--- /dev/null
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml">
+<head>
+<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
+ <title>Xen.org Security Problem Response Process</title>
+ <meta name="description" content="Xen.org, home of the Xen® hypervisor, the powerful open source industry standard for virtualization.">
+ <meta name="keywords" content="xen 2.0, xen 3.0, hypervisor, server consolidation, open source, ian pratt, virtualization, virtualisation, xen, xensource, security, vulnerability, process">
+ <link href="/css/community_main7.css" rel="stylesheet" type="text/css">
+ <script type="text/javascript" src="/globals/javascript.js"></script>
+<script type="text/javascript" src="/globals/milonic_src.js"></script>
+ <script type="text/javascript">
+if(ns4)_d.write("<scr"+"ipt type=text/javascript src=/globals/mmenuns4.js><\/scr"+"ipt>");
+ else _d.write("<scr"+"ipt type=text/javascript src=/globals/mmenudom.js><\/scr"+"ipt>");
+
+</script>
+<script type="text/javascript" src="/globals/menu_data_xenorg_main.js"></script>
+ <meta http-equiv="Content-Type" content="text/html;charset=UTF-8">
+ <link rel="shortcut icon" href="/favicon.ico">
+
+</head>
+
+<body>
+<table border="0" cellpadding="0" cellspacing="0" align="center" id="xen_mainTable" >
+ <tr>
+ <td class="mainTableTopCell"> </td>
+ <td class="mainTableTopCell"> </td>
+ </tr>
+ <tr>
+ <td height="10" class="corner_tl"><a name="topofpage" id="topofpage"></a><img src="/images/globals/pixel.gif" alt="" width="700" height="9" /></td>
+ <td class="corner_tr"> </td>
+ </tr>
+<!-- header -->
+ <tr>
+ <td><table border="0" align="right" cellpadding="0" cellspacing="0" id="xen_navTopTable">
+<tr><td><div id="xen_navTop" > </div></td></tr></table><a href="/"><img src="/images/globals/xen_logo.gif" alt="Xen" width="149" height="67" border="0" id="xen" /></a><span class="xen_tag"> </span></td>
+ <td> </td>
+ </tr>
+ <tr>
+ <td id="xen_navMainContainer"><table width="535" border="0" align="right" cellpadding="0" cellspacing="0" id="xen_navMain">
+ <tr>
+ <td ><img src="/globals/anchorpix.gif" alt="" name="topnav_home" width="1" height="1" id="topnav_xenhome"><a href="/" onmouseover="popup('xenhome','topnav_xenhome')" onmouseout=popdown()>Home</a></td>
+ <td id="xen_navMainOn"><img src="/globals/anchorpix.gif" alt="" name="topnav_products" width="1" height="1" id="topnav_products"><a href="/products/" onmouseover="popup('products','topnav_products')" onmouseout=popdown()>Products</a></td>
+ <td ><img src="/globals/anchorpix.gif" alt="" name="topnav_support" width="1" height="1" id="topnav_support"><a href="/support/" onmouseover="popup('support','topnav_support')" onmouseout=popdown()>Support</a></td>
+ <td><img src="/globals/anchorpix.gif" alt="" name="topnav_community" width="1" height="1" id="topnav_community"><a href="/community/" onmouseover="popup('community','topnav_community')" onmouseout=popdown()>Community</a></td>
+ <td><img src="/globals/anchorpix.gif" alt="" name="topnav_news" width="1" height="1" id="topnav_news"><a href="http://blog.xen.org/" onmouseover="popup('news','topnav_news')" onmouseout=popdown()>Blog</a></td>
+ </tr>
+ </table></td>
+ <td id="xen_navMainContainerRt"> </td>
+ </tr>
+
+<!-- end header -->
+<!-- end header -->
+
+ <tr>
+ <td id="xen_navSecond"><a href="/products/index.html" >Products</a> | <a href="/products/downloads.html">Downloads</a> | <a href="/products/xenhyp.html">Xen Hypervisor</a> |
+ <a href="/products/xen_arm.html">Xen ARM</a> | <a href="/products/cloudxen.html">Xen Cloud Platform</a> | <a href="/products/projectgov.html" class="navSecondOnpage">Governance</a> | <a href="/community/projects.html" class="xen_last">Solution Search</a> </td>
+ <td id="xen_navSecondRt"> </td>
+ </tr>
+ <tr>
+
+ <td id="xen_content"><div class="xen_navThird"> </div>
+ <!-- begin callout -->
+
+ <table width="100%" cellspacing="0" cellpadding="0">
+ <tr valign="top">
