From predisclosure-applications-bounces@lists.xenproject.org Tue Apr 04 13:29:04 2017 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Tue, 04 Apr 2017 13:29:04 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cvOW7-0007R8-Cd; Tue, 04 Apr 2017 13:29:03 +0000 Received: from mail6.bemta6.messagelabs.com ([193.109.254.103]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cvOW6-0007R2-8q for predisclosure-applications@lists.xenproject.org; Tue, 04 Apr 2017 13:29:02 +0000 Received: from [193.109.254.147] by server-11.bemta-6.messagelabs.com id 61/61-03642-D9F93E85; Tue, 04 Apr 2017 13:29:01 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprNIsWRWlGSWpSXmKPExsXitHRDpO6c+Y8 jDNa+s7a413SfyYHR4/CHKywBjFGsmXlJ+RUJrBnLf/xkL9grUDHpxAWmBsbHvF2MnBwSAv4S 62Y1soLYwgKBEisu9jGC2CICcRLv7s8Cs4UEAiT6/8xhBrHZBPQk5h3/ygJi8wrYSjzfsRGsh kVAReLT0d1gtqhAsMSBiTfYIWoEJU7OfAJWzwk0/+SOzUBxDg5mAU2J9bv0QcLMAvIS299CjB cSUJVY/OAo+wRG3llIumchdMxC0rGAkXkVo0ZxalFZapGukaleUlFmekZJbmJmjq6hgZlebmp xcWJ6ak5iUrFecn7uJkZgQDEAwQ7GVQsCDzFKcjApifIe9nwcIcSXlJ9SmZFYnBFfVJqTWnyI UYaDQ0mCt3MeUE6wKDU9tSItMwcY2jBpCQ4eJRHeHSBp3uKCxNzizHSI1ClGXY45s3e/YRJiy cvPS5US540GKRIAKcoozYMbAYuzS4yyUsK8jEBHCfEUpBblZpagyr9iFOdgVBLmPQAyhSczrw Ru0yugI5iAjnhy5yHIESWJCCmpBsZErz3/ZCumrWo+yK9hufacYrmJcZFM3bP8OY/DJ5xU2/4 3ebn85fqus14xnTm/76kf0VrHnlt3zuTko3MTDbepZmTenbEgsybuX+sVFg7+NfWTH8ed3nZD rf7A/R2qqbatW3Pqt78WDXeSCLL6/Fhe/K2nXCOH36QF71YcXZ/ZcHXCuyaOxHtKLMUZiYZaz EXFiQAOiFrsrgIAAA== X-Env-Sender: prvs=260097ae7=George.Dunlap@citrix.com X-Msg-Ref: server-2.tower-27.messagelabs.com!1491312539!43059570!1 X-Originating-IP: [66.165.176.89] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogNjYuMTY1LjE3Ni44OSA9PiAyMDMwMDc=\n,received_headers: No Received headers X-StarScan-Received: X-StarScan-Version: 9.2.3; banners=-,-,- X-VirusChecked: Checked Received: (qmail 31407 invoked from network); 4 Apr 2017 13:29:00 -0000 Received: from smtp.citrix.com (HELO SMTP.CITRIX.COM) (66.165.176.89) by server-2.tower-27.messagelabs.com with RC4-SHA encrypted SMTP; 4 Apr 2017 13:29:00 -0000 X-IronPort-AV: E=Sophos;i="5.36,275,1486425600"; d="scan'208";a="417359309" To: "Stratful, Vince" , References: From: George Dunlap Message-ID: Date: Tue, 4 Apr 2017 14:28:40 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Icedove/45.6.0 MIME-Version: 1.0 In-Reply-To: Subject: Re: [Predisclosure-applications] Predisclosure application for HostPapa X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: predisclosure-applications-bounces@lists.xenproject.org Sender: "Predisclosure-applications" T24gMjQvMDMvMTcgMTU6MjEsIFN0cmF0ZnVsLCBWaW5jZSB3cm90ZToKPiBIaSBhbGwsCj4gCj4g TXkgbmFtZSBpcyBWaW5jZSBTdHJhdGZ1bCwgSSdtIHRoZSBDVE8gZm9yIEhvc3RQYXBhLiBXZSBz ZWxsIFZQUycgdG8gZW5kCj4gdXNlcnMgdXNpbmcgWGVuIHZpYSBodHRwOi8vd3d3Lmhvc3RwYXBh LmNvbSwgLmNhLCAuY28udWssIGV0Yy4KPiAKPiBJIGJlbGlldmUgSG9zdFBhcGEgZml0cyB0aGUg cHJlZGlzY2xvc3VyZSBjcml0ZXJpYSBiZWNhdXNlIHdlJ3JlIGEgaG9zdGluZwo+IGNvbXBhbnkg dGhhdCB1c2VzIFhlbiB0byBwcm92aWRlIG91ciBzZXJ2aWNlcy4gTm90IGFsbCBvZiBvdXIgcHJv ZHVjdHMKPiB1dGlsaXplIFhlbiwgYnV0IHdlIGRvIGV4Y2x1c2l2ZWx5IHVzZSBYZW4gZm9yIG91 ciBWUFMgcHJvZHVjdHMuCj4gCj4gRXZpZGVuY2Ugb2Ygb3VyIHN0YXR1cyBhcyBhIGhvc3Rpbmcg c2VydmljZXMgcHJvdmlkZXI6Cj4gaHR0cHM6Ly93d3cuaG9zdHBhcGEuY29tL3dlYi1ob3N0aW5n LXBsYW4vdnBzLWhvc3RpbmcvCj4gCj4gRXZpZGVuY2Ugb2Ygb3VyIHN0YXR1cyBhcyBhIHVzZXIg b2YgWGVuOgo+IGh0dHBzOi8vd3d3Lmhvc3RwYXBhLmNvbS93ZWItaG9zdGluZy1wbGFuL3Zwcy1o b3N0aW5nLyAtIGluIHRoZSAiTWFuYWdlZAo+IFZQUyIgaG92ZXIgaW4gZWFjaCBvZiB0aGUgcGxh biBkZXNjcmlwdGlvbnMgd2UgbWVudGlvbiB0aGF0IFhlbiBpcyB1c2VkIGFzCj4gb3VyIGh5cGVy dmlzb3IuCj4gaHR0cHM6Ly93d3cuaG9zdHBhcGEuY29tL3dlYi1ob3N0aW5nLXBsYW4vdnBzLWhv c3RpbmcvZGV0YWlsZWQtc3BlY3MvIC0gb24KPiBvdXIgZGV0YWlsZWQtc3BlY3MgYnJlYWsgZG93 biwgd2UgbWVudGlvbiBYZW4gYWdhaW4uCj4gCj4gSW5mb3JtYXRpb24gYWJvdXQgb3VyIHNlY3Vy aXR5IHBvbGljaWVzOgo+IE5vdCBwdWJsaWNseSBhdmFpbGFibGUsIGluIG91ciBzdXBwb3J0IGNl bnRlciBjbGllbnRzIGFyZSBnaXZlbiBtdWx0aXBsZQo+IGF2ZW51ZXMgdG8gY29udGFjdCB1cyBy ZWdhcmRpbmcgc2VjdXJpdHkgYW5kIGFidXNlIGlzc3Vlcy4KPiAKPiBTZWN1cml0eSBjb250YWN0 IGFkZHJlc3M6Cj4gc2VjdXJpdHlAaG9zdHBhcGEuY29tCj4gCj4gSSBoYXZlIHJlYWQgdGhlIHBv bGljeSBsb2NhdGVkIGF0IGh0dHBzOi8vd3d3LnhlbnByb2plY3Qub3JnLwo+IHNlY3VyaXR5LXBv bGljeS5odG1sIGluIGZ1bGwgYW5kIGFncmVlIHRvIGFiaWRlIGJ5IHRoZSB0ZXJtcyBmb3IgaW5j bHVzaW9uCj4gaW4gdGhlIGxpc3QuIEkgdW5kZXJzdGFuZCB0aGF0IGRpc2NyZXRpb24gYW5kIGNv bmZpZGVudGlhbGl0eSBkdXJpbmcgYW4KPiBlbWJhcmdvIHBlcmlvZCBpcyBvZiB0aGUgdXRtb3N0 IGltcG9ydGFuY2UuCgpWaW5jZSwKClRoYW5rcyBmb3IgeW91ciBhcHBsaWNhdGlvbi4gIE5lYXJs eSBldmVyeXRoaW5nIGxvb2tzIHRvIGJlIGluIG9yZGVyLApleGNlcHQgZm9yIG9uZSBpdGVtIGZy b20gdGhlIFhlblByb2plY3QgU2VjdXJpdHkgUG9saWN5OgoKIllvdXIgaW52aXRhdGlvbiB0byBt ZW1iZXJzIG9mIHRoZSBwdWJsaWMsIHdobyBkaXNjb3ZlciBzZWN1cml0eQpwcm9ibGVtcyB3aXRo IHlvdXIgcHJvZHVjdHMvc2VydmljZXMsIHRvIHJlcG9ydCB0aGVtIGluIGNvbmZpZGVuY2UgdG8g eW91IgoKVGhlIHBvbGljeSBzYXlzIHRoYXQgdGhlIGludml0YXRpb24gbXVzdCBiZSB0byAibWVt YmVycyBvZiB0aGUgcHVibGljIiwKbm90IGN1c3RvbWVycy4gIFRoaXMgbWVhbnMgdGhhdCB0aGVy ZSBtdXN0IGF0IGxlYXN0IGFuIGludml0YXRpb24gb24Kc29tZSBwdWJsaWNseSBhY2Nlc3NpYmxl IHdlYiBwYWdlOyBzbyB5b3UgZG8gbm90ICh5ZXQpIG1lZXQgdGhlIGNyaXRlcmlhLgoKWW91IG1p