Re: Xen Security Advisory 466 v3 (CVE-2024-53241) - Xen hypercall page unsafe against speculative attacks

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--------------wp0qlsW66f4Ym0lcgmYGpqv0
Content-Type: multipart/mixed; boundary="------------XZSu9UgLyITEawqz3bzsrt5z";
 protected-headers="v1"
From: =?UTF-8?B?SsO8cmdlbiBHcm/Dnw==?= <[email protected]>
To: David Woodhouse <[email protected]>,
 "Xen.org security team" <[email protected]>, [email protected],
 [email protected], [email protected],
 [email protected]
Cc: "Xen.org security team" <[email protected]>
Message-ID: <[email protected]>
Subject: Re: Xen Security Advisory 466 v3 (CVE-2024-53241) - Xen hypercall
 page unsafe against speculative attacks
References: <[email protected]>
 <[email protected]>
 <[email protected]>
 <[email protected]>
 <[email protected]>
 <[email protected]>
 <[email protected]>
 <[email protected]>
In-Reply-To: <[email protected]>
Autocrypt-Gossip: [email protected]; keydata=
 xsBNBE+hNqgBCADYua5OFR0/Jeu0rByk+Obk6+SewIeGej1FAcjo+Cvpcr1dfnLBAhmmhbfM
 b++qr6SG6Ek+cUQogYAFvZcEcusbRPy4MIzJkqoPSyOUhCxZoxWNWUfhDdt0TWA3Hs1vYmFO
 e+2jvlL3h7yAsGMYO8jo6ow8ceBEOmf8Q5BLq2OPkNpGcaHEhbSv0VZ3mdHM30ynY6GubIws
 c68LZ5hTORTSjKaj2WVCe4OorBMZte5Im+6MOEUbCjynqPJSU9KNFhIhUuyXp1vn0gZ2N5QS
 pkghpzBJLzeBNEI6ecV3Q0p+/pq8EvEAuUSNLUEbIZ/NSLqyTVMc9HZxnPu59im8wB9rABEB
 AAHNK1hlbi5vcmcgKGluY29taW5nIGVtYWlsKSA8c2VjdXJpdHlAeGVuLm9yZz7CwHgEEwEC
 ACIFAk+hNqgCGwMGCwkIBwMCBhUIAgkKCwQWAgMBAh4BAheAAAoJEHQ6P8qC06lk1y0H/2Pj
 jQyPDZVS4zIVnR4xQOQ1KphPCdSTPlhj+VVrjZZNXWGCUKvJShL84XIONH62fIgQE/6CTWXJ
 tx6i4u1oAtFH4+8HayFjg609lxx9frJ4tJkJitw5TT6VEGAambchIG5QaP9hepgyrVXjQ0X2
 ot0jgpwL6G3sx0L1gewiMALXtGT6oTqLjXius/nv69yRe26wxU1GX80oWWH/5p585xt54C1X
 nhDEVzp0S9UW7VAAVDCWuSefSrihh3jZi4QE1fnGRwO0RfeLh1sXeuMn9uFIz0CmaCbAp5Pe
 UyNb6wgG60h4JLCDyhJntoHfq8pQLEJ8G9nvjDfw8BLvkBKYNvbOwE0ET6E2qAEIALqWNlGF
 d3uIj+DXZ40/i7fsoPb+HaYaG6Y+7+ZWxMxUeQDTLBnTYiAa+EGVutc4v52BXH8RZc9I/NH9
 lBT2/AwaEVSomxLicbixXUGoFC9kMp/VP1xwWJ+gm+ZEnQzY+2AFJGMvqEsGocQA7yLw121J
 UOrorny3CqpHykPUF3fqp4n/GL47VTaKxlsoV8o2JgZZ62NJlkBtnbA4ODzhWr6cA21smWFg
 sfFJ+EkXb1NEeYLs8CWtTn2EiQXlZTQ8OgBPahfvLZ+AJ4sM/Raoi2c3UIQrlCsg9BoojKMk
 Li8XUrywr8HEJYjhBYObCgbmaeIEfmrw5XJqOKlMg40XY+MAEQEAAcLAXwQYAQIACQUCT6E2
 qAIbDAAKCRB0Oj/KgtOpZDhJB/0XtxrlVuRttpjK1PEYK/A/9h47VH9p0UvVYCH+ZS2a+sTg
 sapx0zp4uni8wtytkvGw/EM06D4ZoaWAUcjXILNKGdi62q/z+WAfdEY/WrONxAbr2Dtv/LT0
 0/2nifYU9O1vGYS1Kx/B3D8fU0w+2Sjv+hYjbGDWn619etC8dNEIxczH6V/cVOZf0D2KhoBf
 MCHUoKeuAfaIKDMxOZjb7sajfUW70cxFFWYqH96Py01oxDroOKzy0x62iVdsYFGB3FvcD9tD
 WsxVWwGHA8DKEfKMuNPiuapzdxdrNm5AQilSUlfD65KK9d3kQdoOUPdPWoIQnz8GnHMPDe99
 7SuwxWGb

--------------XZSu9UgLyITEawqz3bzsrt5z
Content-Type: multipart/mixed; boundary="------------Kd70v4fuM69COeWUhTNOl0ty"

--------------Kd70v4fuM69COeWUhTNOl0ty
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: base64
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--------------Kd70v4fuM69COeWUhTNOl0ty
Content-Type: application/pgp-keys; name="OpenPGP_0xB0DE9DD628BF132F.asc"
Content-Disposition: attachment; filename="OpenPGP_0xB0DE9DD628BF132F.asc"
Content-Description: OpenPGP public key
Content-Transfer-Encoding: quoted-printable

-----BEGIN PGP PUBLIC KEY BLOCK-----
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3D
=3DeeAB
-----END PGP PUBLIC KEY BLOCK-----

--------------Kd70v4fuM69COeWUhTNOl0ty--

--------------XZSu9UgLyITEawqz3bzsrt5z--

--------------wp0qlsW66f4Ym0lcgmYGpqv0
Content-Type: application/pgp-signature; name="OpenPGP_signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="OpenPGP_signature.asc"

-----BEGIN PGP SIGNATURE-----

wsB5BAABCAAjFiEEhRJncuj2BJSl0Jf3sN6d1ii/Ey8FAmd2n8sFAwAAAAAACgkQsN6d1ii/Ey+L
lAgAn+fIhEjUYurkgBAivjBO694YEf7TyDEK+2OkOJzVZHnswXXgeFXAPcC8ztKTHperiCVkHumW
9AYeT+viZlCYlspgSGSdSKnhOrZ999iC0NxD3qUZDcKbH/ZGHdEnwZNEVh71BYeAANE+40h654zy
fk9jGOsveaakcdj2TpNu4I1PoePszaI7PjNPmVa4/pOuJD9cqF9GERP4aqRW35YxRwERd+GPcBd3
jYQySoR41YFKrT4t3b4SzSqb16Whf3YpP7xRYxm3AqLGDsPgaXdKhiRYMOfn4Vc84dL+1E0FEaMY
1RPwI9+7tSIiwIfsoWq2FcxUPmSMsuAXmqIKZH+G4w==
=PsMF
-----END PGP SIGNATURE-----

--------------wp0qlsW66f4Ym0lcgmYGpqv0--