From mboxrd@z Thu Jan  1 00:00:00 1970
From: Anthony Liguori <anthony@codemonkey.ws>
Subject: Re: VU#976534 - How to submit security bugs?
Date: Wed, 24 Jul 2013 07:23:06 -0500
Message-ID: <87fvv4gn9x.fsf@codemonkey.ws>
References: <201307221910.r6MJAiH7021251@eton.blue.cert.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Cc: "CERT\(R\) Coordination Center" <cert@cert.org>,
	"Petr Matousek" <pmatouse@redhat.com>
To: "CERT\(R\) Coordination Center" <cert@cert.org>,
	kvm@vger.kernel.org
Return-path: <kvm-owner@vger.kernel.org>
Received: from mail-oa0-f41.google.com ([209.85.219.41]:44900 "EHLO
	mail-oa0-f41.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org
	with ESMTP id S1751260Ab3GXMXS (ORCPT <rfc822;kvm@vger.kernel.org>);
	Wed, 24 Jul 2013 08:23:18 -0400
Received: by mail-oa0-f41.google.com with SMTP id n10so779004oag.0
        for <kvm@vger.kernel.org>; Wed, 24 Jul 2013 05:23:17 -0700 (PDT)
In-Reply-To: <201307221910.r6MJAiH7021251@eton.blue.cert.org>
Sender: kvm-owner@vger.kernel.org
List-ID: <kvm.vger.kernel.org>

"CERT(R) Coordination Center" <cert@cert.org> writes:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Greetings,
> 	My name is Adam Rauf and I work for the CERT Coordination Center.  We
> have a report that may affect KVM/QEMU.  How can we securely send it over to
> you?  Thanks so much!

For QEMU bugs, please file a bug in Launchpad and mark it as a security
bug.  That will appropriately limit visibility.

http://launchpad.net/qemu

If you want to contact me directly, my public key is:

http://www.codemonkey.ws/files/aliguori.pub

You can verify that this key is what is used to sign QEMU releases at:

http://wiki.qemu.org/Download

Regards,

Anthony Liguori

>
> Adam Rauf
> Software Engineering Institute
> CERT Vulnerability Analysis Team
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.5 (GNU/Linux)
>
> iQEVAwUBUe2DstXCAanP4MNyAQI8nwf/eTb1Qox5lmgMHifDKRjj69E37FW+o5Jp
> KMIP6+IgKdWQizPctXk2Gae50a+ioaXgkCGZZ7SwNJ9iE/AX2I32QvX6pZrDCBGw
> l5Ht6UiwOLUTP3sKWO9AIYcgTDABzyNE2+bCGvDz8aqwLB8NNVqQ50f46TrQNlmB
> oiG+XzskRG0BAxKTwWc8f4v+1hdqMtp811I7XmxXkAdtlmTWPHZfPiFs0dS++Puh
> T0uLuC4nDo83hP6Yv8seMZKZZApFGfR+q4qKx7f6riNsa5v1zGgW2if++u+zRKvg
> DvjLxjtRfE9JGmCZMBcFmRJ5y4Wx/m/2wtj2+a7D/D2Hd9L5LRB0lA==
> =npI1
> -----END PGP SIGNATURE-----
> --
> To unsubscribe from this list: send the line "unsubscribe kvm" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html