Z2h0IGNvbnNpZGVyLCBmb3IgaW5zdGFuY2UsIGFkZGluZyBhIHNlY3Rpb24gdG8KaHR0cHM6Ly93 d3cuaG9zdHBhcGEuY29tL2Fib3V0LWhvc3RwYXBhLyBhYm91dCByZXBvcnRpbmcgc2VjdXJpdHkg cHJvYmxlbXMuCgpIb3BlIHRvIGhlYXIgZnJvbSB5b3UgYWdhaW4gc29vbi4KClRoYW5rcywKCi1H ZW9yZ2UgRHVubGFwCiBvbiBiZWhhbGYgb2YgdGhlIFhlblByb2plY3QgU2VjdXJpdHkgVGVhbQoK Cl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fClByZWRpc2Ns b3N1cmUtYXBwbGljYXRpb25zIG1haWxpbmcgbGlzdApQcmVkaXNjbG9zdXJlLWFwcGxpY2F0aW9u c0BsaXN0cy54ZW5wcm9qZWN0Lm9yZwpodHRwczovL2xpc3RzLnhlbnByb2plY3Qub3JnL2NnaS1i aW4vbWFpbG1hbi9saXN0aW5mby9wcmVkaXNjbG9zdXJlLWFwcGxpY2F0aW9ucw== From predisclosure-applications-bounces@lists.xenproject.org Mon Apr 10 11:01:07 2017 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Mon, 10 Apr 2017 11:01:07 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cxX4D-0006ol-BG; Mon, 10 Apr 2017 11:01:05 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cxX4C-0006ob-AL for predisclosure-applications@lists.xenproject.org; Mon, 10 Apr 2017 11:01:04 +0000 Received: from [85.158.139.211] by server-6.bemta-5.messagelabs.com id 7A/AA-16497-FE56BE85; Mon, 10 Apr 2017 11:01:03 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrGIsWRWlGSWpSXmKPExsVyMfTOOt23qa8 jDC61mlrca7rP5MDocfjDFZYAxijWzLyk/IoE1owbp1rZCprtKjZunsfUwNhq1sXIxSEksJpR YvqPpSwgDovAdmaJq1OOMoE4EgJzWCV2H7sJ5HACOTkSW54/YIewSyUezj0NZvMKCEqcnPkEq JsDaJS3xKqDYGFOATuJhvtfmCE2NDNK7L1ylwUkwSagIzHxxwRmEJtFQFVi8fadTBBzAiS2nr /FCmILA9mnm6+D1YgA1V/d+wIszixgLHFg20so20ti696HLBMYBWYhOWMWktQsoJOYBdQl1s8 TggirSdzedpUdwtaWWLbwNfMCRtZVjOrFqUVlqUW6pnpJRZnpGSW5iZk5uoYGpnq5qcXFiemp OYlJxXrJ+bmbGIHhzAAEOxi/9DsfYpTkYFIS5U23fB0hxJeUn1KZkVicEV9UmpNafIhRhoNDS YJ3YwpQTrAoNT21Ii0zBxhZMGkJDh4lEd5JIGne4oLE3OLMdIjUKUZLjheX379n4ni39AOQfL Lyx3smIZa8/LxUKXHeJyANAiANGaV5cONg0X+JUVZKmJcR6EAhnoLUotzMElT5V4ziHIxKwrw vQKbwZOaVwG19BXQQE9BBZ3a9BDmoJBEhJdXAWDJXdPJvvvZ+a53S29wehxafcu6YIjm74NDe MiOZykMznn0+u26Rz86QteusZKbNbcx+dvHpmaXn2O25164PlCmvuD+p4FBgdrwyc5TB+qWhi ulq/bbvOy5PWrUtc5WFc3i49TIvs8BzM9V+8KXeXv7VSi7p4ozICM76q4lm3ysLqh4zup3OVG Ipzkg01GIuKk4EAD7qVhn5AgAA X-Env-Sender: vince@hostpapa.com X-Msg-Ref: server-6.tower-206.messagelabs.com!1491822060!92536067!1 X-Originating-IP: [209.85.220.174] X-SpamReason: No, hits=0.9 required=7.0 tests=BODY_RANDOM_LONG, HTML_30_40,HTML_MESSAGE,RCVD_BY_IP X-StarScan-Received: X-StarScan-Version: 9.4.12; banners=-,-,- X-VirusChecked: Checked Received: (qmail 7905 invoked from network); 10 Apr 2017 11:01:01 -0000 Received: from mail-qk0-f174.google.com (HELO mail-qk0-f174.google.com) (209.85.220.174) by server-6.tower-206.messagelabs.com with AES128-GCM-SHA256 encrypted SMTP; 10 Apr 2017 11:01:01 -0000 Received: by mail-qk0-f174.google.com with SMTP id h67so105643807qke.0 for ; Mon, 10 Apr 2017 04:01:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hostpapa.com; s=google; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=IRDQUTUwhLYm+4gH1oXz7EP3eqIPF8pScNO/xcvgk2Y=; b=41mPZWwxdBFZzhjy9f3rDAUWwdOeXrBdOBWRSdELNkNHtDKLzcn/kTIIqXT1oKmGPX dyFLzgdWsp1rXGtLymFOt/EA9p+UASApG99XKOKA/LxSTCfC0+odcIqgONHPZGbFuzXU AmcQXpikWMTUijDBRZqJT3GVOm3PmkXbHvk6I= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=IRDQUTUwhLYm+4gH1oXz7EP3eqIPF8pScNO/xcvgk2Y=; b=rk++hLYD/u2TELZk31MYgRwQ25MFRQJ9WG3ScK6xGbEN/9E+skHLUjomFu9jTgIQoA +8gZlnZwO+AWGmJxooGf046p5c6CIrV7IaIVUYNfokjK330JusF5F6plPXLhsVnfOOls 868xv7h9mi0oXPi6h9TUsuylwYako1wKj8FQEZXc23hlbNXlkAxuFA9CKfRtdSo14hw6 bZF+XVU1KUK2aGvzQWDolSOywOLB+9P224y6Mz0iUrx5/SMtqSDqmFsZs3c//DUfw+Kv l7vTlqBllaZV7Mnk392ZLjz1VJqEGcb0/LCiE7cGaGL4iexJ+BaQzRD+oWNFhPtBrXKX i1gg== X-Gm-Message-State: AFeK/H18f2V7o9DG931YdXlK4G2DCgfyA5aIRG1DWWEIYvRqNEzYYfJ1jMfeqgepW1HLMJc09xFdH9C6BeTFfhtN X-Received: by 10.13.248.133 with SMTP id i127mr39116666ywf.116.1491822060476; Mon, 10 Apr 2017 04:01:00 -0700 (PDT) MIME-Version: 1.0 Received: by 10.129.95.193 with HTTP; Mon, 10 Apr 2017 04:01:00 -0700 (PDT) In-Reply-To: References: From: "Stratful, Vince" Date: Mon, 10 Apr 2017 12:01:00 +0100 Message-ID: To: George Dunlap Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Predisclosure application for HostPapa X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============6106860591707143875==" Errors-To: predisclosure-applications-bounces@lists.xenproject.org Sender: "Predisclosure-applications" --===============6106860591707143875== Content-Type: multipart/alternative; boundary=94eb2c07ee96fbb45b054ccde341 --94eb2c07ee96fbb45b054ccde341 Content-Type: text/plain; charset=UTF-8 Hi George, Thanks for getting back to us, the necessary changes have been made on https://www.hostpapa.com/about-hostpapa/ The additional content is: -- Security concerns, enquiries or notifications: We're committed to making the web as safe as possible. If you have any concerns regarding security at HostPapa, or would like to disclose any security issues you may have discovered with our hosting platform, please reach out to us via security@hostpapa.com. -- Thanks, Vince. On Tue, Apr 4, 2017 at 2:28 PM, George Dunlap wrote: > On 24/03/17 15:21, Stratful, Vince wrote: > > Hi all, > > > > My name is Vince Stratful, I'm the CTO for