199.104.161) by server-8.tower-31.messagelabs.com with DHE-RSA-AES128-GCM-SHA256 encrypted SMTP; 21 Mar 2017 16:45:26 -0000 Received: (qmail 1944 invoked from network); 21 Mar 2017 18:45:25 +0200 Received: from unknown (HELO mx-sr.buh.bitdefender.com) (10.17.80.103) by mx01.bbu.dsd.mx.bitdefender.com with AES256-GCM-SHA384 encrypted SMTP; 21 Mar 2017 18:45:25 +0200 Received: from smtp02.buh.bitdefender.net (smtp.bitdefender.biz [10.17.80.76]) by mx-sr.buh.bitdefender.com (Postfix) with ESMTP id 252147FB88 for ; Tue, 21 Mar 2017 18:45:25 +0200 (EET) Received: (qmail 21978 invoked from network); 21 Mar 2017 18:45:25 +0200 Received: from unknown (HELO bitdefender.com) (mdontu@bitdefender.com@10.10.14.115) by smtp02.buh.bitdefender.net with SMTP; 21 Mar 2017 18:45:25 +0200 Date: Tue, 21 Mar 2017 18:45:15 +0200 From: Mihai =?UTF-8?B?RG9uyJt1?= To: predisclosure-applications@lists.xenproject.org Message-ID: <20170321184515.5f87d7f8@bitdefender.com> In-Reply-To: <20161220051554.3c323ba0@bitdefender.com> References: <20161220051554.3c323ba0@bitdefender.com> Organization: Bitdefender MIME-Version: 1.0 X-BitDefender-Scanner: Clean, Agent: BitDefender qmail 3.1.6 on smtp02.buh.bitdefender.net, sigver: 7.70304 X-BitDefender-Spam: No (0) X-BitDefender-SpamStamp: Build: [Engines: 2.15.8.1074, Dats: 443892, Stamp: 3], Multi: [Enabled, t: (0.000008,0.007335)], BW: [Enabled, t: (0.000006)], RBL DNSBL: [Disabled], APM: [Enabled, Score: 500, t: (0.004140), Flags: 85D2ED72; NN_LEGIT_VALID_REPLY; NN_LEGIT_SUMM_400_WORDS; NN_LEGIT_BITDEFENDER; NN_LEGIT_MAILING_LIST_TO], SGN: [Enabled, t: (0.008670,0.000102)], URL: [Enabled, t: (0.000045)], RTDA: [Enabled, t: (0.065285), Hit: No, Details: v2.4.4; Id: 11.5eucg6.1bboj9ek5.5v5a], total: 0(775) X-BitDefender-CF-Stamp: none Subject: Re: [Predisclosure-applications] Application for the pre-disclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============8098257516014422000==" Errors-To: predisclosure-applications-bounces@lists.xenproject.org Sender: "Predisclosure-applications" --===============8098257516014422000== Content-Type: multipart/signed; micalg=pgp-sha1; boundary="Sig_/+Dm.TqgNFReeicJph=23YUM"; protocol="application/pgp-signature" --Sig_/+Dm.TqgNFReeicJph=23YUM Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hi, On Tuesday 20 December 2016 05:15:54 Mihai Don=C8=9Bu wrote: > I am writing on behalf of Bitdefender with the hope of adding our > company to the pre-disclusure list. >=20 > 1. Organization > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D >=20 > Bitdefender SRL: http://www.bitdefender.com/business/ >=20 > 24, Delea Veche Street, Office Building A, 7th floor, 2nd district, > Bucharest, Romania >=20 > 2. Domain name providing Xen-based services > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D >=20 > N/A, though our cloud service runs on top of AWS > https://gravityzone.bitdefender.com/ >=20 > 3. Brief description > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D >=20 > Bitdefender provides security solutions integrating with various > virtualization platforms, including XenServer. Our latest product - > Bitdefender HVI - is tightly connected with the xen hypervisor via the > VM event (mem_access) subsystem, also known as Citrix XenServer Direct > Inspect API. >=20 > Inclusion in the pre-disclosure list would make us eligible for > receiving Citrix XenServer security updates ahead of time (binary and > source) in order to ensure a bug/regression-free experience for our > customers. >=20 > 4. Products using Xen > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D >=20 > Bitdefender GravityZone - Security for Virtualized Environments > http://www.bitdefender.com/business/virtualization-security.html >=20 > Bitdefender GravityZone - HVI > http://www.bitdefender.com/business/hypervisor-introspection.html >=20 > 5. Links to public web pages > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D >=20 > Bitdefender GravityZone SVE (includes XenServer support) > http://www.bitdefender.com/business/virtualization-security.html >=20 > Bitdefender GravityZone HVI (XenServer-based) > http://www.bitdefender.com/business/hypervisor-introspection.html >=20 > Documentation mentioning XenServer support: > http://download.bitdefender.com/resources/media/materials/virtualized-env= ironments/en/Bitdefender-2015-NGZ-SecurityForVirtualEnviro-DS-70574-A4-en_E= N-web.pdf >=20 > Security issues are reported to support@bitdefender.com or > security@bitdefender.com >=20 > We also run a dedicated bugbounty program: > http://www.bitdefender.com/site/view/bug-bounty.html >=20 > Published articles as part of Xen Project: > https://blog.xenproject.org/2015/08/04/the-bitdefender-virtual-machine-in= trospection-library-is-now-on-github/ > https://events.linuxfoundation.org/sites/events/files/slides/Zero-Footpri= nt%20Guest%20Memory%20Introspection%20from%20Xen%20_%20draft11.pdf >=20 > Assigned XSA-s: > https://xenbits.xen.org/xsa/advisory-105.html > https://xenbits.xen.org/xsa/advisory-106.html > https://xenbits.xen.org/xsa/advisory-116.html >=20 > 6. Xen Project Security Policy Agreement > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D >=20 > I and the members of our security team have read the Xen Project > security policy agreement[1] and agree to abide terms for inclusion in > pre-disclosure list. >=20 > [1] https://www.xenproject.org/security-policy.html >=20 > 7. Non-personal email address > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D >=20 > xen@bitdefender.com Sorry to push with this, but is there anything I can do to get the application unstuck? Thank you, --=20 Mihai DON=C8=9AU --Sig_/+Dm.TqgNFReeicJph=23YUM Content-Type: application/pgp-signature Content-Description: OpenPGP digital signature -----BEGIN PGP SIGNATURE----- iF0EARECAB0WIQR0XF9Y3LSEy1CQZAJ85R6qthEwqgUCWNFYmwAKCRB85R6qthEw qlmYAJ4g+o4CxGHqKbQvkw59q9HEkjNjegCgjiz5xjZcyZg97xvIlsIP63u36OA= =j/tY -----END PGP SIGNATURE----- --Sig_/+Dm.TqgNFReeicJph=23YUM-- --===============8098257516014422000== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KUHJlZGlzY2xv c3VyZS1hcHBsaWNhdGlvbnMgbWFpbGluZyBsaXN0ClByZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25z QGxpc3RzLnhlbnByb2plY3Qub3JnCmh0dHBzOi8vbGlzdHMueGVucHJvamVjdC5vcmcvY2dpLWJp bi9tYWlsbWFuL2xpc3RpbmZvL3ByZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25z --===============8098257516014422000==-- From predisclosure-applications-bounces@lists.xenproject.org Tue Mar 21 16:45:30 2017 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Tue, 