From mboxrd@z Thu Jan  1 00:00:00 1970
From: George Dunlap <george.dunlap@citrix.com>
Subject: Re: Impact of HW vulnerabilities & Implications on
 Security Vulnerability Process
Date: Thu, 8 Sep 2016 10:29:17 +0100
Message-ID: <e8e7c341-f0bd-9148-efe4-bc3ab724b204@citrix.com>
References: <756113F8-E098-4F55-9331-AE02FF61E72D@gmail.com>
 <22480.13129.281839.14168@mariner.uk.xensource.com>
 <alpine.DEB.2.10.1609071206260.4105@sstabellini-ThinkPad-X260>
 <CAENZ-+md70E3T285vcdXkcxbHh_0cVn=3=qJ6xBiY-btGNjc9g@mail.gmail.com>
 <alpine.DEB.2.10.1609071339250.2359@sstabellini-ThinkPad-X260>
Mime-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
Return-path: <xen-devel-bounces@lists.xen.org>
Received: from mail6.bemta6.messagelabs.com ([193.109.254.103])
 by lists.xenproject.org with esmtp (Exim 4.84_2)
 (envelope-from <prvs=052383c5c=George.Dunlap@citrix.com>)
 id 1bhve6-0001q0-Ir
 for xen-devel@lists.xenproject.org; Thu, 08 Sep 2016 09:29:22 +0000
In-Reply-To: <alpine.DEB.2.10.1609071339250.2359@sstabellini-ThinkPad-X260>
List-Unsubscribe: <https://lists.xen.org/cgi-bin/mailman/options/xen-devel>,
 <mailto:xen-devel-request@lists.xen.org?subject=unsubscribe>
List-Post: <mailto:xen-devel@lists.xen.org>
List-Help: <mailto:xen-devel-request@lists.xen.org?subject=help>
List-Subscribe: <https://lists.xen.org/cgi-bin/mailman/listinfo/xen-devel>,
 <mailto:xen-devel-request@lists.xen.org?subject=subscribe>
Errors-To: xen-devel-bounces@lists.xen.org
Sender: "Xen-devel" <xen-devel-bounces@lists.xen.org>
To: Stefano Stabellini <sstabellini@kernel.org>, Meng Xu <xumengpanda@gmail.com>
Cc: Lars Kurth <lars.kurth.xen@gmail.com>, xen-devel <xen-devel@lists.xenproject.org>, Ian Jackson <ian.jackson@eu.citrix.com>, committers@xenproject.org
List-Id: xen-devel@lists.xenproject.org
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