HostPapa. We sell VPS' to end > > users using Xen via http://www.hostpapa.com, .ca, .co.uk, etc. > > > > I believe HostPapa fits the predisclosure criteria because we're a > hosting > > company that uses Xen to provide our services. Not all of our products > > utilize Xen, but we do exclusively use Xen for our VPS products. > > > > Evidence of our status as a hosting services provider: > > https://www.hostpapa.com/web-hosting-plan/vps-hosting/ > > > > Evidence of our status as a user of Xen: > > https://www.hostpapa.com/web-hosting-plan/vps-hosting/ - in the "Managed > > VPS" hover in each of the plan descriptions we mention that Xen is used > as > > our hypervisor. > > https://www.hostpapa.com/web-hosting-plan/vps-hosting/detailed-specs/ - > on > > our detailed-specs break down, we mention Xen again. > > > > Information about our security policies: > > Not publicly available, in our support center clients are given multiple > > avenues to contact us regarding security and abuse issues. > > > > Security contact address: > > security@hostpapa.com > > > > I have read the policy located at https://www.xenproject.org/ > > security-policy.html in full and agree to abide by the terms for > inclusion > > in the list. I understand that discretion and confidentiality during an > > embargo period is of the utmost importance. > > Vince, > > Thanks for your application. Nearly everything looks to be in order, > except for one item from the XenProject Security Policy: > > "Your invitation to members of the public, who discover security > problems with your products/services, to report them in confidence to you" > > The policy says that the invitation must be to "members of the public", > not customers. This means that there must at least an invitation on > some publicly accessible web page; so you do not (yet) meet the criteria. > > You might consider, for instance, adding a section to > https://www.hostpapa.com/about-hostpapa/ about reporting security > problems. > > Hope to hear from you again soon. > > Thanks, > > -George Dunlap > on behalf of the XenProject Security Team > > -- Vince Stratful Chief Technology Officer HostPapa, Inc. Phone: (905) 315-3455 Toll-Free (888) 959-PAPA (7272) --94eb2c07ee96fbb45b054ccde341 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi George,

Thanks for getting back to u= s, the necessary changes have been made on=C2=A0https://www.hostpapa.com/about-hostpapa/

The additional content is:

--=
Security concerns, enquiries or notifications:
We're committed to making the web as safe as possible. If = you have any concerns regarding security at HostPapa, or would like to disc= lose any security issues you may have discovered with our hosting platform,= please reach out to us via securi= ty@hostpapa.com.
--

Thanks,
Vince.


On Tue, Apr 4, 2017 at 2:28 PM, George Dunlap <george.dunlap@citrix.com> wrote:
On 24/03/17 15:21, Stratful, Vince wrote:
> Hi all,
>
> My name is Vince Stratful, I'm the CTO for HostPapa. We sell VPS&#= 39; to end
> users using Xen via http://www.hostpapa.com, .ca, .co.uk, etc.
>
> I believe HostPapa fits the predisclosure criteria because we're a= hosting
> company that uses Xen to provide our services. Not all of our products=
> utilize Xen, but we do exclusively use Xen for our VPS products.
>
> Evidence of our status as a hosting services provider:
> https://www.hostpapa.com/web-hosting= -plan/vps-hosting/
>
> Evidence of our status as a user of Xen:
> https://www.hostpapa.com/web-hosting= -plan/vps-hosting/ - in the "Managed
> VPS" hover in each of the plan descriptions we mention that Xen i= s used as
> our hypervisor.
> https://www.hostpapa.com/w= eb-hosting-plan/vps-hosting/detailed-specs/ - on
> our detailed-specs break down, we mention Xen again.
>
> Information about our security policies:
> Not publicly available, in our support center clients are given multip= le
> avenues to contact us regarding security and abuse issues.
>
> Security contact address:
> security@hostpapa.com
>
> I have read the policy located at https://www.xenproject.org/ > security-policy.html in full and agree to abide by the terms for inclu= sion
> in the list. I understand that discretion and confidentiality during a= n
> embargo period is of the utmost importance.

Vince,

Thanks for your application.=C2=A0 Nearly everything looks to be in order,<= br> except for one item from the XenProject Security Policy:

"Your invitation to members of the public, who discover security
problems with your products/services, to report them in confidence to you&q= uot;

The policy says that the invitation must be to "members of the public&= quot;,
not customers.=C2=A0 This means that there must at least an invitation on some publicly accessible web page; so you do not (yet) meet the criteria.
You might consider, for instance, adding a section to
https://www.hostpapa.com/about-hostpapa/ about repo= rting security problems.

Hope to hear from you again soon.

Thanks,

-George Dunlap
=C2=A0on behalf of the XenProject Security Team




--
Vince Stratful
Chi= ef Technology Officer
HostPapa, Inc.

