[Pkg-xen-devel] Xen security update for XSA-238, XSA-250, XSA-251, XSA-249 / Meltdown shim?

[Ian Jackson]

Moritz Muehlenhoff writes ("Re: Xen security update for XSA-238, XSA-250, XSA-251, XSA-249 / Meltdown shim?"):
> On Tue, Jan 16, 2018 at 06:59:11PM +0000, Ian Jackson wrote:
> > Hi.  I think I can probably find time to do that soon.
> > We (upstream) have a possible PTI-style Meltdown mitigation too but
> > it's not in today's update.
> 
> Great!

I have just sent
  xen 4.8.3+comet2+shim4.10.0+comet3-1+deb9u4
(yes, really!) to security-master-unembargoed.

I have run the amd64 build through my usual tests.  The underlying
code is straight from upstream, although I did have to merge two
separate branches to gain both the PTI and Comet mitigations for
Meltdown.

Ian.