[Info-vax] Coordinated response between HP and VSI for VMS security issues ?

[David Froble]

Simon Clubley wrote:
> Stephen's comments with regards to OpenSSL brought to mind another
> related issue.
> 
> In the event of a VMS security issue being reported to only one of
> either HP or VSI are there formal procedures in place to make sure
> the other company is notified ?
> 
> IOW, is there a formal security coordination process between HP and
> VSI when it comes to VMS itself and the VMS layered products ?
> 
> As part of that, do HP and VSI have plans in place to do coordinated
> releases of patches for security issues which affect both HP VMS and
> VSI VMS ?
> 
> Thanks,
> 
> Simon.
> 

Your question makes an assumption that is quite likely, in my opinion, invalid. 
  Specifically, that HP gives a damn ....