From predisclosure-applications-bounces@lists.xenproject.org Tue Oct 30 13:27:38 2018
Return-path: <predisclosure-applications-bounces@lists.xenproject.org>
Envelope-to: archives@lists.xenproject.org
Delivery-date: Tue, 30 Oct 2018 13:27:38 +0000
Received: from localhost ([127.0.0.1] helo=lists.xenproject.org)
	by lists.xenproject.org with esmtp (Exim 4.89)
	(envelope-from <predisclosure-applications-bounces@lists.xenproject.org>)
	id 1gHU3U-0008Nq-Iq; Tue, 30 Oct 2018 13:27:36 +0000
Received: from all-amaz-eas1.inumbo.com ([34.197.232.57]
 helo=us1-amaz-eas2.inumbo.com)
 by lists.xenproject.org with esmtp (Exim 4.89) (envelope-from
 <srs0=44mb=nk=xcp-ng.org=contact@srs-us1.protection.inumbo.net>)
 id 1gHU3T-0008Nl-Ax
 for predisclosure-applications@lists.xenproject.org;
 Tue, 30 Oct 2018 13:27:35 +0000
X-Inumbo-ID: 8edf5466-dc47-11e8-82f2-12d6303a7972
Received: from relay4-d.mail.gandi.net (unknown [217.70.183.196])
 by us1-amaz-eas2.inumbo.com (Halon) with ESMTPS
 id 8edf5466-dc47-11e8-82f2-12d6303a7972;
 Tue, 30 Oct 2018 13:27:33 +0000 (UTC)
Received: from sogo1.bi1.0x35.net (sogo1.bi1.0x35.net [10.150.1.71])
 (Authenticated sender: contact@xcp-ng.org)
 by relay4-d.mail.gandi.net (Postfix) with ESMTPA id DFECBE000B
 for <predisclosure-applications@lists.xenproject.org>;
 Tue, 30 Oct 2018 13:27:32 +0000 (UTC)
To: predisclosure-applications@lists.xenproject.org
User-Agent: SOGoMail 3.2.10
MIME-Version: 1.0
Date: Tue, 30 Oct 2018 14:27:32 +0100
Message-ID: <1042-5bd85c80-f-78f3d800@197757784>
X-Forward: 2.7.52.65, 10.150.1.6
From: =?utf-8?q?contact=40xcp-ng=2Eorg?= <contact@xcp-ng.org>
Subject: [Predisclosure-applications] XCP-ng predisclosure list application
X-BeenThere: predisclosure-applications@lists.xenproject.org
X-Mailman-Version: 2.1.23
Precedence: list
List-Id: Applications for membership of Xen Security Advisories Pre-disclosure
 List <predisclosure-applications.lists.xenproject.org>
List-Unsubscribe: <https://lists.xenproject.org/mailman/options/predisclosure-applications>, 
 <mailto:predisclosure-applications-request@lists.xenproject.org?subject=unsubscribe>
List-Post: <mailto:predisclosure-applications@lists.xenproject.org>
List-Help: <mailto:predisclosure-applications-request@lists.xenproject.org?subject=help>
List-Subscribe: <https://lists.xenproject.org/mailman/listinfo/predisclosure-applications>, 
 <mailto:predisclosure-applications-request@lists.xenproject.org?subject=subscribe>
Content-Type: multipart/mixed; boundary="===============4477365339009192166=="
Errors-To: predisclosure-applications-bounces@lists.xenproject.org
Sender: "Predisclosure-applications"
 <predisclosure-applications-bounces@lists.xenproject.org>

--===============4477365339009192166==
Content-Type: multipart/alternative; boundary="----=_=-_OpenGroupware_org_NGMime-4162-1540906052.436411-7------"

------=_=-_OpenGroupware_org_NGMime-4162-1540906052.436411-7------
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Content-Length: 1507


Hello everyone,

I'm Olivier Lambert, project leader for XCP-ng project (https://xcp-ng.=
org). This project is aimed to deliver a turnkey Open Source virtualiza=
tion platform. It's currently based on XenServer, and we started to con=
tribute to Xen/XAPI and its ecosystem (and more will come). You can fin=
d all the public work done on it here: https://github.com/xcp-ng

Since our first release, we are at about 15k+ unique downloads, and we =
can assume safely it starts to be used by thousand people and organizat=
ions now.

