From mboxrd@z Thu Jan  1 00:00:00 1970
From: George Dunlap <george.dunlap@citrix.com>
Subject: Re: Ongoing/future speculative mitigation work
Date: Mon, 10 Dec 2018 12:19:18 +0000
Message-ID: <3c9f59d6-88a3-7cbb-1838-fd691017a3ef@citrix.com>
References: <e3219697-0759-39fc-2486-715cdec1ca9e@citrix.com>
 <20181207184051.l6owpsjvecog6zhx@zion.uk.xensource.com>
 <3e7b96cf-fe5f-604f-75f8-4919737d7e63@citrix.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
Return-path: <xen-devel-bounces@lists.xenproject.org>
In-Reply-To: <3e7b96cf-fe5f-604f-75f8-4919737d7e63@citrix.com>
Content-Language: en-US
List-Unsubscribe: <https://lists.xenproject.org/mailman/options/xen-devel>,
 <mailto:xen-devel-request@lists.xenproject.org?subject=unsubscribe>
List-Post: <mailto:xen-devel@lists.xenproject.org>
List-Help: <mailto:xen-devel-request@lists.xenproject.org?subject=help>
List-Subscribe: <https://lists.xenproject.org/mailman/listinfo/xen-devel>,
 <mailto:xen-devel-request@lists.xenproject.org?subject=subscribe>
Errors-To: xen-devel-bounces@lists.xenproject.org
Sender: "Xen-devel" <xen-devel-bounces@lists.xenproject.org>
To: Wei Liu <wei.liu2@citrix.com>, Andrew Cooper <andrew.cooper3@citrix.com>
Cc: Martin Pohlack <mpohlack@amazon.de>, Julien Grall <julien.grall@arm.com>, Jan Beulich <JBeulich@suse.com>, Joao Martins <joao.m.martins@oracle.com>, Stefano Stabellini <sstabellini@kernel.org>, Daniel Kiper <daniel.kiper@oracle.com>, Marek Marczykowski <marmarek@invisiblethingslab.com>, Anthony Liguori <aliguori@amazon.com>, "Dannowski, Uwe" <uwed@amazon.de>, Lars Kurth <lars.kurth@citrix.com>, Konrad Wilk <konrad.wilk@oracle.com>, Ross Philipson <ross.philipson@oracle.com>, Dario Faggioli <dfaggioli@suse.com>, Matt Wilson <msw@amazon.com>, Boris Ostrovsky <boris.ostrovsky@oracle.com>, Juergen Gross <JGross@suse.com>, Sergey Dyasli <sergey.dyasli@citrix.com>, George Dunlap <george.dunlap@eu.citrix.com>, Xen-devel List <xen-devel@lists.xen.org>, =?UTF-8?Q?Mihai_Don=c8=9bu?= <mdontu@bitdefender.com>, "Woodhouse,
 David" <dwmw@amazon.co.uk>, Roger Pau Monne <roger.pau@citri>
List-Id: xen-devel@lists.xenproject.org
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