-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml">
-<head>
-<meta http-equiv="Content-Type" content="text/html" />
-<title>Xen.org Security Problem Response Process</title>
-<meta name="description" content="Xen.org, home of the Xen® hypervisor, the powerful open source industry standard for virtualization.">
-<meta name="keywords" content="xen 2.0, xen 3.0, hypervisor, server consolidation, open source, ian pratt, virtualization, virtualisation, xen, xensource, security, vulnerability, process">
-<link href="/css/community_main7.css" rel="stylesheet" type="text/css">
-<script type="text/javascript" src="/globals/javascript.js"></script>
-<script type="text/javascript" src="/globals/milonic_src.js"></script>
-<script type="text/javascript"> if(ns4)_d.write("<scr"+"ipt type=text/javascript src=/globals/mmenuns4.js><\/scr"+"ipt>"); else _d.write("<scr"+"ipt type=text/javascript src=/globals/mmenudom.js><\/scr"+"ipt>");
-</script>
-<script type="text/javascript" src="/globals/menu_data_xenorg_main.js"></script>
-<meta http-equiv="Content-Type" content="text/html">
-<link rel="shortcut icon" href="/favicon.ico">
-</head>
-<body>
-<table border="0" cellpadding="0" cellspacing="0" align="center" id="xen_mainTable" >
-<tr>
-<td class="mainTableTopCell"> </td>
-<td class="mainTableTopCell"> </td>
-</tr>
-<tr>
-<td height="10" class="corner_tl"><a name="topofpage" id="topofpage"></a><img src="/images/globals/pixel.gif" alt="" width="700" height="9" /></td>
-<td class="corner_tr"> </td>
-</tr>
-<!-- header -->
-<tr>
-<td><table border="0" align="right" cellpadding="0" cellspacing="0" id="xen_navTopTable">
-<tr><td><div id="xen_navTop" > </div></td></tr></table><a href="/"><img src="/images/globals/xen_logo.gif" alt="Xen" width="149" height="67" border="0" id="xen" /></a><span class="xen_tag"> </span></td>
-<td> </td>
-</tr>
-<tr>
-<td id="xen_navMainContainer"><table width="535" border="0" align="right" cellpadding="0" cellspacing="0" id="xen_navMain">
-<tr>
-<td ><img src="/globals/anchorpix.gif" alt="" name="topnav_home" width="1" height="1" id="topnav_xenhome"><a href="/" onmouseover="popup('xenhome','topnav_xenhome')" onmouseout=popdown()>Home</a></td>
-<td id="xen_navMainOn"><img src="/globals/anchorpix.gif" alt="" name="topnav_products" width="1" height="1" id="topnav_products"><a href="/products/" onmouseover="popup('products','topnav_products')" onmouseout=popdown()>Products</a></td>
-<td ><img src="/globals/anchorpix.gif" alt="" name="topnav_support" width="1" height="1" id="topnav_support"><a href="/support/" onmouseover="popup('support','topnav_support')" onmouseout=popdown()>Support</a></td>
-<td><img src="/globals/anchorpix.gif" alt="" name="topnav_community" width="1" height="1" id="topnav_community"><a href="/community/" onmouseover="popup('community','topnav_community')" onmouseout=popdown()>Community</a></td>
-<td><img src="/globals/anchorpix.gif" alt="" name="topnav_news" width="1" height="1" id="topnav_news"><a href="http://blog.xen.org/" onmouseover="popup('news','topnav_news')" onmouseout=popdown()>Blog</a></td>
-</tr>
-</table></td>
-<td id="xen_navMainContainerRt"> </td>
-</tr>
-<!-- end header -->
-<!-- end header -->
-<tr>
-<td id="xen_navSecond"><a href="/products/index.html" >Products</a> | <a href="/products/downloads.html">Downloads</a> | <a href="/products/xenhyp.html">Xen Hypervisor</a> |
-<a href="/products/xen_arm.html">Xen ARM</a> | <a href="/products/cloudxen.html">Xen Cloud Platform</a> | <a href="/products/projects.html" class="navSecondOnpage">Projects</a> | <a href="/community/projects.html" class="xen_last">Solution Search</a> </td>
-<td id="xen_navSecondRt"> </td>
-</tr>
-<tr>
-<td id="xen_content"><div class="xen_navThird"> </div>
-<!-- begin callout -->
-<table width="100%" cellspacing="0" cellpadding="0">
-<tr valign="top">
-<td width="200"><img src="/images/blog/XenGovernanceProposalQ2_2011.png" width="180"></td>
-<td width="1"></td>
-<td>
-<h1>Xen.org Security Problem Response Process</h1>
<h2>Introduction</h2>