Pho= ne: (905) 315-3455
Toll-Free (888) 959-PAPA (7272)
--94eb2c07ee96fbb45b054ccde341-- --===============6106860591707143875== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KUHJlZGlzY2xv c3VyZS1hcHBsaWNhdGlvbnMgbWFpbGluZyBsaXN0ClByZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25z QGxpc3RzLnhlbnByb2plY3Qub3JnCmh0dHBzOi8vbGlzdHMueGVucHJvamVjdC5vcmcvY2dpLWJp bi9tYWlsbWFuL2xpc3RpbmZvL3ByZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25z --===============6106860591707143875==-- From predisclosure-applications-bounces@lists.xenproject.org Tue Apr 18 19:34:27 2017 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Tue, 18 Apr 2017 19:34:27 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1d0YtN-0000Vv-He; Tue, 18 Apr 2017 19:34:25 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1d0YtM-0000Vp-AJ for predisclosure-applications@lists.xenproject.org; Tue, 18 Apr 2017 19:34:24 +0000 Received: from [85.158.139.211] by server-6.bemta-5.messagelabs.com id 4A/9B-02180-F3A66F85; Tue, 18 Apr 2017 19:34:23 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA1WSb0hTURTAd9/++CqXz83lcRjkKDPFqaFgRFE RFEK6PgQSRL7Va5tuc7w3dUHkH0jblFSaroxQMYIsjCzLrDTMBPWDoZKlplajTYlcFKaW2Xt7 0+rb757fOefeczm4UFYrUeKUzUrRZtKokqwXvfEpguP3Zs9nJtqvqFMnS6awfejwC9+ISIOOi w1mba4tS6y/53opsTTIbTWTRZIiVCR3oHU4EBnQ3uqTcCwjCuHbklPsQOtZfo5gfHkR4w8eBE /argu5g4i4IATHihfxxonB17I2IX/oQVDV8DaIayYhkmBxeRFxHEbo4dalWRHHciIBfi60ivh 4MlR6WjCe1VDu8vhZRGyDi5+++FlK7IHhy05/PiI2wY/+O/64kAiHMXc9xg9BwI2ng0KeFTDz 8beYYwXb09nWLeEeh4hGBDedU0F80hZYfuQOFGyGofpy/zhAVAihs+JTIOkIuB48D4hKBM0fJ gIiB7oGawJ8HhrL6jE+aQyDj2XFAREJ92duBKofimHU04/xH6CEdyN2xHMkeCeeiatQbN0/M9 UhnOUdcLcjgQ8fhqZXLRKeo8BZ/j6ozv81odB31S1qQOJmFMNQdD5Fx+9MUWtpg05vNZEGY3x SYoraRDEMqaOMpJZRn8o1tSJ2XwoFAtSOOsrSu1EEjqkUUnvSfKZsozb39Fk9yehP0nlGiulG kTiuAmmnnnWhNKWjbGcMRnbpVjXgwaow6VFOSxkLaWIMOl71oyhluDTawAqCE/o881rZ6roOo c1KuRQJBAJZsIWiTQbr/34WheNIJZcOc+2DDWbrWvdZ9mKMvThT85272Er+VcoiFFSQc3q8PK KALvUuep2xA5qVuYO5t6ZOVWbnawY+G6uT431k34Efrxu3jsWM7A5L6HKHTG9Ki6t13TZrmzR 2YruldPuJDSVjTYfmZFlpW+JC0i2O2l/nHBXz1btkM+KIY497klXFGV+v7O/s1Yx6bNERLdVp 1+QLytTp7l7ZUo9KxOjJpFghzZB/ABnkh7apAwAA X-Env-Sender: Matt.Hazinski@netapp.com X-Msg-Ref: server-13.tower-206.messagelabs.com!1492544059!78415797!1 X-Originating-IP: [216.240.21.12] X-SpamReason: No, hits=0.5 required=7.0 tests=BODY_RANDOM_LONG X-StarScan-Received: X-StarScan-Version: 9.4.12; banners=-,-,- X-VirusChecked: Checked Received: (qmail 32543 invoked from network); 18 Apr 2017 19:34:21 -0000 Received: from mx141.netapp.com (HELO mx141.netapp.com) (216.240.21.12) by server-13.tower-206.messagelabs.com with RC4-SHA encrypted SMTP; 18 Apr 2017 19:34:21 -0000 X-IronPort-AV: E=Sophos;i="5.37,219,1488873600"; d="scan'208";a="196720423" Received: from hioexcmbx08-prd.hq.netapp.com ([10.122.105.41]) by mx141-out.netapp.com with ESMTP; 18 Apr 2017 12:21:54 -0700 Received: from VMWEXCCAS10-PRD.hq.netapp.com (10.122.105.28) by hioexcmbx08-prd.hq.netapp.com (10.122.105.41) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Tue, 18 Apr 2017 12:34:13 -0700 Received: from NAM01-BY2-obe.outbound.protection.outlook.com (10.120.60.153) by VMWEXCCAS10-PRD.hq.netapp.com (10.122.105.28) with Microsoft SMTP Server (TLS) id 15.0.1210.3 via Frontend Transport; Tue, 18 Apr 2017 12:34:12 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=netapp.onmicrosoft.com; s=selector1-netapp-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=vuLl2NqOAGqHxyAa9HIHnSoKqqYmxjBZ9FUEVJs4VaM=; b=AcVdrlYmpx8xlhJ9pW+iEJAd1EKeTK3glRsMHd9gXiEMRW4c0FwKBlGPeJTfPXMQCpdMEtZqcBi7JHnfSbLXA1RaeUHZy1fAlz/XqjUO/jeVxRY76joKVXiarzab5b+wMa1tFALgsPcjmz0RqJ2/kujvBbIQJy3DPEW01CqnBoI= Received: from BL2PR06MB2162.namprd06.prod.outlook.com (10.167.100.12) by BL2PR06MB2162.namprd06.prod.outlook.com (10.167.100.12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1034.10; Tue, 18 Apr 2017 19:34:12 +0000 Received: from BL2PR06MB2162.namprd06.prod.outlook.com ([10.167.100.12]) by BL2PR06MB2162.namprd06.prod.outlook.com ([10.167.100.12]) with mapi id 15.01.1034.015; Tue, 18 Apr 2017 19:34:12 +0000 From: "Hazinski, Matt" To: "predisclosure-applications@lists.xenproject.org" Thread-Topic: NetApp pre-disclosure list application Thread-Index: AQHSuHrBQgH34RrjvUOpA4cTTNlXSg== Date: Tue, 18 Apr 2017 19:34:12 +0000 Message-ID: <1E151620-AE1E-4AD7-9789-58DE3A7AE78D@netapp.