We are in discussions with MITRE with a view to potentially becoming a CVE Numbering Authority. This would probably smooth the process of getting CVE numbers for XSAs.
If anyone has any opinions/representations/concerns/whatever about this, please do share them (here in this thread, or privately to security@). Thanks, Ian. _______________________________________________ Xen-devel mailing list Xen-devel@lists.xen.org https://lists.xen.org/xen-devel