This is why being included in this pre-disclosure list is important for=
 the project: this way, we could be pro-active and deliver patches quic=
kly (note that we deliver patching via a signed RPM repo, a simple `yum=
 update` do the trick for our users).

We already have a dedicated security contact email: security@xcp-ng.org=
 so this is the one we'd like to have enabled for this pre-disclosure l=
ist.We (limited people having access to the security inbox) have read t=
his pre-disclosure policy and agree to abide by the terms for inclusion=
 in the list, including the requirements regarding confidentiality duri=
ng an embargo period.Note: we also offer pro support for XCP-ng, cf htt=
ps://xcp-ng.comWe also have a security@xcp-ng.com but IDK if it's relev=
ant to have both on the ML. Up to you, I don't mind having just the .or=
g email there.=C2=A0Let me know if you need anything else for me to be =
registered there.

Best,

Olivier Lambert

------=_=-_OpenGroupware_org_NGMime-4162-1540906052.436411-7------
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Content-Length: 2332

<html><div><div class=3D"msg-body"><div layout=3D"row" layout-wrap=3D"l=
ayout-wrap" class=3D"layout-wrap layout-row"><div ng-class=3D"::part.ms=
gclass" class=3D"mailer=5Fmailcontent layout-wrap msg-attachment-other =
layout-row" layout-wrap=3D"layout-wrap" layout=3D"row" ng-repeat=3D"par=
t in viewer.message.$content()"><div ng-if=3D"::part.html" class=3D"md-=
flex sg-mail-part" ng-bind-html=3D"part.content | ensureTarget" ng-clic=
k=3D"viewer.filterMailtoLinks($event)" tabindex=3D"-1" role=3D"button">=
<div class=3D"SOGoHTMLMail-CSS-Delimiter mailer=5Fhtmlcontent"><p>Hello=
 everyone,<br /><br />I'm Olivier Lambert, project leader for XCP-ng pr=
oject (https://xcp-ng.org). This project is aimed to deliver a turnkey =
Open Source virtualization platform. It's currently based on XenServer,=
 and we started to contribute to Xen/XAPI and its ecosystem (and more w=
ill come). You can find all the public work done on it here: https://gi=
thub.com/xcp-ng<br /><br />Since our first release, we are at about 15k=
+ unique downloads, and we can assume safely it starts to be used by th=
ousand people and organizations now.<br /><br />This is why being inclu=
ded in this pre-disclosure list is important for the project: this way,=
 we could be pro-active and deliver patches quickly (note that we deliv=
er patching via a signed RPM repo, a simple `yum update` do the trick f=
or our users).<br /><br />We already have a dedicated security contact =
email: security@xcp-ng.org so this is the one we'd like to have enabled=
 for this pre-disclosure list.</p><pre><span style=3D"font-family:Verda=
na,Geneva,sans-serif;">We (limited people having access to the security=
 inbox) have read this pre-disclosure policy and agree to abide by the =
terms for inclusion in the list, including the requirements regarding c=
onfidentiality during an embargo period.</span></pre><div>Note: we also=
 offer pro support for XCP-ng, cf https://xcp-ng.com</div><div>We also =
have a security@xcp-ng.com but IDK if it's relevant to have both on the=
 ML. Up to you, I don't mind having just the .org email there.</div><di=
v>&nbsp;</div><div>Let me know if you need anything else for me to be r=
egistered there.<br /><br />Best,<br /><br />Olivier Lambert</div></div=
></div></div></div></div></div></html>

------=_=-_OpenGroupware_org_NGMime-4162-1540906052.436411-7--------




--===============4477365339009192166==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KUHJlZGlzY2xv
c3VyZS1hcHBsaWNhdGlvbnMgbWFpbGluZyBsaXN0ClByZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25z
QGxpc3RzLnhlbnByb2plY3Qub3JnCmh0dHBzOi8vbGlzdHMueGVucHJvamVjdC5vcmcvbWFpbG1h
bi9saXN0aW5mby9wcmVkaXNjbG9zdXJlLWFwcGxpY2F0aW9ucw==

--===============4477365339009192166==--