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.17.0.160611 x-originating-ip: [216.240.30.5] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BL2PR06MB2162; 7:SQpF/QV15OR6McUW4japcgFiNhp1IKGvvq0LQgmmBGougYcJ0U6gTm9iuUwJ8VhmJNnJ5pXfUVD8oIUYY/utbzrW0psi0nGg0KZGXgzitrnVUSyWpsg/1gUYUlnUtyWZ0zhyrurz7KI7QPkkTAOgkOuWP94+ygMM4KnbA41v7uNeSaKoj3XeI8i2ouJYczwxYUJ/qeJOMC6rDCySyKoxNbZ6f35HwXxJni6ugqeXMuoGddY0goxVXj/UEajpXCZGD6nobT+cGqx39WFu+UaWJWE80V8oF4OAfuvOCTn+etmDreaWEGdoNhyFHWWMJyt0U3/xlx2JE1ShtpUGqZHbDw== x-ms-office365-filtering-correlation-id: 48c5bf37-2ce4-4260-0da6-08d48691e48a x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(2017030254075)(201703131423075)(201703031133081)(201702281549075); SRVR:BL2PR06MB2162; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(100616993060999)(158342451672863)(20558992708506)(192374486261705)(246460726564240); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(5005006)(8121501046)(93006095)(93001095)(3002001)(10201501046)(6055026)(6041248)(20161123562025)(20161123564025)(201703131423075)(201702281528075)(201703061421075)(20161123560025)(20161123555025)(6072148); SRVR:BL2PR06MB2162; BCL:0; PCL:0; RULEID:; SRVR:BL2PR06MB2162; x-forefront-prvs: 028166BF91 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(6009001)(39850400002)(39840400002)(39400400002)(39410400002)(39450400003)(38730400002)(6506006)(2906002)(3846002)(54356999)(110136004)(102836003)(33656002)(50986999)(2900100001)(25786009)(6116002)(189998001)(2351001)(4001350100001)(6486002)(36756003)(8936002)(83716003)(7736002)(81166006)(19273905006)(8676002)(122556002)(77096006)(6436002)(53936002)(305945005)(966004)(3660700001)(6916009)(6306002)(6512007)(5640700003)(83506001)(2501003)(3480700004)(3280700002)(82746002)(5660300001)(66066001)(99286003)(86362001)(563064011); DIR:OUT; SFP:1101; SCL:1; SRVR:BL2PR06MB2162; H:BL2PR06MB2162.namprd06.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en; spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-ID: <5E23E12E41C05F4F854E5D54D332D4EA@namprd06.prod.outlook.com> MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Apr 2017 19:34:12.6503 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4b0911a0-929b-4715-944b-c03745165b3a X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL2PR06MB2162 X-OriginatorOrg: netapp.com Subject: [Predisclosure-applications] NetApp pre-disclosure list application X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: predisclosure-applications-bounces@lists.xenproject.org Sender: "Predisclosure-applications" SGVsbG8sDQrCoA0KSeKAmWQgbGlrZSB0byByZXF1ZXN0IGluY2x1c2lvbiBvZiBOZXRBcHAgKGh0 dHBzOi8vbmV0YXBwLmNvbSkgb24gdGhlIFhlbiBwcmUtZGlzY2xvc3VyZSBsaXN0LiBOZXRBcHAg aXMgYSBsZWFkaW5nIHN0b3JhZ2Ugc29mdHdhcmUgcHJvdmlkZXIgd2hpY2ggZGlzdHJpYnV0ZXMg YSBtb2RpZmllZCB2ZXJzaW9uIG9mIFhlbiBTZXJ2ZXIgYXMgcGFydCBvZiBvdXIgRS1TZXJpZXMg U0FOdHJpY2l0eSBPU8KgdmVyc2lvbiAxMS4zMCBmb3IgRTI4MDAgY29udHJvbGxlciBwbGF0Zm9y bXMuIFdlIGFsc28gcHJvdmlkZSBYZW5DZW50ZXIgQ2xpZW50IHBsdWctaW5zLCBzdWNoIGFzIFZp cnR1YWwgU3RvcmFnZSBDb25zb2xlIGZvciBDaXRyaXggWGVuU2VydmVyLg0KwqANCkluc3RydWN0 aW9ucyBvbiBwdXJjaGFzaW5nIG91ciBzb2Z0d2FyZSBjYW4gYmUgZm91bmQgaGVyZTrCoGh0dHA6 Ly93d3cubmV0YXBwLmNvbS91cy9ob3ctdG8tYnV5L2luZGV4LmFzcHgNCsKgDQpXZSBtZW50aW9u IG91ciB1c2Ugb2YgWGVuIFNlcnZlciBpbiBvdXIgTk9USUNFIGZpbGUgbGlua2VkIGZyb206wqBo dHRwczovL215c3VwcG9ydC5uZXRhcHAuY29tL2RvY3VtZW50YXRpb24vZG9jd2ViL2luZGV4Lmh0 bWw/cHJvZHVjdElEPTYyMjY0Jmxhbmd1YWdlPWVuLVVTwqAoc2VhcmNoIGZvciDigJxYZW7igJ0g aW4gcGFnZSA0NiwgNDgsIDUxIG9mIHRoZSDigJxOb3RpY2UgKE9TIEJ1bmRsZSnigJ0gcGRmKS4g V2UgYWxzbyBwdWJsaXNoIHNvbWUgb2Ygb3VyIG1vZGlmaWVkIFhlbiBzb3VyY2UgYXQ6IGZ0cDov L2Z0cC5uZXRhcHAuY29tL2ZybS1udGFwL29wZW5zb3VyY2UvRVNlcmllc0ZXL3YxMS4zMC94ZW4t NC40LjEudGFyLmd6wqAoTmV0QXBw4oCZcyBjaGFuZ2VzIGFyZSBpbiBkZWJpYW4vcGF0Y2hlcy9k ZWJpYW4tY2hhbmdlcy00LjQuMS05K2RlYjh1OCtudGFwMzk0NSkuDQrCoA0KRG9jdW1lbnRhdGlv biBvZiBvdXIgWGVuQ2VudGVyIENsaWVudCBwbHVnLWlucyBpcyBhdmFpbGFibGUgaGVyZTrCoGh0 dHBzOi8vbXlzdXBwb3J0Lm5ldGFwcC5jb20vZG9jdW1lbnRhdGlvbi9kb2N3ZWIvaW5kZXguaHRt bD9wcm9kdWN0SUQ9NjE3OTImbGFuZ3VhZ2U9ZW4tVVMNCsKgDQpJbmZvcm1hdGlvbiBhYm91dCBv dXIgaGFuZGxpbmcgb2Ygc2VjdXJpdHkgcmVwb3J0cyBjYW4gYmUgZm91bmQgYXQgdGhlIGZvbGxv d2luZyBsaW5rczoNCsKgwqAtwqBodHRwOi8vd3d3Lm5ldGFwcC5jb20vdXMvbGVnYWwvc2VjdXJp dHkvY29udGFjdC9pbmRleC5hc3B4DQrCoMKgLcKgaHR0cDovL3d3dy5uZXRhcHAuY29tL3VzL2xl Z2FsL3NlY3VyaXR5L3BvbGljeS92dWxuZXJhYmlsaXR5LXJlc3BvbnNlLmFzcHgNCsKgDQpQbGVh c2UgdXNlwqB4ZGwtZXh0LXNlY3VyaXR5LW5vdGljZXNAbmV0YXBwLmNvbcKgZm9yIHRoZSBwcmUt ZGlzY2xvc3VyZSBsaXN0LiBUaGlzIGlzIGFuIGludGVybmFsIGFsaWFzIG9ubHkgYWNjZXNzaWJs ZSBieSBvdXIgUHJvZHVjdCBTZWN1cml0eSB0ZWFtLg0KwqANCldlIGhhdmUgcmVhZCB0aGlzIHBy ZS1kaXNjbG9zdXJlIHBvbGljeSBhbmQgYWdyZWUgdG8gYWJpZGUgYnkgdGhlIHRlcm1zIGZvciBp bmNsdXNpb24gaW4gdGhlIGxpc3QsIGluY2x1ZGluZyB0aGUgcmVxdWlyZW1lbnRzIHJlZ2FyZGlu ZyBjb25maWRlbnRpYWxpdHkgZHVyaW5nIGFuIGVtYmFyZ28gcGVyaW9kLg0KwqANCkxldCBtZSBr bm93IGlmIGFueSBhZGRpdGlvbmFsIGluZm9ybWF0aW9uIGlzIHJlcXVpcmVkLg0KwqANClRoYW5r cywNCsKgDQpNYXR0IEhhemluc2tpDQpOZXRBcHAgUHJvZHVjdCBTZWN1cml0eQ0KDQoNCg0KDQpf X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpQcmVkaXNjbG9z dXJlLWFwcGxpY2F0aW9ucyBtYWlsaW5nIGxpc3QKUHJlZGlzY2xvc3VyZS1hcHBsaWNhdGlvbnNA bGlzdHMueGVucHJvamVjdC5vcmcKaHR0cHM6Ly9saXN0cy54ZW5wcm9qZWN0Lm9yZy9jZ2ktYmlu L21haWxtYW4vbGlzdGluZm8vcHJlZGlzY2xvc3VyZS1hcHBsaWNhdGlvbnM= From predisclosure-applications-bounces@lists.xenproject.org Thu Apr 20 14:30:12 2017 