21 Mar 2017 16:45:30 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cqMuX-0007Vd-6W; Tue, 21 Mar 2017 16:45:29 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cqMuW-0007V6-7E for predisclosure-applications@lists.xenproject.org; Tue, 21 Mar 2017 16:45:28 +0000 Received: from [85.158.137.68] by server-7.bemta-3.messagelabs.com id A1/84-23854-7A851D85; Tue, 21 Mar 2017 16:45:27 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFuplleJIrShJLcpLzFFi42KJPp6xUHdZxMU Ig63rpS3uNd1ncmD0OPzhCksAYxRrZl5SfkUCa8a8+UeYCy7JV8y9MIG5gfGETBcjJ4eQgLtE x+rnTF2MXED2WkaJrz83sEI4bxklursfM3cxcgA5HhJ7nztCNMxklPh7ogzEZhFQlXh/eBkTi M0mYClxZsNhMFtEwFhi6q11zCC2sICJxPX/cxhBbF4BU4nl3dtZQUZyCphJrLwfDDHSVOLD5K mMIGF+AUmJZesEIaoFJU7OfMICYjML1Es0rmhnBbElBHIkXh3ZywZSLiEgJfG/VQnkYAmBv8w Sh1YfZIGokZF4NPEm2wRG4VlIRs1CMmoWUDuzgLrE+nlCEGFtiWULXzND2OoSE06+Y4ew9STe /u5lWcDItopRozi1qCy1SNfIRC+pKDM9oyQ3MTNH19DAWC83tbg4MT01JzGpWC85P3cTIzBS6 hkYGHcwvjrud4hRkoNJSZRXRfBEhBBfUn5KZUZicUZ8UWlOavEhRhkODiUJXu9woJxgUWp6ak VaZg4wZmHSEhw8SiK8kSBp3uKCxNzizHSI1ClGY445s3e/YeKY8vbIGyYhlrz8vFQpcd5ukFI BkNKM0jy4QbBUcolRVkqYl5GBgUGIpyC1KDezBFX+FaM4B6OSMK88yBSezLwSuH2vgE5hAjol 8ecRkFNKEhFSUg2MMfISc2/Hmeil9RZsqgyQ0oibfvTvrtffmTemhBxLkDI+vXCa04Xs88aht 77ULeG9P/GCYP2EuMx6nh+Hc/UMnYu1D+hX3el+xb4ovkL6HptN2uVzHjMjbhc7KZWdy3/axV 6VxPTnja3mTaulFbW7E+bxT9BTyrLPKM63Ojbx6bw3yjPl/psqsRRnJBpqMRcVJwIAMjZcMCA DAAA= X-Env-Sender: mdontu@bitdefender.com X-Msg-Ref: server-8.tower-31.messagelabs.com!1490114725!91423834!1 X-Originating-IP: [91.199.104.161] X-SpamReason: No, hits=0.5 required=7.0 tests=BODY_RANDOM_LONG X-StarScan-Received: X-StarScan-Version: 9.2.3; banners=-,-,- X-VirusChecked: Checked Received: (qmail 7995 invoked from network); 21 Mar 2017 16:45:26 -0000 Received: from mx01.bbu.dsd.mx.bitdefender.com (HELO mx01.bbu.dsd.mx.bitdefender.com) (91.199.104.161) by server-8.tower-31.messagelabs.com with DHE-RSA-AES128-GCM-SHA256 encrypted SMTP; 21 Mar 2017 16:45:26 -0000 Received: (qmail 1944 invoked from network); 21 Mar 2017 18:45:25 +0200 Received: from unknown (HELO mx-sr.buh.bitdefender.com) (10.17.80.103) by mx01.bbu.dsd.mx.bitdefender.com with AES256-GCM-SHA384 encrypted SMTP; 21 Mar 2017 18:45:25 +0200 Received: from smtp02.buh.bitdefender.net (smtp.bitdefender.biz [10.17.80.76]) by mx-sr.buh.bitdefender.com (Postfix) with ESMTP id 252147FB88 for ; Tue, 21 Mar 2017 18:45:25 +0200 (EET) Received: (qmail 21978 invoked from network); 21 Mar 2017 18:45:25 +0200 Received: from unknown (HELO bitdefender.com) (mdontu@bitdefender.com@10.10.14.115) by smtp02.buh.bitdefender.net with SMTP; 21 Mar 2017 18:45:25 +0200 Date: Tue, 21 Mar 2017 18:45:15 +0200 From: Mihai =?UTF-8?B?RG9uyJt1?= To: predisclosure-applications@lists.xenproject.org Message-ID: <20170321184515.5f87d7f8@bitdefender.com> In-Reply-To: <20161220051554.3c323ba0@bitdefender.com> References: <20161220051554.3c323ba0@bitdefender.com> Organization: Bitdefender MIME-Version: 1.0 X-BitDefender-Scanner: Clean, Agent: BitDefender qmail 3.1.6 on smtp02.buh.bitdefender.net, sigver: 7.70304 X-BitDefender-Spam: No (0) X-BitDefender-SpamStamp: Build: [Engines: 2.15.8.1074, Dats: 443892, Stamp: 3], Multi: [Enabled, t: (0.000008,0.007335)], BW: [Enabled, t: (0.000006)], RBL DNSBL: [Disabled], APM: [Enabled, Score: 500, t: (0.004140), Flags: 85D2ED72; NN_LEGIT_VALID_REPLY; NN_LEGIT_SUMM_400_WORDS; NN_LEGIT_BITDEFENDER; NN_LEGIT_MAILING_LIST_TO], SGN: [Enabled, t: (0.008670,0.000102)], URL: [Enabled, t: (0.000045)], RTDA: [Enabled, t: (0.065285), Hit: No, Details: v2.4.4; Id: 11.5eucg6.1bboj9ek5.5v5a], total: 0(775) X-BitDefender-CF-Stamp: none Subject: Re: [Predisclosure-applications] Application for the pre-disclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============8098257516014422000==" Errors-To: predisclosure-applications-bounces@lists.xenproject.org Sender: "Predisclosure-applications" --===============8098257516014422000== Content-Type: multipart/signed; micalg=pgp-sha1; boundary="Sig_/+Dm.TqgNFReeicJph=23YUM"; protocol="application/pgp-signature" --Sig_/+Dm.TqgNFReeicJph=23YUM Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hi, On Tuesday 20 December 2016 05:15:54 Mihai Don=C8=9Bu wrote: > I am writing on behalf of Bitdefender with the hope of adding our > company to the pre-disclusure list. >=20 > 1. Organization > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D >=20 > Bitdefender SRL: http://www.bitdefender.com/business/ >=20 > 24, Delea Veche Street, Office Building A, 7th floor, 2nd district, > Bucharest, Romania >=20 > 2. Domain name providing Xen-based services > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D >=20 > N/A, though our cloud service runs on top of AWS > https://gravityzone.bitdefender.com/ >=20 > 3. Brief description > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D >=20 > Bitdefender provides security solutions integrating with various > virtualization platforms, including XenServer. Our latest product - > Bitdefender HVI - is tightly connected with the xen hypervisor via the > VM event (mem_access) subsystem, also known as Citrix XenServer Direct > Inspect API. >=20 > Inclusion in the pre-disclosure list would make us eligible for > receiving Citrix XenServer security updates ahead of time (binary and > source) in order to ensure a bug/regression-free experience for our > customers. >=20 > 4. Products using Xen > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D >=20 > Bitdefender GravityZone - Security for Virtualized Environments > http://www.bitdefender.com/business/virtualization-security.html >=20 > Bitdefender GravityZone - HVI > http://www.bitdefender.com/business/hypervisor-introspection.html >=20 > 5. Links to public web pages > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D >=20 > Bitdefender GravityZone SVE (includes XenServer support) > http://www.bitdefender.com/business/virtualization-security.html >=20 > Bitdefender GravityZone HVI (XenServer-based) > http://www.bitdefender.com/business/hypervisor-introspection.html >=20 > Documentation mentioning XenServer support: > http://download.bitdefender.com/resources/media/materials/virtualized-env= ironments/en/Bitdefender-2015-NGZ-SecurityForVirtualEnviro-DS-70574-A4-en_E= N-web.pdf >=20 > Security issues are reported to support@bitdefender.com or > security@bitdefender.com >=20 > We also run a dedicated bugbounty program: > http://www.bitdefender.com/site/view/bug-bounty.html >=20 > Published articles as part of Xen Project: > https://blog.xenproject.org/2015/08/04/the-bitdefender-virtual-machine-in= trospection-library-is-now-on-github/ > https://events.linuxfoundation.org/sites/events/files/slides/Zero-Footpri= nt%20Guest%20Memory%20Introspection%20from%20Xen%20_%20draft11.pdf >=20 > Assigned XSA-s: > https://xenbits.xen.org/xsa/advisory-105.html > https://xenbits.xen.org/xsa/advisory-106.html > https://xenbits.xen.org/xsa/advisory-116.html >=20 > 6. Xen Project Security Policy Agreement > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D >=20 > I and the members of our security team have read the Xen Project > security policy agreement[1] and agree to abide terms for inclusion in > pre-disclosure list. >=20 > [1] https://www.xenproject.org/security-policy.html >=20 > 7. Non-personal email address > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D >=20 > xen@bitdefender.com Sorry to push with this, but is there anything I can do to get the application unstuck? Thank you, --=20 Mihai DON=C8=9AU --Sig_/+Dm.TqgNFReeicJph=23YUM Content-Type: application/pgp-signature Content-Description: OpenPGP digital signature -----BEGIN PGP SIGNATURE----- iF0EARECAB0WIQR0XF9Y3LSEy1CQZAJ85R6qthEwqgUCWNFYmwAKCRB85R6qthEw qlmYAJ4g+o4CxGHqKbQvkw59q9HEkjNjegCgjiz5xjZcyZg97xvIlsIP63u36OA= =j/tY -----END PGP SIGNATURE----- --Sig_/+Dm.TqgNFReeicJph=23YUM-- --===============8098257516014422000== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KUHJlZGlzY2xv c3VyZS1hcHBsaWNhdGlvbnMgbWFpbGluZyBsaXN0ClByZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25z QGxpc3RzLnhlbnByb2plY3Qub3JnCmh0dHBzOi8vbGlzdHMueGVucHJvamVjdC5vcmcvY2dpLWJp bi9tYWlsbWFuL2xpc3RpbmZvL3ByZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25z --===============8098257516014422000==-- From predisclosure-applications-bounces@lists.xenproject.org Tue Mar 21 17:03:01 2017 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Tue, 21 Mar 2017 17:03:01 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cqNBV-0000ov-Hb; Tue, 21 Mar 2017 17:03:01 +0000 Received: from mail6.bemta6.messagelabs.com ([193.109.254.103]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cqNBU-0000oh-Cc for predisclosure-applications@lists.xenproject.org; Tue, 21 Mar 2017 17:03:00 +0000 Received: from [193.109.254.147] by server-6.bemta-6.messagelabs.com id C2/97-15112-3CC51D85; Tue, 21 Mar 2017 17:02:59 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrIIsWRWlGSWpSXmKPExsVyMfTGFt1DMRc jDK5+0LC413SfyYHR4/CHKywBjFGsmXlJ+RUJrBlvfrYwFjxVqHjV/JS5gXGRbBcjF4eQwGpG iXXNm1lBHBaBhawSRw++ZgRxJAT2skp8OtzI3sXICeTkSHxY9w3KLpbYsWI+mM0rIChxcuYTF hBbWEBS4sr06WC2kIC3xPMPOxhBbE4BM4lvp7cCbeAAisdL3N4lChJmE1CX6Jt5FqycRUBVYu vCNSwQ4w0lFh89xQgxPkCiZ9pNqPGBEh8/fQZbKyJgKXG/bRcziM0sYCxxYNtLsPHMQDPXzxO CCGtLLFv4mnkCo/AsJIfOQqiahaRqASPzKkaN4tSistQiXSNDvaSizPSMktzEzBxdQwMzvdzU 4uLE9NScxKRiveT83E2MwCBnAIIdjH+WBRxilORgUhLlTXS6GCHEl5SfUpmRWJwRX1Sak1p8i FGGg0NJgvdENFBOsCg1PbUiLTMHGG8waQkOHiUR3n8gad7igsTc4sx0iNQpRkuOB6d2vWHimD N7N5D81H/4DZMQS15+XqqUOG8uSIMASENGaR7cOFhKuMQoKyXMywh0oBBPQWpRbmYJqvwrRnE ORiVh3jSQKTyZeSVwW18BHcQEdFDZngsgB5UkIqSkGhiNuGKPTrv/7+zfr0HNzD+l3tvrvmNq qzd6/nRy2KvVOx4/vmF5Y03x677pHjuP3Ge1jhCaqfHR7azFhUuJF9imnheYdviEdeU/Cb4o7 mkRSg3XBe2cV9yvam0p3f5HXFFCrK1lBqOPpUsxL+M+V+dmczWjjjiTydV1rzj9FuzZk1llyH 5ro44SS3FGoqEWc1FxIgDs5hUhBAMAAA== X-Env-Sender: dunlapg@gmail.com X-Msg-Ref: server-11.tower-27.messagelabs.com!1490115778!62485111!1 X-Originating-IP: [209.85.216.180] X-SpamReason: No, hits=0.8 required=7.0 tests=BODY_RANDOM_LONG, RCVD_BY_IP X-StarScan-Received: X-StarScan-Version: 9.2.3; banners=-,-,- X-VirusChecked: Checked Received: (qmail 43648 invoked from network); 21 Mar 2017 17:02:58 -0000 Received: from mail-qt0-f180.google.com (HELO mail-qt0-f180.google.com) (209.85.216.180) by server-11.tower-27.messagelabs.com with AES128-GCM-SHA256 encrypted SMTP; 21 Mar 2017 17:02:58 -0000 Received: by mail-qt0-f180.google.com with SMTP id i34so135958129qtc.0 for ; Tue, 21 Mar 2017 10:02:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc:content-transfer-encoding; bh=yXJJfh7S7zdHu9ObRdYCeqIZ9Vfz7Izm3P3P2HuK66s=; b=j74WPcL1YOV0IvbXi4ScVvDgCvd/dOHbeJdvpjQshnWnrr03jiFeoNxUtWL68ADXDk KbNLNRkBhCeCir83i8oYctX71vDSdwqOGu6dWV0ssLWu1eNsaxFBUUNwMNHz5iJju0Dh HYu7L8UolO2nvAHgHBzV8ByHIXh5RAzJwBkhqDNSW0DuW4m+jPKl1nc/95r3pTn/eMBP cj+ybna8zXSfWg1BISrJvp6lVS/7BvmQZ1aHdduyz3+In6sWxWtUIQQo5yIOpCa9W56w Gavz6ckSOWvBewQyV92KeyHByzGO3KOl18XoB+denvIl8DLsqhkhKJZtBo1HIaR1m81m Ypwg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc:content-transfer-encoding; bh=yXJJfh7S7zdHu9ObRdYCeqIZ9Vfz7Izm3P3P2HuK66s=; b=j7TDTljS2X1+3HMLfc0OLMpz/KWFY/f+U1eKuz13V6yxJJBbUikiLjeZXe6awLhg+f 0g1NnnZN68WKl20e20OG+wkqOKaer1D+/69DNWZW+j2hvt9lvmx+iLiq3aiyakObJOEX KcXPf64xq/63hjvlT6pHMTt1nUZJzmyD1ogej/DPxmAOTirHnszVGhyuGhRWLYF24LIh 0laL2zdNgHch/7C5RHgWHjZEFb4wqWon5ngIE1re44W8B5yE+Tnfc7fS5fCx1YLHninN dg7MyoZnAc5QddhVhy+FGoMUniGxMV7m30R2S4bCTzLko4yUeIB1j6+GN5DGiR3nADnC Au4g== X-Gm-Message-State: AFeK/H11OTEmFOeZhNCxuW2NYxiNNk1kv1cKQYYOxmi4aSpdkar9FKJKRZzyfXXqQMavktlDvQQM3QoGRwyYdw== X-Received: by 10.200.49.29 with SMTP id g29mr31003151qtb.275.1490115777504; Tue, 21 Mar 2017 10:02:57 -0700 (PDT) MIME-Version: 1.0 Received: by 10.55.162.135 with HTTP; Tue, 21 Mar 2017 10:02:56 -0700 (PDT) In-Reply-To: <20170321184515.5f87d7f8@bitdefender.com> References: <20161220051554.3c323ba0@bitdefender.com> <20170321184515.5f87d7f8@bitdefender.com> From: George Dunlap Date: Tue, 21 Mar 2017 17:02:56 +0000 X-Google-Sender-Auth: UcKXGMkhGSOS8qOcgibmqJetFnw Message-ID: To: =?UTF-8?B?TWloYWkgRG9uyJt1?= Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Application for the pre-disclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: predisclosure-applications-bounces@lists.xenproject.org Sender: "Predisclosure-applications" TWloYWksCgpBY3R1YWxseSB3ZSBoYWQgaW50ZXJuYWxseSBhY3R1YWxseSBkZWNpZGVkIHRvIGFw cHJvdmUgeW91cgphcHBsaWNhdGlvbiwgYW5kIHRoZW4gdGhlIGJhbGwgZ290IGRyb3BwZWQgb24g YWN0dWFsbHkgaW1wbGVtZW50aW5nCml0LgoKTGV0IG1lIGNoYXNlIHRoYXQgcHJvY2VzcyB1cDsg YW5kIHBsZWFzZSBwaW5nIHVzIGFnYWluIGlmIHlvdSBoYXZlbid0CmhlYXJkIGZyb20gdXMgaW4g YSB3ZWVrLgoKU29ycnkgZm9yIHRoZSBkZWxheS4KCiAtR2VvcmdlIER1bmxhcAoKT24gVHVlLCBN YXIgMjEsIDIwMTcgYXQgNDo0NSBQTSwgTWloYWkgRG9uyJt1IDxtZG9udHVAYml0ZGVmZW5kZXIu Y29tPiB3cm90ZToKPiBIaSwKPgo+IE9uIFR1ZXNkYXkgMjAgRGVjZW1iZXIgMjAxNiAwNToxNTo1 NCBNaWhhaSBEb27Im3Ugd3JvdGU6Cj4+IEkgYW0gd3JpdGluZyBvbiBiZWhhbGYgb2YgQml0ZGVm ZW5kZXIgd2l0aCB0aGUgaG9wZSBvZiBhZGRpbmcgb3VyCj4+IGNvbXBhbnkgdG8gdGhlIHByZS1k aXNjbHVzdXJlIGxpc3QuCj4+Cj4+IDEuIE9yZ2FuaXphdGlvbgo+PiA9PT09PT09PT09PT09PT0K Pj4KPj4gQml0ZGVmZW5kZXIgU1JMOiBodHRwOi8vd3d3LmJpdGRlZmVuZGVyLmNvbS9idXNpbmVz