Re: [Xen-devel] Earlier embargoed pre-disclosure without patches

[Stefano Stabellini <stefano.stabellini@xxxxxxxxxxxxx>]

On Fri, 22 May 2015, Major Hayden wrote:
> On 05/22/2015 09:04 AM, Jan Beulich wrote:
> > If you were to ask for this only if the time gap until embargo expiry
> > was less than the default of two weeks, maybe I would buy this.
> 
> I'm good with that as well.  I think we're saying:
> 
>   if embargo_length < 14d:
>     # XSA-133 situation
>     send_pre_disclosure_draft()
>     wait_for_patches()
>   elif embargo_length >= 14d and not patches_ready:
>     wait_for_patches()
>   else:
>     send_pre_disclosure_full()
> 
> Forgive my awful pseudo code. My coffee buffer is not yet full. ;)

It makes sense to me. I can see the value for an organization with
thousands of servers to know about it in advance, regardless of the
patches, so that it can schedule the update work appropriately.

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
http://lists.xen.org/xen-devel