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Thu, 20 Apr 2017 14:30:12 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1d1D62-0001xe-Hj; Thu, 20 Apr 2017 14:30:10 +0000 Received: from mail6.bemta6.messagelabs.com ([193.109.254.103]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1d1D61-0001xY-IH for predisclosure-applications@lists.xenproject.org; Thu, 20 Apr 2017 14:30:09 +0000 Received: from [193.109.254.147] by server-7.bemta-6.messagelabs.com id 8A/F0-03620-0F5C8F85; Thu, 20 Apr 2017 14:30:08 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprBIsWRWlGSWpSXmKPExsXitHRDpO6Hoz8 iDPYsYbG413SfyYHR4/CHKywBjFGsmXlJ+RUJrBkdj18yFnwVrXi4rImxgfGTUBcjB4eEgL9E yzLTLkZODjYBXYmmLX/ZQGxeAUGJkzOfsICUMAtoSqzfpQ8SZhaQl2jeOpsZosRB4vOjP4wgN ouAqsSWzmcsILaIgL7Egr+fmCHqMyRmPHoEFhcWCJDob21kB7E5Bewkfn06B1YjJGAr0fvkIV iNhICJxNuFO9lA1goJqEnMXR8/gZFvFpKDZiEcNAvJQQsYmVcxqhenFpWlFuma6iUVZaZnlOQ mZuboGhqY6eWmFhcnpqfmJCYV6yXn525iBIYYAxDsYJx+2f8QoyQHk5Ior9rcHxFCfEn5KZUZ icUZ8UWlOanFhxhlODiUJHhtgSErJFiUmp5akZaZAwx2mLQEB4+SCK8uSJq3uCAxtzgzHSJ1i lFRSpzXDCQhAJLIKM2Da4NF2CVGWSlhXkagQ4R4ClKLcjNLUOVfMYpzMCoJQ2znycwrgZv+Cm gxE9Dis35gi0sSEVJSDYw8cb0/aidWObRPf3nsWPn9+alT1D7svBjTyB/kYG1w8NgiVrE7U/4 vqb3r28nKqdbVHee34ftNa6FW4cydrxg1jyyIzLVaddFrT7a2SpfaK9bk45U54Q8zC99uTmhn W8raoHjd/L+oiaTxU871EyTzd2Yt2/drs1VkYYm+hlz9w7Q/IrmbjZVYijMSDbWYi4oTAcg0V ZqrAgAA X-Env-Sender: prvs=27629e123=Ian.Jackson@citrix.com X-Msg-Ref: server-9.tower-27.messagelabs.com!1492698606!98264685!1 X-Originating-IP: [66.165.176.89] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogNjYuMTY1LjE3Ni44OSA9PiAyMDMwMDc=\n,received_headers: No Received headers X-StarScan-Received: X-StarScan-Version: 9.4.12; banners=-,-,- X-VirusChecked: Checked Received: (qmail 61245 invoked from network); 20 Apr 2017 14:30:07 -0000 Received: from smtp.citrix.com (HELO SMTP.CITRIX.COM) (66.165.176.89) by server-9.tower-27.messagelabs.com with RC4-SHA encrypted SMTP; 20 Apr 2017 14:30:07 -0000 X-IronPort-AV: E=Sophos;i="5.37,225,1488844800"; d="scan'208";a="420079812" From: Ian Jackson MIME-Version: 1.0 Message-ID: <22776.50630.236084.314967@mariner.uk.xensource.com> Date: Thu, 20 Apr 2017 15:29:26 +0100 To: "Hazinski, Matt" In-Reply-To: <1E151620-AE1E-4AD7-9789-58DE3A7AE78D@netapp.com> References: <1E151620-AE1E-4AD7-9789-58DE3A7AE78D@netapp.com> X-Mailer: VM 8.2.0b under 24.4.1 (i586-pc-linux-gnu) Cc: "predisclosure-applications@lists.xenproject.org" Subject: Re: [Predisclosure-applications] NetApp pre-disclosure list application X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: predisclosure-applications-bounces@lists.xenproject.org Sender: "Predisclosure-applications" SGF6aW5za2ksIE1hdHQgd3JpdGVzICgiW1ByZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25zXSBOZXRB cHAgcHJlLWRpc2Nsb3N1cmUgbGlzdCBhcHBsaWNhdGlvbiIpOgo+IEnigJlkIGxpa2UgdG8gcmVx dWVzdCBpbmNsdXNpb24gb2YgTmV0QXBwIChodHRwczovL25ldGFwcC5jb20pIG9uIHRoZSBYZW4g cHJlLWRpc2Nsb3N1cmUgbGlzdC4gTmV0QXBwIGlzIGEgbGVhZGluZyBzdG9yYWdlIHNvZnR3YXJl IHByb3ZpZGVyIHdoaWNoIGRpc3RyaWJ1dGVzIGEgbW9kaWZpZWQgdmVyc2lvbiBvZiBYZW4gU2Vy dmVyIGFzIHBhcnQgb2Ygb3VyIEUtU2VyaWVzIFNBTnRyaWNpdHkgT1PCoHZlcnNpb24gMTEuMzAg Zm9yIEUyODAwIGNvbnRyb2xsZXIgcGxhdGZvcm1zLiBXZSBhbHNvIHByb3ZpZGUgWGVuQ2VudGVy IENsaWVudCBwbHVnLWlucywgc3VjaCBhcyBWaXJ0dWFsIFN0b3JhZ2UgQ29uc29sZSBmb3IgQ2l0 cml4IFhlblNlcnZlci4KCkhpLiAgVGhhbmtzIGZvciB5b3VyIG1haWwuCgo+IEluc3RydWN0aW9u cyBvbiBwdXJjaGFzaW5nIG91ciBzb2Z0d2FyZSBjYW4gYmUgZm91bmQgaGVyZTrCoGh0dHA6Ly93 d3cubmV0YXBwLmNvbS91cy9ob3ctdG8tYnV5L2luZGV4LmFzcHgKClRoaXMgc2VlbXMgdG8gdXMg dG8gbWVldCB0aGUgcmVxdWlyZW1lbnRzIG9mIHRoZSBwb2xpY3kuCgo+IFdlIG1lbnRpb24gb3Vy IHVzZSBvZiBYZW4gU2VydmVyIGluIG91ciBOT1RJQ0UgZmlsZSBsaW5rZWQgZnJvbTrCoGh0dHBz Oi8vbXlzdXBwb3J0Lm5ldGFwcC5jb20vZG9jdW1lbnRhdGlvbi9kb2N3ZWIvaW5kZXguaHRtbD9w cm9kdWN0SUQ9NjIyNjQmbGFuZ3VhZ2U9ZW4tVVPCoChzZWFyY2ggZm9yIOKAnFhlbuKAnSBpbiBw YWdlIDQ2LCA0OCwgNTEgb2YgdGhlIOKAnE5vdGljZSAoT1MgQnVuZGxlKeKAnSBwZGYpLiBXZSBh bHNvIHB1Ymxpc2ggc29tZSBvZiBvdXIgbW9kaWZpZWQgWGVuIHNvdXJjZSBhdDogZnRwOi8vZnRw Lm5ldGFwcC5jb20vZnJtLW50YXAvb3BlbnNvdXJjZS9FU2VyaWVzRlcvdjExLjMwL3hlbi00LjQu MS50YXIuZ3rCoChOZXRBcHDigJlzIGNoYW5nZXMgYXJlIGluIGRlYmlhbi9wYXRjaGVzL2RlYmlh bi1jaGFuZ2VzLTQuNC4xLTkrZGViOHU4K250YXAzOTQ1KS4KCkhpLiAgVGhhbmtzLiAgSSdtIGFm cmFpZCB0aGUgZmlyc3QgVVJMIGlzIG5vdCBhY2Nlc3NpYmxlIHdpdGhvdXQKbG9nZ2luZyBpbi4g IFdlIGFyZSBzcGVjaWZpY2FsbHkgZm9yYmlkZGVuIGJ5IHRoZSBwb2xpY3kgZnJvbSB0YWtpbmcK aW50byBhY2NvdW50IGFueSBwYWdlcyB3aGljaCAicmVxdWlyZSByZWdpc3RyYXRpb24iIG9yIGFy ZQoicGFzc3dvcmQtcHJvdGVjdGVkIi4KClRoZSBzZWNvbmQgVVJMIGlzIG5vdCBhICJ3ZWIgcGFn ZSIgYXMgdGhlIHBvbGljeSByZXF1aXJlczsgYW5kIGl0IGlzCm5vdCAiaW1tZWRpYXRlbHkgZXZp ZGVudCIgZnJvbSB0aGUgcHJvdmlzaW9uIG9mIHRoYXQgc291cmNlIGNvZGUgdGhhdAp5b3VyIGN1 cnJlbnQgcHJvZHVjdHMgdXNlIFhlbi4KCj4gRG9jdW1lbnRhdGlvbiBvZiBvdXIgWGVuQ2VudGVy IENsaWVudCBwbHVnLWlucyBpcyBhdmFpbGFibGUgaGVyZTrCoGh0dHBzOi8vbXlzdXBwb3J0Lm5l dGFwcC5jb20vZG9jdW1lbnRhdGlvbi9kb2N3ZWIvaW5kZXguaHRtbD9wcm9kdWN0SUQ9NjE3OTIm