cy8KPj4KPj4gMjQsIERlbGVhIFZlY2hlIFN0cmVldCwgT2ZmaWNlIEJ1aWxkaW5nIEEsIDd0aCBm bG9vciwgMm5kIGRpc3RyaWN0LAo+PiBCdWNoYXJlc3QsIFJvbWFuaWEKPj4KPj4gMi4gRG9tYWlu IG5hbWUgcHJvdmlkaW5nIFhlbi1iYXNlZCBzZXJ2aWNlcwo+PiA9PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09Cj4+Cj4+IE4vQSwgdGhvdWdoIG91ciBjbG91ZCBzZXJ2 aWNlIHJ1bnMgb24gdG9wIG9mIEFXUwo+PiBodHRwczovL2dyYXZpdHl6b25lLmJpdGRlZmVuZGVy LmNvbS8KPj4KPj4gMy4gQnJpZWYgZGVzY3JpcHRpb24KPj4gPT09PT09PT09PT09PT09PT09PT0K Pj4KPj4gQml0ZGVmZW5kZXIgcHJvdmlkZXMgc2VjdXJpdHkgc29sdXRpb25zIGludGVncmF0aW5n IHdpdGggdmFyaW91cwo+PiB2aXJ0dWFsaXphdGlvbiBwbGF0Zm9ybXMsIGluY2x1ZGluZyBYZW5T ZXJ2ZXIuIE91ciBsYXRlc3QgcHJvZHVjdCAtCj4+IEJpdGRlZmVuZGVyIEhWSSAtIGlzIHRpZ2h0 bHkgY29ubmVjdGVkIHdpdGggdGhlIHhlbiBoeXBlcnZpc29yIHZpYSB0aGUKPj4gVk0gZXZlbnQg KG1lbV9hY2Nlc3MpIHN1YnN5c3RlbSwgYWxzbyBrbm93biBhcyBDaXRyaXggWGVuU2VydmVyIERp cmVjdAo+PiBJbnNwZWN0IEFQSS4KPj4KPj4gSW5jbHVzaW9uIGluIHRoZSBwcmUtZGlzY2xvc3Vy ZSBsaXN0IHdvdWxkIG1ha2UgdXMgZWxpZ2libGUgZm9yCj4+IHJlY2VpdmluZyBDaXRyaXggWGVu U2VydmVyIHNlY3VyaXR5IHVwZGF0ZXMgYWhlYWQgb2YgdGltZSAoYmluYXJ5IGFuZAo+PiBzb3Vy Y2UpIGluIG9yZGVyIHRvIGVuc3VyZSBhIGJ1Zy9yZWdyZXNzaW9uLWZyZWUgZXhwZXJpZW5jZSBm b3Igb3VyCj4+IGN1c3RvbWVycy4KPj4KPj4gNC4gUHJvZHVjdHMgdXNpbmcgWGVuCj4+ID09PT09 PT09PT09PT09PT09PT09PQo+Pgo+PiBCaXRkZWZlbmRlciBHcmF2aXR5Wm9uZSAtIFNlY3VyaXR5 IGZvciBWaXJ0dWFsaXplZCBFbnZpcm9ubWVudHMKPj4gaHR0cDovL3d3dy5iaXRkZWZlbmRlci5j b20vYnVzaW5lc3MvdmlydHVhbGl6YXRpb24tc2VjdXJpdHkuaHRtbAo+Pgo+PiBCaXRkZWZlbmRl ciBHcmF2aXR5Wm9uZSAtIEhWSQo+PiBodHRwOi8vd3d3LmJpdGRlZmVuZGVyLmNvbS9idXNpbmVz cy9oeXBlcnZpc29yLWludHJvc3BlY3Rpb24uaHRtbAo+Pgo+PiA1LiBMaW5rcyB0byBwdWJsaWMg d2ViIHBhZ2VzCj4+ID09PT09PT09PT09PT09PT09PT09PT09PT09PT0KPj4KPj4gQml0ZGVmZW5k ZXIgR3Jhdml0eVpvbmUgU1ZFIChpbmNsdWRlcyBYZW5TZXJ2ZXIgc3VwcG9ydCkKPj4gaHR0cDov L3d3dy5iaXRkZWZlbmRlci5jb20vYnVzaW5lc3MvdmlydHVhbGl6YXRpb24tc2VjdXJpdHkuaHRt bAo+Pgo+PiBCaXRkZWZlbmRlciBHcmF2aXR5Wm9uZSBIVkkgKFhlblNlcnZlci1iYXNlZCkKPj4g aHR0cDovL3d3dy5iaXRkZWZlbmRlci5jb20vYnVzaW5lc3MvaHlwZXJ2aXNvci1pbnRyb3NwZWN0 aW9uLmh0bWwKPj4KPj4gRG9jdW1lbnRhdGlvbiBtZW50aW9uaW5nIFhlblNlcnZlciBzdXBwb3J0 Ogo+PiBodHRwOi8vZG93bmxvYWQuYml0ZGVmZW5kZXIuY29tL3Jlc291cmNlcy9tZWRpYS9tYXRl cmlhbHMvdmlydHVhbGl6ZWQtZW52aXJvbm1lbnRzL2VuL0JpdGRlZmVuZGVyLTIwMTUtTkdaLVNl Y3VyaXR5Rm9yVmlydHVhbEVudmlyby1EUy03MDU3NC1BNC1lbl9FTi13ZWIucGRmCj4+Cj4+IFNl Y3VyaXR5IGlzc3VlcyBhcmUgcmVwb3J0ZWQgdG8gc3VwcG9ydEBiaXRkZWZlbmRlci5jb20gb3IK Pj4gc2VjdXJpdHlAYml0ZGVmZW5kZXIuY29tCj4+Cj4+IFdlIGFsc28gcnVuIGEgZGVkaWNhdGVk IGJ1Z2JvdW50eSBwcm9ncmFtOgo+PiBodHRwOi8vd3d3LmJpdGRlZmVuZGVyLmNvbS9zaXRlL3Zp ZXcvYnVnLWJvdW50eS5odG1sCj4+Cj4+IFB1Ymxpc2hlZCBhcnRpY2xlcyBhcyBwYXJ0IG9mIFhl biBQcm9qZWN0Ogo+PiBodHRwczovL2Jsb2cueGVucHJvamVjdC5vcmcvMjAxNS8wOC8wNC90aGUt Yml0ZGVmZW5kZXItdmlydHVhbC1tYWNoaW5lLWludHJvc3BlY3Rpb24tbGlicmFyeS1pcy1ub3ct b24tZ2l0aHViLwo+PiBodHRwczovL2V2ZW50cy5saW51eGZvdW5kYXRpb24ub3JnL3NpdGVzL2V2 ZW50cy9maWxlcy9zbGlkZXMvWmVyby1Gb290cHJpbnQlMjBHdWVzdCUyME1lbW9yeSUyMEludHJv c3BlY3Rpb24lMjBmcm9tJTIwWGVuJTIwXyUyMGRyYWZ0MTEucGRmCj4+Cj4+IEFzc2lnbmVkIFhT QS1zOgo+PiBodHRwczovL3hlbmJpdHMueGVuLm9yZy94c2EvYWR2aXNvcnktMTA1Lmh0bWwKPj4g aHR0cHM6Ly94ZW5iaXRzLnhlbi5vcmcveHNhL2Fkdmlzb3J5LTEwNi5odG1sCj4+IGh0dHBzOi8v eGVuYml0cy54ZW4ub3JnL3hzYS9hZHZpc29yeS0xMTYuaHRtbAo+Pgo+PiA2LiBYZW4gUHJvamVj dCBTZWN1cml0eSBQb2xpY3kgQWdyZWVtZW50Cj4+ID09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT0KPj4KPj4gSSBhbmQgdGhlIG1lbWJlcnMgb2Ygb3VyIHNlY3VyaXR5IHRl YW0gaGF2ZSByZWFkIHRoZSBYZW4gUHJvamVjdAo+PiBzZWN1cml0eSBwb2xpY3kgYWdyZWVtZW50 WzFdIGFuZCBhZ3JlZSB0byBhYmlkZSB0ZXJtcyBmb3IgaW5jbHVzaW9uIGluCj4+IHByZS1kaXNj bG9zdXJlIGxpc3QuCj4+Cj4+IFsxXSBodHRwczovL3d3dy54ZW5wcm9qZWN0Lm9yZy9zZWN1cml0 eS1wb2xpY3kuaHRtbAo+Pgo+PiA3LiBOb24tcGVyc29uYWwgZW1haWwgYWRkcmVzcwo+PiA9PT09 PT09PT09PT09PT09PT09PT09PT09PT09PQo+Pgo+PiB4ZW5AYml0ZGVmZW5kZXIuY29tCj4KPiBT b3JyeSB0byBwdXNoIHdpdGggdGhpcywgYnV0IGlzIHRoZXJlIGFueXRoaW5nIEkgY2FuIGRvIHRv IGdldCB0aGUKPiBhcHBsaWNhdGlvbiB1bnN0dWNrPwo+Cj4gVGhhbmsgeW91LAo+Cj4gLS0KPiBN aWhhaSBET07ImlUKPgo+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fCj4gUHJlZGlzY2xvc3VyZS1hcHBsaWNhdGlvbnMgbWFpbGluZyBsaXN0Cj4gUHJlZGlz Y2xvc3VyZS1hcHBsaWNhdGlvbnNAbGlzdHMueGVucHJvamVjdC5vcmcKPiBodHRwczovL2xpc3Rz LnhlbnByb2plY3Qub3JnL2NnaS1iaW4vbWFpbG1hbi9saXN0aW5mby9wcmVkaXNjbG9zdXJlLWFw cGxpY2F0aW9ucwoKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X18KUHJlZGlzY2xvc3VyZS1hcHBsaWNhdGlvbnMgbWFpbGluZyBsaXN0ClByZWRpc2Nsb3N1cmUt YXBwbGljYXRpb25zQGxpc3RzLnhlbnByb2plY3Qub3JnCmh0dHBzOi8vbGlzdHMueGVucHJvamVj dC5vcmcvY2dpLWJpbi9tYWlsbWFuL2xpc3RpbmZvL3ByZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25z From predisclosure-applications-bounces@lists.xenproject.org Tue Mar 21 17:03:01 2017 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Tue, 21 Mar 2017 17:03:01 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cqNBV-0000ov-Hb; Tue, 21 Mar 2017 17:03:01 +0000 Received: from mail6.bemta6.messagelabs.com ([193.109.254.103]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cqNBU-0000oh-Cc for predisclosure-applications@lists.xenproject.org; Tue, 21 Mar 2017 17:03:00 +0000 Received: from [193.109.254.147] by server-6.bemta-6.messagelabs.com id C2/97-15112-3CC51D85; Tue, 21 Mar 2017 17:02:59 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrIIsWRWlGSWpSXmKPExsVyMfTGFt1DMRc jDK5+0LC413SfyYHR4/CHKywBjFGsmXlJ+RUJrBlvfrYwFjxVqHjV/JS5gXGRbBcjF4eQwGpG iXXNm1lBHBaBhawSRw++ZgRxJAT2skp8OtzI3sXICeTkSHxY9w3KLpbYsWI+mM0rIChxcuYTF hBbWEBS4sr06WC2kIC3xPMPOxhBbE4BM4lvp7cCbeAAisdL3N4lChJmE1CX6Jt5FqycRUBVYu vCNSwQ4w0lFh89xQgxPkCiZ9pNqPGBEh8/fQZbKyJgKXG/bRcziM0sYCxxYNtLsPHMQDPXzxO CCGtLLFv4mnkCo/AsJIfOQqiahaRqASPzKkaN4tSistQiXSNDvaSizPSMktzEzBxdQwMzvdzU 4uLE9NScxKRiveT83E2MwCBnAIIdjH+WBRxilORgUhLlTXS6GCHEl5SfUpmRWJwRX1Sak1p8i FGGg0NJgvdENFBOsCg1PbUiLTMHGG8waQkOHiUR3n8gad7igsTc4sx0iNQpRkuOB6d2vWHimD N7N5D81H/4DZMQS15+XqqUOG8uSIMASENGaR7cOFhKuMQoKyXMywh0oBBPQWpRbmYJqvwrRnE ORiVh3jSQKTyZeSVwW18BHcQEdFDZngsgB5UkIqSkGhiNuGKPTrv/7+zfr0HNzD+l3tvrvmNq qzd6/nRy2KvVOx4/vmF5Y03x677pHjuP3Ge1jhCaqfHR7azFhUuJF9imnheYdviEdeU/Cb4o7 mkRSg3XBe2cV9yvam0p3f5HXFFCrK1lBqOPpUsxL+M+V+dmczWjjjiTydV1rzj9FuzZk1llyH 5ro44SS3FGoqEWc1FxIgDs5hUhBAMAAA== X-Env-Sender: dunlapg@gmail.com X-Msg-Ref: server-11.tower-27.messagelabs.com!1490115778!62485111!1 X-Originating-IP: [209.85.216.180] X-SpamReason: No, hits=0.8 required=7.0 tests=BODY_RANDOM_LONG, RCVD_BY_IP X-StarScan-Received: X-StarScan-Version: 9.2.3; banners=-,-,- X-VirusChecked: Checked Received: (qmail 43648 invoked from network); 21 Mar 2017 17:02:58 -0000 Received: from mail-qt0-f180.google.com (HELO