+ <td width="200"><img src="/images/blog/XenGovernanceProposalQ2_2011.png" width="180"></td>
+ <td width="1"></td>
+ <td>
+
+ <h1>Xen.org gpg keys</h1>
+ <h2>security@xen.org</h2>
+ <pre>
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+Version: GnuPG v1.4.12 (GNU/Linux)
+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+=Ne4C
+-----END PGP PUBLIC KEY BLOCK-----
+ </pre>
+
+
+ <h2>Change History</h2>
+ <ul>
+ <li><b>v1.0 April 2013</b> Intial document published after review</li>
+ </ul>
+
+ </td>
+ <td width="10"></td>
+ </tr>
+
+ </table>
+ <!-- end callout -->
+
+ <td> </td>
+ </tr>
+ <tr>
+ <td class="corner_bl"> </td>
+ <td class="corner_br"> </td>
+ </tr>
+</table>
+
+
+<table border="0" cellpadding="0" cellspacing="0" align="center" id="xen_indexTable">
+ <tr><td>
+ <table class="copyright">
+ <tr valign="top" align="left">
+ <!-- Menu -->
+ <td width="2%"> </td>
+ <td width="15%">
+ <p><b>News:</b><br>
+ <a href="http://xen.org/news/press.html">Press Releases</a><br>
+ <a href="http://blog.xen.org/">Blog</a></p>
+ </td>
+ <td width="1%"> </td>
+ <td width="15%"><p><b>Resources:</b><br>
+ <a href="http://wiki.xen.org">Wiki</a><br>
+ <a href="http://xenbits.xen.org/">Sources</a><br>
+ <a href="http://www.xen.org/products/downloads.html">Downloads</a><br>
+ <a href="http://www.xen.org/projects/governance.html">Governance</a><br>
+ <a href="http://www.xen.org/projects/security_vulnerability_process.html">Security Information</a></p>
+ </td>
+ <td width="1%"> </td>
+ <td width="15%"><p><b>Connect:</b><br>
+ <a href="http://lists.xen.org/">Mailing Lists</a><br>
+ <a href="http://xen.markmail.org">Search Mailing Lists</a><br>
+ <a href="http://www.xen.org/community/irc.html">IRC</a><br>
+ <a href="http://twitter.com/xen_org">Twitter</a><br>
+ <a href="http://www.linkedin.com/groups?home=&gid=167190">LinkedIn</a></p>
+ </td>
+ <td width="1%"> </td>
+ <td width="15%"><p><b>Miscellaneous:</b><br>
+ <a href="mailto://community.manager@xen.org">Contact us</a><br>
+ <a href="http://xen.org/community/trademark.html">Legal and Privacy</a><br>
+ <a href="http://xen.org/community/logos.html">Trademark and Logos</a><br>
+ <a href="http://www.cafepress.co.uk/xen_org">Merchandise</a><br>
+ <a href="http://xen.org/community/jobs.html">Jobs in the Community</a></p>
+ </td>
+ <td width="50%"> </td>
+ </tr>
+ </table>
+ </td></tr>
+ <tr>
+ <td class="corner_vbl"> </td>
+ <td class="corner_vbr"> </td>
+ </tr>
+</table>
+
+<!-- Copyright -->
+<table cellpadding="0" align="center" width="895px">
+ <tr valign="center">
+ <td class="copyright">
+ <p>Copyright
+ <script language="JavaScript">
+ <!--
+ document.write(" 2005-");
+ today=new Date();
+ year0=today.getFullYear();
+ document.write(year0);
+ //-->
+ </script>
+ <noscript>
+ ©
+ </noscript><br>
+ Citrix Systems, Inc. All rights reserved. </p>
+ </td>
+ <td align="right"><img src="/images/globals/Citrix_Logo.png" alt="Citrix" width="90"></td>
+ </tr>
+</table>
+
+<!-- Hosting -->
+<table cellpadding="0" align="center" width="915px">
+ <tr><td><hr></td></tr>
+</table>
+<table cellpadding="0" align="center" width="895px">
+ <tr valign="top">
+ <td width="70px"><img src="/images/globals/Rackspace_Logo_Small.png" alt="Rackspace"></td>
+ <td class="copyright">
+ <p>Xen.org's servers are hosted with <a href="http://www.rackspace.com/">RackSpace</a>, monitoring our<br>
+ servers 24x7x365 and backed by RackSpace's Fanatical Support®.</p>
+ </td>
+ </tr>
+</table>
+
+
+<!-- Asynchronous tracking code introduced in Q1 2011 -->
+<script type="text/javascript">
+ var _gaq = _gaq || [];
+ _gaq.push(['_setAccount', 'UA-21816382-1']);
+ _gaq.push(['_setDomainName', '.xen.org']);
+ _gaq.push(['_trackPageview']);
+
+ (function() {
+ var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
+ ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
+ var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
+ })();
+</script></body>
+</html>