bGFuZ3VhZ2U9ZW4tVVMKCkknbSBhZnJhaWQgaXQgaXMgbm90IG9idmlvdXMgZnJvbSBhdCBsZWFz dCB0aGUgZmlyc3Qgb2YgdGhvc2UKZG9jdW1lbnRzIHdoZXRoZXIgTmV0QXBwIGFjdHVhbGx5IGRp c3RyaWJ1dGUgWGVuLCBvciBzaW1wbHkgcHJvdmlkZSBhCnNlcGFyYXRlIHBsdWdpbiBmb3IgaXQu Cgo+IEluZm9ybWF0aW9uIGFib3V0IG91ciBoYW5kbGluZyBvZiBzZWN1cml0eSByZXBvcnRzIGNh biBiZSBmb3VuZCBhdCB0aGUgZm9sbG93aW5nIGxpbmtzOgo+IMKgwqAtwqBodHRwOi8vd3d3Lm5l dGFwcC5jb20vdXMvbGVnYWwvc2VjdXJpdHkvY29udGFjdC9pbmRleC5hc3B4Cj4gwqDCoC3CoGh0 dHA6Ly93d3cubmV0YXBwLmNvbS91cy9sZWdhbC9zZWN1cml0eS9wb2xpY3kvdnVsbmVyYWJpbGl0 eS1yZXNwb25zZS5hc3B4CgpUaGlzIHNlZW1zIHRvIHVzIHRvIG1lZXQgdGhlIHJlcXVpcmVtZW50 cyBvZiB0aGUgcG9saWN5LgoKPiBQbGVhc2UgdXNlwqB4ZGwtZXh0LXNlY3VyaXR5LW5vdGljZXNA bmV0YXBwLmNvbcKgZm9yIHRoZSBwcmUtZGlzY2xvc3VyZSBsaXN0LiBUaGlzIGlzIGFuIGludGVy bmFsIGFsaWFzIG9ubHkgYWNjZXNzaWJsZSBieSBvdXIgUHJvZHVjdCBTZWN1cml0eSB0ZWFtLgo+ IMKgCj4gV2UgaGF2ZSByZWFkIHRoaXMgcHJlLWRpc2Nsb3N1cmUgcG9saWN5IGFuZCBhZ3JlZSB0 byBhYmlkZSBieSB0aGUgdGVybXMgZm9yIGluY2x1c2lvbiBpbiB0aGUgbGlzdCwgaW5jbHVkaW5n IHRoZSByZXF1aXJlbWVudHMgcmVnYXJkaW5nIGNvbmZpZGVudGlhbGl0eSBkdXJpbmcgYW4gZW1i YXJnbyBwZXJpb2QuCj4gwqAKPiBMZXQgbWUga25vdyBpZiBhbnkgYWRkaXRpb25hbCBpbmZvcm1h dGlvbiBpcyByZXF1aXJlZC4KClRoYW5rcy4KCklmIHlvdSB3b3VsZCBsaWtlIHRvIHJlc3VibWl0 IHlvdXIgYXBwbGljYXRpb24gd2l0aCBkaWZmZXJlbnQgdXJscwpldmlkZW5jaW5nIHlvdXIgdXNl IG9mIFhlbiwgd2UnZCBiZSBoYXBweSB0byBjb25zaWRlciBpdC4gIEl0IG1pZ2h0IGJlCmhlbHBm dWwgZm9yIHlvdSB0byByZS1yZXZpZXcgdGhlIHBvbGljeSByZXF1aXJlbWVudHMgYmVmb3JlIGRv aW5nIHNvLgoKUmVnYXJkcywKSWFuLgoob24gYmVoYWxmIG9mIHRoZSBYZW4gUHJvamVjdCBTZWN1 cml0eSBUZWFtLikKCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fClByZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25zIG1haWxpbmcgbGlzdApQcmVkaXNjbG9zdXJl LWFwcGxpY2F0aW9uc0BsaXN0cy54ZW5wcm9qZWN0Lm9yZwpodHRwczovL2xpc3RzLnhlbnByb2pl Y3Qub3JnL2NnaS1iaW4vbWFpbG1hbi9saXN0aW5mby9wcmVkaXNjbG9zdXJlLWFwcGxpY2F0aW9u cw== From predisclosure-applications-bounces@lists.xenproject.org Fri Apr 21 16:21:34 2017 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Fri, 21 Apr 2017 16:21:34 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1d1bJN-0006qM-Ah; Fri, 21 Apr 2017 16:21:33 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1d1bJM-0006q4-39 for predisclosure-applications@lists.xenproject.org; Fri, 21 Apr 2017 16:21:32 +0000 Received: from [85.158.137.68] by server-12.bemta-3.messagelabs.com id C1/B6-01870-B813AF85; Fri, 21 Apr 2017 16:21:31 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrOIsWRWlGSWpSXmKPExsXitHRDpG6X4a8 IgxebTSzuNd1ncmD0OPzhCksAYxRrZl5SfkUCa8a2jo2MBXuZK6afW8vWwPiVqYuRk0NCwF9i w5LLYDabgK5E05a/bCA2r4CgxMmZT1hAbGYBHYkFuz+xQdjyEtvfzmGGqHGQ2HBpD5jNIqAq8 fDjNfYuRg4OEQEtiZVzzUFMZgFTiYVTpEAqhAUCJZquXgabwglkH1z0gLGLkYtDSOAko8SBiZ eYIc4xkXi7cCcbSK+QgJrE3PXxExj5ZiE5aBaSg2YhOWgBI/MqRo3i1KKy1CJdQ1O9pKLM9Iy S3MTMHF1DA2O93NTi4sT01JzEpGK95PzcTYzAQGMAgh2Ma7Z7HmKU5GBSEuUN+f0zQogvKT+l MiOxOCO+qDQntfgQowwHh5IE7zyDXxFCgkWp6akVaZk5wJCHSUtw8CiJ8PboA6V5iwsSc4sz0 yFSpxh1Oebc+/qeSYglLz8vVUqcdynIDAGQoozSPLgRsPi7xCgrJczLCHSUEE9BalFuZgmq/C tGcQ5GJWHePJApPJl5JXCbXgEdwQR0xFm/HyBHlCQipKQaGN13Jr11UnzqMNll5WeJnQu3z36 UNP/rC+O/ZVV/RcQY5S5NuzjJnC1sAVthXJ2YhZJ+zZsFJ9tCZu/yt9JdKzL/kJ7CkTOX7+zf 8Ovx7ndM4vvPtOQdanLsYD1VOXV55q7uu9fdb4XNWSBY//SEgruXd47Sh3SrSTWXqxcVf37HU JXsOe+g3GclluKMREMt5qLiRABqr0TSugIAAA== X-Env-Sender: prvs=277558168=Ian.Jackson@citrix.com X-Msg-Ref: server-7.tower-31.messagelabs.com!1492791688!89246504!1 X-Originating-IP: [66.165.176.89] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogNjYuMTY1LjE3Ni44OSA9PiAyMDMwMDc=\n,received_headers: No Received headers X-StarScan-Received: X-StarScan-Version: 9.4.12; banners=-,-,- X-VirusChecked: Checked Received: (qmail 40546 invoked from network); 21 Apr 2017 16:21:30 -0000 Received: from smtp.citrix.com (HELO SMTP.CITRIX.COM) (66.165.176.89) by server-7.tower-31.messagelabs.com with RC4-SHA encrypted SMTP; 21 Apr 2017 16:21:30 -0000 X-IronPort-AV: E=Sophos;i="5.37,230,1488844800"; d="scan'208";a="420316369" From: Ian Jackson MIME-Version: 1.0 Message-ID: <22778.12678.581644.272437@mariner.uk.xensource.com> Date: Fri, 21 Apr 2017 17:21:26 +0100 To: "Stratful, Vince" In-Reply-To: References: X-Mailer: VM 8.2.0b under 24.4.1 (i586-pc-linux-gnu) Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Predisclosure application for HostPapa X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: predisclosure-applications-bounces@lists.xenproject.org Sender: "Predisclosure-applications" U3RyYXRmdWwsIFZpbmNlIHdyaXRlcyAoIlJlOiBbUHJlZGlzY2xvc3VyZS1hcHBsaWNhdGlvbnNd IFByZWRpc2Nsb3N1cmUgYXBwbGljYXRpb24gZm9yIEhvc3RQYXBhIik6Cj4gVGhhbmtzIGZvciBn ZXR0aW5nIGJhY2sgdG8gdXMsIHRoZSBuZWNlc3NhcnkgY2hhbmdlcyBoYXZlIGJlZW4gbWFkZQo+ IG9uIGh0dHBzOi8vIHd3dy5ob3N0cGFwYS5jb20vYWJvdXQtaG9zdHBhcGEvCgpIaS4gIFNvcnJ5 IGZvciB0aGUgZGVsYXkgZGVhbGluZyB3aXRoIHlvdXIgcmVwbHkuICBUaGF0IGxvb2tzIGdvb2Qg