<p>Computer systems have bugs. Currently recognised best practice for bugs with security implications is to notify significant downstream users in private; leave a reasonable interval for downstreams to respond and prepare updated software packages; then make public disclosure.</p>
<p>We want to encourage people to report bugs they find to us. Therefore we will treat with respect the requests of discoverers, or other vendors, who report problems to us.</p>
<li><b>v1.1 Feb 2012:</b> Added link to Security Announcements wiki page</li>
<li><b>v1.0 Dec 2011:</b> Intial document published after review</li>
</ul>
-</td>
-<td width="10"></td>
-</tr>
-</table>
-<!-- end callout -->
-<td> </td>
-</tr>
-<tr>
-<td class="corner_bl"> </td>
-<td class="corner_br"> </td>
-</tr>
-</table>
-<table border="0" cellpadding="0" cellspacing="0" align="center" id="xen_indexTable">
-<tr><td>
-<table class="copyright">
-<tr valign="top" align="left">
-<!-- Menu -->
-<td width="2%"> </td>
-<td width="15%">
-<p><b>News:</b><br>
-<a href="http://xen.org/news/press.html">Press Releases</a><br>
-<a href="http://blog.xen.org/">Blog</a></p>
-</td>
-<td width="1%"> </td>
-<td width="15%"><p><b>Resources:</b><br>
-<a href="http://wiki.xen.org">Wiki</a><br>
-<a href="http://xenbits.xen.org/">Sources</a><br>
-<a href="http://www.xen.org/products/downloads.html">Downloads</a><br>
-<a href="http://www.xen.org/projects/governance.html">Governance</a><br>
-<a href="http://www.xen.org/projects/security_vulnerability_process.html">Security Information</a></p>
-</td>
-<td width="1%"> </td>
-<td width="15%"><p><b>Connect:</b><br>
-<a href="http://lists.xen.org/">Mailing Lists</a><br>
-<a href="http://xen.markmail.org">Search Mailing Lists</a><br>
-<a href="http://www.xen.org/community/irc.html">IRC</a><br>
-<a href="http://twitter.com/xen_com_mgr">Twitter</a><br>
-<a href="http://www.linkedin.com/groups?home=&gid=167190">LinkedIn</a></p>
-</td>
-<td width="1%"> </td>
-<td width="15%"><p><b>Miscellaneous:</b><br>
-<a href="mailto://community.manager@xen.org">Contact us</a><br>
-<a href="http://xen.org/community/trademark.html">Legal and Privacy</a><br>
-<a href="http://xen.org/community/logos.html">Trademark and Logos</a><br>
-<a href="http://www.cafepress.co.uk/xen_org">Merchandise</a><br>
-<a href="http://xen.org/community/jobs.html">Jobs in the Community</a></p>
-</td>
-<td width="50%"> </td>
-</tr>
-</table>
-</td></tr>
-<tr>
-<td class="corner_vbl"> </td>
-<td class="corner_vbr"> </td>
-</tr>
-</table>
-<!-- Copyright -->
-<table cellpadding="0" align="center" width="895px">
-<tr valign="center">
-<td class="copyright">
-<p>Copyright
-<script language="JavaScript">
-<!-- document.write(" 2005-"); today=new Date(); year0=today.getFullYear(); document.write(year0); //-->
-</script>
-<noscript> ©
-</noscript><br> Citrix Systems, Inc. All rights reserved. </p>
-</td>
-<td align="right"><img src="/images/globals/Citrix_Logo.png" alt="Citrix" width="90"></td>
-</tr>
-</table>
-<!-- Hosting -->
-<table cellpadding="0" align="center" width="915px">
-<tr><td><hr></td></tr>
-</table>
-<table cellpadding="0" align="center" width="895px">
-<tr valign="top">
-<td width="70px"><img src="/images/globals/Rackspace_Logo_Small.png" alt="Rackspace"></td>
-<td class="copyright">
-<p>Xen.org's servers are hosted with <a href="http://www.rackspace.com/">RackSpace</a>, monitoring our<br> servers 24x7x365 and backed by RackSpace's Fanatical Support®.</p>
-</td>
-</tr>
-</table>
-<!-- Asynchronous tracking code introduced in Q1 2011 -->
-<script type="text/javascript"> var _gaq = _gaq || []; _gaq.push(['_setAccount', 'UA-21816382-1']); _gaq.push(['_setDomainName', '.xen.org']); _gaq.push(['_trackPageview']); (function() { var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true; ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js'; var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s); })();
-</script></body>
-</html>
\ No newline at end of file
projects / people / iwj / security-process.git / commitdiff