From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ian Campbell Subject: Re: [Formal Vote] Changes to Xen Project Security Vulnerability Process - Open until June 8th, 2015 Date: Wed, 3 Jun 2015 10:35:22 +0100 Message-ID: <1433324122.7108.36.camel@citrix.com> References: <35D18A2F-7B4B-47B8-B673-4C049D19344A@gmail.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <35D18A2F-7B4B-47B8-B673-4C049D19344A@gmail.com> List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: xen-devel-bounces@lists.xen.org Errors-To: xen-devel-bounces@lists.xen.org To: Lars Kurth Cc: keir Fraser , Tim Deegan , Ian Jackson , Major Hayden , "" , security@xenproject.org List-Id: xen-devel@lists.xenproject.org On Mon, 2015-06-01 at 10:36 +0100, Lars Kurth wrote: > In the event that we do not have a patch available two working weeks > before the disclosure date, we aim to send an advisory that reflects > the current state of knowledge to the Xen security pre-disclosure > list. An updated advisory will be published as soon as available. I'm a bit concerned about the conditions and frequency with which updated advisories would be expected, but not enough to object, +1. Ian.