dG8KdXMuICBXZSBoYXZlIGFkZGVkIHlvdSB0byB0aGUgZGlzdHJpYnV0aW9uIGxpc3QsIGFuZCBz ZW50IHlvdSBjb3BpZXMKb2YgdGhlIG91c3RhbmRpbmcgYWR2aXNvcmllcy4KCkxhcnMsIHBsZWFz ZSBhZGQgSG9zdFBhcGEgdG8gdGhlIHdlYiBwYWdlLgoKVGhhbmtzLApJYW4uCgpfX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpQcmVkaXNjbG9zdXJlLWFwcGxp Y2F0aW9ucyBtYWlsaW5nIGxpc3QKUHJlZGlzY2xvc3VyZS1hcHBsaWNhdGlvbnNAbGlzdHMueGVu cHJvamVjdC5vcmcKaHR0cHM6Ly9saXN0cy54ZW5wcm9qZWN0Lm9yZy9jZ2ktYmluL21haWxtYW4v bGlzdGluZm8vcHJlZGlzY2xvc3VyZS1hcHBsaWNhdGlvbnM= From predisclosure-applications-bounces@lists.xenproject.org Fri Apr 21 17:14:47 2017 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Fri, 21 Apr 2017 17:14:47 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1d1c8t-0002oI-7i; Fri, 21 Apr 2017 17:14:47 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1d1c8s-0002oC-5X for predisclosure-applications@lists.xenproject.org; Fri, 21 Apr 2017 17:14:46 +0000 Received: from [85.158.137.68] by server-7.bemta-3.messagelabs.com id 71/F4-02202-50E3AF85; Fri, 21 Apr 2017 17:14:45 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprPKsWRWlGSWpSXmKPExsWyU9JRQpfF7le EQd8+bYt7TfeZHBg9Dn+4whLAGMWamZeUX5HAmnHu1CbWgnUcFc9b7rE2MC7g6GLk5JAQ8JOY 9KaXFcRmE9CQOPawmRnEFhEIlHg+YyGYzSyQITHj0SMWEFsYKL7iYh8jRE2QxMJ7a6Dq9STev TwANodFQFWifeleMJtXwEjiz419QDYXh5DAf0aJzhczwBo4BRwlDnzZyw5iMwrISnxpXA21TF zi1pP5TBDHCUgs2XOeGcIWlXj5+B/YUFGgZfMevmKDiOtInL3+hBHCNpDYunQf0KEcQHM0Jdb v0ocYaSmxZPF5VghbUWJK90N2iNsEJU7OfMIygVFsFpLNsxC6ZyHpnoWkexaS7gWMrKsY1YtT i8pSi3RN9ZKKMtMzSnITM3N0DQ2M9XJTi4sT01NzEpOK9ZLzczcxAiOrnoGBcQfj5a9OhxglO ZiURHlDfv+MEOJLyk+pzEgszogvKs1JLT7EKMPBoSTBK2z7K0JIsCg1PbUiLTMHGOMwaQkOHi URXl2QNG9xQWJucWY6ROoUoy7Hu6Uf3jMJseTl56VKifOKgRQJgBRllObBjYClm0uMslLCvIw MDAxCPAWpRbmZJajyrxjFORiVhHlFQKbwZOaVwG16BXQEE9ARZ/1+gBxRkoiQkmpgXLtMxIG3 J+Ta+fQ335a4z1s1+dziVZaPAt9luP012M614e9GZfVF244FPa6t4W2es27J5MBchxJ2qaTC6 LVnL+85/9vsm6Vl3yRFy8eXU0+6hrTe0d/8h0voAYOE0FERKffTqZa3Z9cd0Pf2P50ub+xwjk lj59T7xZvflzm5abuopzzmcnwmpsRSnJFoqMVcVJwIAEQ73PwyAwAA X-Env-Sender: prvs=27741c8a3=lars.kurth@citrix.com X-Msg-Ref: server-14.tower-31.messagelabs.com!1492794884!96790331!1 X-Originating-IP: [185.25.65.24] X-SpamReason: No, hits=0.0 required=7.0 tests=received_headers: No Received headers X-StarScan-Received: X-StarScan-Version: 9.4.12; banners=-,-,- X-VirusChecked: Checked Received: (qmail 33689 invoked from network); 21 Apr 2017 17:14:44 -0000 Received: from smtp.ctxuk.citrix.com (HELO SMTP.EU.CITRIX.COM) (185.25.65.24) by server-14.tower-31.messagelabs.com with RC4-SHA encrypted SMTP; 21 Apr 2017 17:14:44 -0000 X-IronPort-AV: E=Sophos;i="5.37,230,1488844800"; d="scan'208";a="44745501" From: Lars Kurth To: Ian Jackson , "Stratful, Vince" Thread-Topic: [Predisclosure-applications] Predisclosure application for HostPapa Thread-Index: AQHSusLE7QWauby4yU+RWn85B+xeIw== Date: Fri, 21 Apr 2017 17:14:43 +0000 Message-ID: References: <22778.12678.581644.272437@mariner.uk.xensource.com> In-Reply-To: <22778.12678.581644.272437@mariner.uk.xensource.com> Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.5.141003 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted Content-ID: <609E905A4C169A408E32B698EA237C1E@citrix.com> MIME-Version: 1.0 Cc: "predisclosure-applications@lists.xenproject.org" Subject: Re: [Predisclosure-applications] Predisclosure application for HostPapa X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: predisclosure-applications-bounces@lists.xenproject.org Sender: "Predisclosure-applications" QWRkZWQNCkxhcnMNCg0KT24gMjEvMDQvMjAxNyAxNzoyMSwgIklhbiBKYWNrc29uIiA8aWFuLmph Y2tzb25AZXUuY2l0cml4LmNvbT4gd3JvdGU6DQoNCj5TdHJhdGZ1bCwgVmluY2Ugd3JpdGVzICgi UmU6IFtQcmVkaXNjbG9zdXJlLWFwcGxpY2F0aW9uc10gUHJlZGlzY2xvc3VyZQ0KPmFwcGxpY2F0 aW9uIGZvciBIb3N0UGFwYSIpOg0KPj4gVGhhbmtzIGZvciBnZXR0aW5nIGJhY2sgdG8gdXMsIHRo ZSBuZWNlc3NhcnkgY2hhbmdlcyBoYXZlIGJlZW4gbWFkZQ0KPj4gb24gaHR0cHM6Ly8gd3d3Lmhv c3RwYXBhLmNvbS9hYm91dC1ob3N0cGFwYS8NCj4NCj5IaS4gIFNvcnJ5IGZvciB0aGUgZGVsYXkg ZGVhbGluZyB3aXRoIHlvdXIgcmVwbHkuICBUaGF0IGxvb2tzIGdvb2QgdG8NCj51cy4gIFdlIGhh dmUgYWRkZWQgeW91IHRvIHRoZSBkaXN0cmlidXRpb24gbGlzdCwgYW5kIHNlbnQgeW91IGNvcGll cw0KPm9mIHRoZSBvdXN0YW5kaW5nIGFkdmlzb3JpZXMuDQo+DQo+TGFycywgcGxlYXNlIGFkZCBI b3N0UGFwYSB0byB0aGUgd2ViIHBhZ2UuDQo+DQo+VGhhbmtzLA0KPklhbi4NCj4NCj5fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPlByZWRpc2Nsb3N1cmUt YXBwbGljYXRpb25zIG1haWxpbmcgbGlzdA0KPlByZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25zQGxp c3RzLnhlbnByb2plY3Qub3JnDQo+aHR0cHM6Ly9saXN0cy54ZW5wcm9qZWN0Lm9yZy9jZ2ktYmlu L21haWxtYW4vbGlzdGluZm8vcHJlZGlzY2xvc3VyZS1hcHBsaWMNCj5hdGlvbnMNCg0KX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KUHJlZGlzY2xvc3VyZS1h cHBsaWNhdGlvbnMgbWFpbGluZyBsaXN0ClByZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25zQGxpc3Rz LnhlbnByb2plY3Qub3JnCmh0dHBzOi8vbGlzdHMueGVucHJvamVjdC5vcmcvY2dpLWJpbi9tYWls bWFuL2xpc3RpbmZvL3ByZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25z