mail-qt0-f180.google.com) (209.85.216.180) by server-11.tower-27.messagelabs.com with AES128-GCM-SHA256 encrypted SMTP; 21 Mar 2017 17:02:58 -0000 Received: by mail-qt0-f180.google.com with SMTP id i34so135958129qtc.0 for ; Tue, 21 Mar 2017 10:02:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc:content-transfer-encoding; bh=yXJJfh7S7zdHu9ObRdYCeqIZ9Vfz7Izm3P3P2HuK66s=; b=j74WPcL1YOV0IvbXi4ScVvDgCvd/dOHbeJdvpjQshnWnrr03jiFeoNxUtWL68ADXDk KbNLNRkBhCeCir83i8oYctX71vDSdwqOGu6dWV0ssLWu1eNsaxFBUUNwMNHz5iJju0Dh HYu7L8UolO2nvAHgHBzV8ByHIXh5RAzJwBkhqDNSW0DuW4m+jPKl1nc/95r3pTn/eMBP cj+ybna8zXSfWg1BISrJvp6lVS/7BvmQZ1aHdduyz3+In6sWxWtUIQQo5yIOpCa9W56w Gavz6ckSOWvBewQyV92KeyHByzGO3KOl18XoB+denvIl8DLsqhkhKJZtBo1HIaR1m81m Ypwg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc:content-transfer-encoding; bh=yXJJfh7S7zdHu9ObRdYCeqIZ9Vfz7Izm3P3P2HuK66s=; b=j7TDTljS2X1+3HMLfc0OLMpz/KWFY/f+U1eKuz13V6yxJJBbUikiLjeZXe6awLhg+f 0g1NnnZN68WKl20e20OG+wkqOKaer1D+/69DNWZW+j2hvt9lvmx+iLiq3aiyakObJOEX KcXPf64xq/63hjvlT6pHMTt1nUZJzmyD1ogej/DPxmAOTirHnszVGhyuGhRWLYF24LIh 0laL2zdNgHch/7C5RHgWHjZEFb4wqWon5ngIE1re44W8B5yE+Tnfc7fS5fCx1YLHninN dg7MyoZnAc5QddhVhy+FGoMUniGxMV7m30R2S4bCTzLko4yUeIB1j6+GN5DGiR3nADnC Au4g== X-Gm-Message-State: AFeK/H11OTEmFOeZhNCxuW2NYxiNNk1kv1cKQYYOxmi4aSpdkar9FKJKRZzyfXXqQMavktlDvQQM3QoGRwyYdw== X-Received: by 10.200.49.29 with SMTP id g29mr31003151qtb.275.1490115777504; Tue, 21 Mar 2017 10:02:57 -0700 (PDT) MIME-Version: 1.0 Received: by 10.55.162.135 with HTTP; Tue, 21 Mar 2017 10:02:56 -0700 (PDT) In-Reply-To: <20170321184515.5f87d7f8@bitdefender.com> References: <20161220051554.3c323ba0@bitdefender.com> <20170321184515.5f87d7f8@bitdefender.com> From: George Dunlap Date: Tue, 21 Mar 2017 17:02:56 +0000 X-Google-Sender-Auth: UcKXGMkhGSOS8qOcgibmqJetFnw Message-ID: To: =?UTF-8?B?TWloYWkgRG9uyJt1?= Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Application for the pre-disclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: predisclosure-applications-bounces@lists.xenproject.org Sender: "Predisclosure-applications" TWloYWksCgpBY3R1YWxseSB3ZSBoYWQgaW50ZXJuYWxseSBhY3R1YWxseSBkZWNpZGVkIHRvIGFw cHJvdmUgeW91cgphcHBsaWNhdGlvbiwgYW5kIHRoZW4gdGhlIGJhbGwgZ290IGRyb3BwZWQgb24g YWN0dWFsbHkgaW1wbGVtZW50aW5nCml0LgoKTGV0IG1lIGNoYXNlIHRoYXQgcHJvY2VzcyB1cDsg YW5kIHBsZWFzZSBwaW5nIHVzIGFnYWluIGlmIHlvdSBoYXZlbid0CmhlYXJkIGZyb20gdXMgaW4g YSB3ZWVrLgoKU29ycnkgZm9yIHRoZSBkZWxheS4KCiAtR2VvcmdlIER1bmxhcAoKT24gVHVlLCBN YXIgMjEsIDIwMTcgYXQgNDo0NSBQTSwgTWloYWkgRG9uyJt1IDxtZG9udHVAYml0ZGVmZW5kZXIu Y29tPiB3cm90ZToKPiBIaSwKPgo+IE9uIFR1ZXNkYXkgMjAgRGVjZW1iZXIgMjAxNiAwNToxNTo1 NCBNaWhhaSBEb27Im3Ugd3JvdGU6Cj4+IEkgYW0gd3JpdGluZyBvbiBiZWhhbGYgb2YgQml0ZGVm ZW5kZXIgd2l0aCB0aGUgaG9wZSBvZiBhZGRpbmcgb3VyCj4+IGNvbXBhbnkgdG8gdGhlIHByZS1k aXNjbHVzdXJlIGxpc3QuCj4+Cj4+IDEuIE9yZ2FuaXphdGlvbgo+PiA9PT09PT09PT09PT09PT0K Pj4KPj4gQml0ZGVmZW5kZXIgU1JMOiBodHRwOi8vd3d3LmJpdGRlZmVuZGVyLmNvbS9idXNpbmVz cy8KPj4KPj4gMjQsIERlbGVhIFZlY2hlIFN0cmVldCwgT2ZmaWNlIEJ1aWxkaW5nIEEsIDd0aCBm bG9vciwgMm5kIGRpc3RyaWN0LAo+PiBCdWNoYXJlc3QsIFJvbWFuaWEKPj4KPj4gMi4gRG9tYWlu IG5hbWUgcHJvdmlkaW5nIFhlbi1iYXNlZCBzZXJ2aWNlcwo+PiA9PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09Cj4+Cj4+IE4vQSwgdGhvdWdoIG91ciBjbG91ZCBzZXJ2 aWNlIHJ1bnMgb24gdG9wIG9mIEFXUwo+PiBodHRwczovL2dyYXZpdHl6b25lLmJpdGRlZmVuZGVy LmNvbS8KPj4KPj4gMy4gQnJpZWYgZGVzY3JpcHRpb24KPj4gPT09PT09PT09PT09PT09PT09PT0K Pj4KPj4gQml0ZGVmZW5kZXIgcHJvdmlkZXMgc2VjdXJpdHkgc29sdXRpb25zIGludGVncmF0aW5n IHdpdGggdmFyaW91cwo+PiB2aXJ0dWFsaXphdGlvbiBwbGF0Zm9ybXMsIGluY2x1ZGluZyBYZW5T ZXJ2ZXIuIE91ciBsYXRlc3QgcHJvZHVjdCAtCj4+IEJpdGRlZmVuZGVyIEhWSSAtIGlzIHRpZ2h0 bHkgY29ubmVjdGVkIHdpdGggdGhlIHhlbiBoeXBlcnZpc29yIHZpYSB0aGUKPj4gVk0gZXZlbnQg KG1lbV9hY2Nlc3MpIHN1YnN5c3RlbSwgYWxzbyBrbm93biBhcyBDaXRyaXggWGVuU2VydmVyIERp cmVjdAo+PiBJbnNwZWN0IEFQSS4KPj4KPj4gSW5jbHVzaW9uIGluIHRoZSBwcmUtZGlzY2xvc3Vy ZSBsaXN0IHdvdWxkIG1ha2UgdXMgZWxpZ2libGUgZm9yCj4+IHJlY2VpdmluZyBDaXRyaXggWGVu U2VydmVyIHNlY3VyaXR5IHVwZGF0ZXMgYWhlYWQgb2YgdGltZSAoYmluYXJ5IGFuZAo+PiBzb3Vy Y2UpIGluIG9yZGVyIHRvIGVuc3VyZSBhIGJ1Zy9yZWdyZXNzaW9uLWZyZWUgZXhwZXJpZW5jZSBm b3Igb3VyCj4+IGN1c3RvbWVycy4KPj4KPj4gNC4gUHJvZHVjdHMgdXNpbmcgWGVuCj4+ID09PT09 PT09PT09PT09PT09PT09PQo+Pgo+PiBCaXRkZWZlbmRlciBHcmF2aXR5Wm9uZSAtIFNlY3VyaXR5 IGZvciBWaXJ0dWFsaXplZCBFbnZpcm9ubWVudHMKPj4gaHR0cDovL3d3dy5iaXRkZWZlbmRlci5j b20vYnVzaW5lc3MvdmlydHVhbGl6YXRpb24tc2VjdXJpdHkuaHRtbAo+Pgo+PiBCaXRkZWZlbmRl ciBHcmF2aXR5Wm9uZSAtIEhWSQo+PiBodHRwOi8vd3d3LmJpdGRlZmVuZGVyLmNvbS9idXNpbmVz cy9oeXBlcnZpc29yLWludHJvc3BlY3Rpb24uaHRtbAo+Pgo+PiA1LiBMaW5rcyB0byBwdWJsaWMg d2ViIHBhZ2VzCj4+ID09PT09PT09PT09PT09PT09PT09PT09PT09PT0KPj4KPj4gQml0ZGVmZW5k ZXIgR3Jhdml0eVpvbmUgU1ZFIChpbmNsdWRlcyBYZW5TZXJ2ZXIgc3VwcG9ydCkKPj4gaHR0cDov L3d3dy5iaXRkZWZlbmRlci5jb20vYnVzaW5lc3MvdmlydHVhbGl6YXRpb24tc2VjdXJpdHkuaHRt bAo+Pgo+PiBCaXRkZWZlbmRlciBHcmF2aXR5Wm9uZSBIVkkgKFhlblNlcnZlci1iYXNlZCkKPj4g aHR0cDovL3d3dy5iaXRkZWZlbmRlci5jb20vYnVzaW5lc3MvaHlwZXJ2aXNvci1pbnRyb3NwZWN0 aW9uLmh0bWwKPj4KPj4gRG9jdW1lbnRhdGlvbiBtZW50aW9uaW5nIFhlblNlcnZlciBzdXBwb3J0 Ogo+PiBodHRwOi8vZG93bmxvYWQuYml0ZGVmZW5kZXIuY29tL3Jlc291cmNlcy9tZWRpYS9tYXRl cmlhbHMvdmlydHVhbGl6ZWQtZW52aXJvbm1lbnRzL2VuL0JpdGRlZmVuZGVyLTIwMTUtTkdaLVNl Y3VyaXR5Rm9yVmlydHVhbEVudmlyby1EUy03MDU3NC1BNC1lbl9FTi13ZWIucGRmCj4+Cj4+IFNl Y3VyaXR5IGlzc3VlcyBhcmUgcmVwb3J0ZWQgdG8gc3VwcG9ydEBiaXRkZWZlbmRlci5jb20gb3IK Pj4gc2VjdXJpdHlAYml0ZGVmZW5kZXIuY29tCj4+Cj4+IFdlIGFsc28gcnVuIGEgZGVkaWNhdGVk IGJ1Z2JvdW50eSBwcm9ncmFtOgo+PiBodHRwOi8vd3d3LmJpdGRlZmVuZGVyLmNvbS9zaXRlL3Zp ZXcvYnVnLWJvdW50eS5odG1sCj4+Cj4+IFB1Ymxpc2hlZCBhcnRpY2xlcyBhcyBwYXJ0IG9mIFhl biBQcm9qZWN0Ogo+PiBodHRwczovL2Jsb2cueGVucHJvamVjdC5vcmcvMjAxNS8wOC8wNC90aGUt Yml0ZGVmZW5kZXItdmlydHVhbC1tYWNoaW5lLWludHJvc3BlY3Rpb24tbGlicmFyeS1pcy1ub3ct b24tZ2l0aHViLwo+PiBodHRwczovL2V2ZW50cy5saW51eGZvdW5kYXRpb24ub3JnL3NpdGVzL2V2 ZW50cy9maWxlcy9zbGlkZXMvWmVyby1Gb290cHJpbnQlMjBHdWVzdCUyME1lbW9yeSUyMEludHJv c3BlY3Rpb24lMjBmcm9tJTIwWGVuJTIwXyUyMGRyYWZ0MTEucGRmCj4+Cj4+IEFzc2lnbmVkIFhT QS1zOgo+PiBodHRwczovL3hlbmJpdHMueGVuLm9yZy94c2EvYWR2aXNvcnktMTA1Lmh0bWwKPj4g aHR0cHM6Ly94ZW5iaXRzLnhlbi5vcmcveHNhL2Fkdmlzb3J5LTEwNi5odG1sCj4+IGh0dHBzOi8v eGVuYml0cy54ZW4ub3JnL3hzYS9hZHZpc29yeS0xMTYuaHRtbAo+Pgo+PiA2LiBYZW4gUHJvamVj dCBTZWN1cml0eSBQb2xpY3kgQWdyZWVtZW50Cj4+ID09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT0KPj4KPj4gSSBhbmQgdGhlIG1lbWJlcnMgb2Ygb3VyIHNlY3VyaXR5IHRl YW0gaGF2ZSByZWFkIHRoZSBYZW4gUHJvamVjdAo+PiBzZWN1cml0eSBwb2xpY3kgYWdyZWVtZW50 WzFdIGFuZCBhZ3JlZSB0byBhYmlkZSB0ZXJtcyBmb3IgaW5jbHVzaW9uIGluCj4+IHByZS1kaXNj bG9zdXJlIGxpc3QuCj4+Cj4+IFsxXSBodHRwczovL3d3dy54ZW5wcm9qZWN0Lm9yZy9zZWN1cml0 