From mboxrd@z Thu Jan  1 00:00:00 1970
From: Andrew Cooper <andrew.cooper3@citrix.com>
Subject: Ongoing/future speculative mitigation work
Date: Thu, 18 Oct 2018 18:46:22 +0100
Message-ID: <e3219697-0759-39fc-2486-715cdec1ca9e@citrix.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
Return-path: <xen-devel-bounces@lists.xenproject.org>
Content-Language: en-GB
List-Unsubscribe: <https://lists.xenproject.org/mailman/options/xen-devel>,
 <mailto:xen-devel-request@lists.xenproject.org?subject=unsubscribe>
List-Post: <mailto:xen-devel@lists.xenproject.org>
List-Help: <mailto:xen-devel-request@lists.xenproject.org?subject=help>
List-Subscribe: <https://lists.xenproject.org/mailman/listinfo/xen-devel>,
 <mailto:xen-devel-request@lists.xenproject.org?subject=subscribe>
Errors-To: xen-devel-bounces@lists.xenproject.org
Sender: "Xen-devel" <xen-devel-bounces@lists.xenproject.org>
To: Xen-devel List <xen-devel@lists.xen.org>
Cc: Martin Pohlack <mpohlack@amazon.de>, Julien Grall <julien.grall@arm.com>, Jan Beulich <JBeulich@suse.com>, Joao Martins <joao.m.martins@oracle.com>, Stefano Stabellini <sstabellini@kernel.org>, Daniel Kiper <daniel.kiper@oracle.com>, Marek Marczykowski <marmarek@invisiblethingslab.com>, Anthony Liguori <aliguori@amazon.com>, "Dannowski, Uwe" <uwed@amazon.de>, Lars Kurth <lars.kurth@citrix.com>, Konrad Wilk <konrad.wilk@oracle.com>, Ross Philipson <ross.philipson@oracle.com>, Dario Faggioli <dfaggioli@suse.com>, Matt Wilson <msw@amazon.com>, Boris Ostrovsky <boris.ostrovsky@oracle.com>, Juergen Gross <JGross@suse.com>, Sergey Dyasli <sergey.dyasli@citrix.com>, Wei Liu <wei.liu2@citrix.com>, George Dunlap <george.dunlap@eu.citrix.com>, =?UTF-8?Q?Mihai_Don=c8=9bu?= <mdontu@bitdefender.com>, "Woodhouse,
 David" <dwmw@amazon.co.uk>, Roger Pau Monne <roger.pau@citrix.com>
List-Id: xen-devel@lists.xenproject.org
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