>>> On 02.03.15 at 15:05, <stefano.stabell...@eu.citrix.com> wrote: > I guess I could monitor cve.mitre.org or the QEMU stable tree for > commits with "CVE" in the commit message, but there isn't much else I > can do.
Yes, I think the latter is (for the time being) the most promising route. Question is how much work it is going to be to find out about past ones. Jan _______________________________________________ Xen-devel mailing list Xen-devel@lists.xen.org http://lists.xen.org/xen-devel