eS1wb2xpY3kuaHRtbAo+Pgo+PiA3LiBOb24tcGVyc29uYWwgZW1haWwgYWRkcmVzcwo+PiA9PT09 PT09PT09PT09PT09PT09PT09PT09PT09PQo+Pgo+PiB4ZW5AYml0ZGVmZW5kZXIuY29tCj4KPiBT b3JyeSB0byBwdXNoIHdpdGggdGhpcywgYnV0IGlzIHRoZXJlIGFueXRoaW5nIEkgY2FuIGRvIHRv IGdldCB0aGUKPiBhcHBsaWNhdGlvbiB1bnN0dWNrPwo+Cj4gVGhhbmsgeW91LAo+Cj4gLS0KPiBN aWhhaSBET07ImlUKPgo+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fCj4gUHJlZGlzY2xvc3VyZS1hcHBsaWNhdGlvbnMgbWFpbGluZyBsaXN0Cj4gUHJlZGlz Y2xvc3VyZS1hcHBsaWNhdGlvbnNAbGlzdHMueGVucHJvamVjdC5vcmcKPiBodHRwczovL2xpc3Rz LnhlbnByb2plY3Qub3JnL2NnaS1iaW4vbWFpbG1hbi9saXN0aW5mby9wcmVkaXNjbG9zdXJlLWFw cGxpY2F0aW9ucwoKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X18KUHJlZGlzY2xvc3VyZS1hcHBsaWNhdGlvbnMgbWFpbGluZyBsaXN0ClByZWRpc2Nsb3N1cmUt YXBwbGljYXRpb25zQGxpc3RzLnhlbnByb2plY3Qub3JnCmh0dHBzOi8vbGlzdHMueGVucHJvamVj dC5vcmcvY2dpLWJpbi9tYWlsbWFuL2xpc3RpbmZvL3ByZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25z From predisclosure-applications-bounces@lists.xenproject.org Fri Mar 24 15:21:34 2017 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Fri, 24 Mar 2017 15:21:34 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1crR1x-0001SN-Gn; Fri, 24 Mar 2017 15:21:33 +0000 Received: from mail6.bemta6.messagelabs.com ([193.109.254.103]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1crR1w-0001SD-1F for predisclosure-applications@lists.xenproject.org; Fri, 24 Mar 2017 15:21:32 +0000 Received: from [193.109.254.147] by server-3.bemta-6.messagelabs.com id A2/33-27751-B7935D85; Fri, 24 Mar 2017 15:21:31 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrMIsWRWlGSWpSXmKPExsVyMXThet0qy6s RBheucVjca7rP5MDocfjDFZYAxijWzLyk/IoE1ozTi84xFXSpVUy6vpyxgfGbYhcjF4eQwEpG iYU7d7CCOCwCk5klzm9fxALiSAj8YJFYtG8hUxcjJ5CTI/Fqxm4WCLtQ4sruP+wgNq+AoMTJm U/A4kIC3hLTJ0xhA7HZBHQkJv6YwAxiswioSvxf2s8CUR8gsW5GH1ivsIC+xKHFzWD1IgLGEl NvrQOrZxbwkpi76wrzBEbeWUhWzEKSmsXIAWSrS6yfJwQRVpO4ve0qO4StLbFs4WvmBYysqxg 1ilOLylKLdA1N9ZKKMtMzSnITM3N0DQ3M9HJTi4sT01NzEpOK9ZLzczcxAgORAQh2MH5bFnCI UZKDSUmU123blQghvqT8lMqMxOKM+KLSnNTiQ4wyHBxKErzPTK5GCAkWpaanVqRl5gBjAiYtw cGjJMK7FCTNW1yQmFucmQ6ROsVoyfHg1K43TBxzZu8Gkp/6D79hEmLJy89LlRLnlTYFahAAac gozYMbB4vbS4yyUsK8jEAHCvEUpBblZpagyr9iFOdgVBLmvWIENIUnM68EbusroIOYgA6aveE KyEEliQgpqQbG6TbL9JtDHnyuqZuSf30ixxbZ+2Zuy33zLon2X3+b182/uPbRsfbS+XrfhCtn /b5/q0vbM7E36P2S2fI/T5Q82y527lvec5uOD8HxAUu/nu/T5tx88b/wG79p/3WaOFWdkleI8 hzd255z0eZyp1HlmUlLJPuWXnpRaL/81Z6aqzUtLTtXTvu0VYmlOCPRUIu5qDgRADtd1vTWAg AA X-Env-Sender: vince@hostpapa.com X-Msg-Ref: server-7.tower-27.messagelabs.com!1490368889!88973051!1 X-Originating-IP: [209.85.161.175] X-SpamReason: No, hits=1.4 required=7.0 tests=BODY_RANDOM_LONG, HTML_40_50,HTML_MESSAGE,RCVD_BY_IP X-StarScan-Received: X-StarScan-Version: 9.2.3; banners=-,-,- X-VirusChecked: Checked Received: (qmail 39299 invoked from network); 24 Mar 2017 15:21:30 -0000 Received: from mail-yw0-f175.google.com (HELO mail-yw0-f175.google.com) (209.85.161.175) by server-7.tower-27.messagelabs.com with AES128-GCM-SHA256 encrypted SMTP; 24 Mar 2017 15:21:30 -0000 Received: by mail-yw0-f175.google.com with SMTP id p77so4125152ywg.1 for ; Fri, 24 Mar 2017 08:21:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hostpapa.com; s=google; h=mime-version:from:date:message-id:subject:to; bh=HuwpioB2C8Q7gjHwj1/nbOH0pSZprp4212frUe9WyGk=; b=FcmLr02PVBTz5k2eMjm8jc90ACHAH1a6eJIHx1yYFWL8R0f5U1F4DsaeP4HqpPSb1Q OqLjEYSfL2Rl8lCBG8EfiNVEMXVDPC6WHYEOnwqibwMZxudH1Q8yY8BnfcdpxXKlFhS6 k2ez3BximkAYofgyTro0epa4w7Ooh5V3v9zXw= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=HuwpioB2C8Q7gjHwj1/nbOH0pSZprp4212frUe9WyGk=; b=dsECwfHGBqaW3FY5Y6UCRgn9SHYpu4/KBrTY8p6whXpty1GSf8dbWfA3lq+LLdsFeF fcPcnCCCvkXV3HV4/aDuRdXnaB8cwWrR6iGxJT0TtqKBYmi6kU2w/E3nvXTXIIDuOb1T OqW8qUbLedMYYaUSD5wcE7VrTsTd7skjsuuVWpB9eBFjHXFgc/5UHcbFcwSljd9dx2b2 /HrBcqmTgKQeRhsSqVFgnigHc6rM6AdHbt7ACOev5WCJl3vL5SDktpOHf6BecvVoY0e7 1BnXtTIK2YG2Yuru0z/kK7+78jNwmAmGqBZOJkyQO1WsAEoMDjtQWJ3VokqIt+TEivY8 uE8w== X-Gm-Message-State: AFeK/H3QTPcrB7KSdR82cr1jsLK3oueOPGlXZ3L8OfHNNyOozbxwJgEXRFTiGA3eA4FYTGGv8WyYGqo6THzCleCx X-Received: by 10.129.51.86 with SMTP id z83mr6513485ywz.74.1490368888537; Fri, 24 Mar 2017 08:21:28 -0700 (PDT) MIME-Version: 1.0 Received: by 10.129.95.193 with HTTP; Fri, 24 Mar 2017 08:21:28 -0700 (PDT) From: "Stratful, Vince" Date: Fri, 24 Mar 2017 15:21:28 +0000 Message-ID: To: predisclosure-applications@lists.xenproject.org Subject: [Predisclosure-applications] Predisclosure application for HostPapa X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============6205020624079568929==" Errors-To: predisclosure-applications-bounces@lists.xenproject.org Sender: "Predisclosure-applications" --===============6205020624079568929== Content-Type: multipart/alternative; boundary=001a11421daa2fa386054b7b8cbd --001a11421daa2fa386054b7b8cbd Content-Type: text/plain; charset=UTF-8 Hi all, My name is Vince Stratful, I'm the CTO for HostPapa. We sell VPS' to end users using Xen via http://www.hostpapa.com, .ca, .co.uk, etc. I believe HostPapa fits the predisclosure criteria because we're a hosting company that uses Xen to provide our services. Not all of our products utilize Xen, but we do exclusively use Xen for our VPS products. Evidence of our status as a hosting services provider: https://www.hostpapa.com/web-hosting-plan/vps-hosting/ Evidence of our status as a user of Xen: https://www.hostpapa.com/web-hosting-plan/vps-hosting/ - in the "Managed VPS" hover in each of the plan descriptions we mention that Xen is used as our hypervisor. https://www.hostpapa.com/web-hosting-plan/vps-hosting/detailed-specs/ - on our detailed-specs break down, we mention Xen again. Information about our security policies: Not publicly available, in our support center clients are given multiple avenues to contact us regarding security and abuse issues. Security contact address: security@hostpapa.com I have read the policy located at https://www.xenproject.org/ security-policy.html in full and agree to abide by the terms for inclusion in the list. I understand that discretion and confidentiality during an embargo period is of the utmost importance. The address I would like included in the predisclosure list is: security@hostpapa.com Please let me know if you require any additional information to make our inclusion as smooth as possible. Thank you for your consideration! Sincerely, Vince Stratful. -- Vince Stratful Chief Technology Officer HostPapa, Inc. Phone: (905) 315-3455 Toll-Free (888) 959-PAPA (7272) --001a11421daa2fa386054b7b8cbd Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi all,

