Posted by Demi Marie Obenour on Oct 04 - Xen Project already has its own predisclosure list. - KVM (sadly) falls under the Linux kernel security process. - Cloud Hypervisor and QEMU have their own processes. - Not sure about Firecracker. Not sure if a centralized one makes sense, unless there are individual components used by many providers that don't fall into one of the above categories.

Read the full article at oss-security →