Re: [Xen-devel] Earlier embargoed pre-disclosure without patches

[Major Hayden <major.hayden@xxxxxxxxxxxxx>]

On 05/27/2015 12:47 PM, Lars Kurth wrote:
> ...
> 4. Advisory pre-release: 
> 
> This occurs only if the advisory is embargoed (ie, the problem is not already 
> public): 
> 
> As soon as our advisory is available, we will send it, including patches, to 
> members of the Xen security pre-disclosure list. 
> 
> In the event that we do not have a patch available two working weeks before 
> the disclosure date, we will aim to send a draft of the advisory to the Xen 
> security pre-disclosure list instead of a full advisory, and publish an 
> updated advisory as soon as available. 
> ---

+1

I'm fine with this.  Thanks, Lars.

--
Major Hayden

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
http://lists.xen.org/xen-devel