My name is Vince Stratful, I= 9;m the CTO for HostPapa. We sell VPS' to end users using Xen via http://www.hostpapa.com, .ca, .co.uk, etc.

I believe HostPapa fits the predisclosure criteria becaus= e we're a hosting company that uses Xen to provide our services. Not al= l of our products utilize Xen, but we do exclusively use Xen for our VPS pr= oducts.

Evidence of our status as a hosting servic= es provider:

Evidence of our status = as a user of Xen:
https://www.hostpapa.com/web-hos= ting-plan/vps-hosting/ - in the "Managed VPS" hover in each o= f the plan descriptions we mention that Xen is used as our hypervisor.
https://www.hostpapa.com/web-hosting-plan/vps-hosting/detailed= -specs/ - on our detailed-specs break down, we mention Xen again.
=
=C2=A0
Information about our security policies:
No= t publicly available, in our support center clients are given multiple aven= ues to contact us regarding security and abuse issues.

=
Security contact address:

I have read the policy located at=C2=A0https://www.xenproject.org/= security-policy.html in full and agree to abide by the terms for inclus= ion in the list. I understand that discretion and confidentiality during an= embargo period is of the utmost importance.

The a= ddress I would like included in the predisclosure list is: security@hostpapa.com
<= div>
Please let me know if you require any additional informa= tion to make our inclusion as smooth as possible.

= Thank you for your consideration!

Sincerely,
=
Vince Stratful.

--
Vince Stratful
Chief Technology Office= r
HostPapa, Inc.

--001a11421daa2fa386054b7b8cbd-- --===============6205020624079568929== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KUHJlZGlzY2xv c3VyZS1hcHBsaWNhdGlvbnMgbWFpbGluZyBsaXN0ClByZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25z QGxpc3RzLnhlbnByb2plY3Qub3JnCmh0dHBzOi8vbGlzdHMueGVucHJvamVjdC5vcmcvY2dpLWJp bi9tYWlsbWFuL2xpc3RpbmZvL3ByZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25z --===============6205020624079568929==-- From predisclosure-applications-bounces@lists.xenproject.org Fri Mar 24 15:21:34 2017 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Fri, 24 Mar 2017 15:21:34 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1crR1x-0001SN-Gn; Fri, 24 Mar 2017 15:21:33 +0000 Received: from mail6.bemta6.messagelabs.com ([193.109.254.103]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1crR1w-0001SD-1F for predisclosure-applications@lists.xenproject.org; Fri, 24 Mar 2017 15:21:32 +0000 Received: from [193.109.254.147] by server-3.bemta-6.messagelabs.com id A2/33-27751-B7935D85; Fri, 24 Mar 2017 15:21:31 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrMIsWRWlGSWpSXmKPExsVyMXThet0qy6s RBheucVjca7rP5MDocfjDFZYAxijWzLyk/IoE1ozTi84xFXSpVUy6vpyxgfGbYhcjF4eQwEpG iYU7d7CCOCwCk5klzm9fxALiSAj8YJFYtG8hUxcjJ5CTI/Fqxm4WCLtQ4sruP+wgNq+AoMTJm U/A4kIC3hLTJ0xhA7HZBHQkJv6YwAxiswioSvxf2s8CUR8gsW5GH1ivsIC+xKHFzWD1IgLGEl NvrQOrZxbwkpi76wrzBEbeWUhWzEKSmsXIAWSrS6yfJwQRVpO4ve0qO4StLbFs4WvmBYysqxg 1ilOLylKLdA1N9ZKKMtMzSnITM3N0DQ3M9HJTi4sT01NzEpOK9ZLzczcxAgORAQh2MH5bFnCI UZKDSUmU123blQghvqT8lMqMxOKM+KLSnNTiQ4wyHBxKErzPTK5GCAkWpaanVqRl5gBjAiYtw cGjJMK7FCTNW1yQmFucmQ6ROsVoyfHg1K43TBxzZu8Gkp/6D79hEmLJy89LlRLnlTYFahAAac gozYMbB4vbS4yyUsK8jEAHCvEUpBblZpagyr9iFOdgVBLmvWIENIUnM68EbusroIOYgA6aveE KyEEliQgpqQbG6TbL9JtDHnyuqZuSf30ixxbZ+2Zuy33zLon2X3+b182/uPbRsfbS+XrfhCtn /b5/q0vbM7E36P2S2fI/T5Q82y527lvec5uOD8HxAUu/nu/T5tx88b/wG79p/3WaOFWdkleI8 hzd255z0eZyp1HlmUlLJPuWXnpRaL/81Z6aqzUtLTtXTvu0VYmlOCPRUIu5qDgRADtd1vTWAg AA X-Env-Sender: vince@hostpapa.com X-Msg-Ref: server-7.tower-27.messagelabs.com!1490368889!88973051!1 X-Originating-IP: [209.85.161.175] X-SpamReason: No, hits=1.4 required=7.0 tests=BODY_RANDOM_LONG, HTML_40_50,HTML_MESSAGE,RCVD_BY_IP X-StarScan-Received: X-StarScan-Version: 9.2.3; banners=-,-,- X-VirusChecked: Checked Received: (qmail 39299 invoked from network); 24 Mar 2017 15:21:30 -0000 Received: from mail-yw0-f175.google.com (HELO mail-yw0-f175.google.com) (209.85.161.175) by server-7.tower-27.messagelabs.com with AES128-GCM-SHA256 encrypted SMTP; 24 Mar 2017 15:21:30 -0000 Received: by mail-yw0-f175.google.com with SMTP id p77so4125152ywg.1 for ; Fri, 24 Mar 2017 08:21:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hostpapa.com; s=google; h=mime-version:from:date:message-id:subject:to; bh=HuwpioB2C8Q7gjHwj1/nbOH0pSZprp4212frUe9WyGk=; b=FcmLr02PVBTz5k2eMjm8jc90ACHAH1a6eJIHx1yYFWL8R0f5U1F4DsaeP4HqpPSb1Q OqLjEYSfL2Rl8lCBG8EfiNVEMXVDPC6WHYEOnwqibwMZxudH1Q8yY8BnfcdpxXKlFhS6 k2ez3BximkAYofgyTro0epa4w7Ooh5V3v9zXw= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=HuwpioB2C8Q7gjHwj1/nbOH0pSZprp4212frUe9WyGk=; b=dsECwfHGBqaW3FY5Y6UCRgn9SHYpu4/KBrTY8p6whXpty1GSf8dbWfA3lq+LLdsFeF fcPcnCCCvkXV3HV4/aDuRdXnaB8cwWrR6iGxJT0TtqKBYmi6kU2w/E3nvXTXIIDuOb1T OqW8qUbLedMYYaUSD5wcE7VrTsTd7skjsuuVWpB9eBFjHXFgc/5UHcbFcwSljd9dx2b2 /HrBcqmTgKQeRhsSqVFgnigHc6rM6AdHbt7ACOev5WCJl3vL5SDktpOHf6BecvVoY0e7 1BnXtTIK2YG2Yuru0z/kK7+78jNwmAmGqBZOJkyQO1WsAEoMDjtQWJ3VokqIt+TEivY8 uE8w== X-Gm-Message-State: AFeK/H3QTPcrB7KSdR82cr1jsLK3oueOPGlXZ3L8OfHNNyOozbxwJgEXRFTiGA3eA4FYTGGv8WyYGqo6THzCleCx X-Received: by 10.129.51.86 with SMTP id z83mr6513485ywz.74.1490368888537; Fri, 24 Mar 2017 08:21:28 -0700 (PDT) MIME-Version: 1.0 Received: by 10.129.95.193 with HTTP; Fri, 24 Mar 2017 08:21:28 -0700 (PDT) From: "Stratful, Vince" Date: Fri, 24 Mar 2017 15:21:28 +0000 Message-ID: To: predisclosure-applications@lists.xenproject.org Subject: [Predisclosure-applications] Predisclosure application for HostPapa X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============6205020624079568929==" Errors-To: predisclosure-applications-bounces@lists.xenproject.org Sender: "Predisclosure-applications" --===============6205020624079568929== Content-Type: multipart/alternative; boundary=001a11421daa2fa386054b7b8cbd --001a11421daa2fa386054b7b8cbd Content-Type: text/plain; charset=UTF-8 Hi all, My name is Vince Stratful, I'm the CTO for HostPapa. We sell VPS' to end users using Xen via http://www.hostpapa.com, .ca, .co.uk, etc. I believe HostPapa fits the predisclosure criteria because we're a hosting company that uses Xen to provide our services. Not all of our products utilize Xen, but we do exclusively use Xen for our VPS products. Evidence of our status as a hosting services provider: https://www.hostpapa.com/web-hosting-plan/vps-hosting/ Evidence of our status as a user of Xen: https://www.hostpapa.com/web-hosting-plan/vps-hosting/ - in the "Managed VPS" hover in each of the plan descriptions we mention that Xen is used as our hypervisor. https://www.hostpapa.com/web-hosting-plan/vps-hosting/detailed-specs/ - on our detailed-specs break down, we mention Xen again. Information about our security policies: Not publicly available, in our support center clients are given multiple avenues to contact us regarding security and abuse issues. Security contact address: security@hostpapa.com I have read the policy located at https://www.xenproject.org/ security-policy.html in full and agree to abide by the terms for inclusion in the list. I understand that discretion and confidentiality during an embargo period is of the utmost importance. The address I would like included in the predisclosure list is: security@hostpapa.com Please let me know if you require any additional information to make our inclusion as smooth as possible. Thank you for your consideration! Sincerely, Vince Stratful. -- Vince Stratful Chief Technology Officer HostPapa, Inc. Phone: (905) 315-3455 Toll-Free (888) 959-PAPA (7272) --001a11421daa2fa386054b7b8cbd Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
I believe HostPapa fits the predisclosure criteria becaus= e we're a hosting company that uses Xen to provide our services. Not al= l of our products utilize Xen, but we do exclusively use Xen for our VPS pr= oducts.

Evidence of our status as a hosting servic= es provider:

Evidence of our status = as a user of Xen:
https://www.hostpapa.com/web-hos= ting-plan/vps-hosting/ - in the "Managed VPS" hover in each o= f the plan descriptions we mention that Xen is used as our hypervisor.
https://www.hostpapa.com/web-hosting-plan/vps-hosting/detailed= -specs/ - on our detailed-specs break down, we mention Xen again.
=
=C2=A0
Information about our security policies:
No= t publicly available, in our support center clients are given multiple aven= ues to contact us regarding security and abuse issues.

=
Security contact address:

I have read the policy located at=C2=A0https://www.xenproject.org/= security-policy.html in full and agree to abide by the terms for inclus= ion in the list. I understand that discretion and confidentiality during an= embargo period is of the utmost importance.

The a= ddress I would like included in the predisclosure list is: security@hostpapa.com
<= div>
Please let me know if you require any additional informa= tion to make our inclusion as smooth as possible.

= Thank you for your consideration!

Sincerely,
=
Vince Stratful.

--
Vince Stratful
Chief Technology Office= r
HostPapa, Inc.

--001a11421daa2fa386054b7b8cbd-- --===============6205020624079568929== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KUHJlZGlzY2xv c3VyZS1hcHBsaWNhdGlvbnMgbWFpbGluZyBsaXN0ClByZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25z QGxpc3RzLnhlbnByb2plY3Qub3JnCmh0dHBzOi8vbGlzdHMueGVucHJvamVjdC5vcmcvY2dpLWJp bi9tYWlsbWFuL2xpc3RpbmZvL3ByZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25z --===============6205020624079568929==--