gpp_maybe Security update for xen

SUSE-SLE-Micro-5.4-2026-3462

This update for xen fixes the following issues - CVE-2026-42493: x86 shadow paging is deprecated (bsc#1271528). - CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling (bsc#1271530). - CVE-2026-62426,CVE-2026-62427: sysctl and platform-op locks open to abuse (bsc#1271531). - CVE-2026-62428: grant-table: type confusion in grant-copy (bsc#1271532). - CVE-2026-62429: vNUMA domain cleanup may race other operations (bsc#1271534). - CVE-2026-62430: x86: Out-of-bounds read in vRTC emulation (bsc#1271535). - CVE-2026-62431: Viridian STIMER division by zero (bsc#1271536). - CVE-2026-62432: evtchn: Race between FIFO expand and reset (bsc#1271537). - CVE-2026-62433: correct buffer checks for DM_OP hypercalls (bsc#1271538). - CVE-2026-62434: PoD: Don't try to reclaim special pages (bsc#1271539). - pygrub is only supported in de-privileged mode (XSA-508) (bsc#1271947).

• Release Date
  Aug 3 2026
• References
  Bugzilla: 1271528, 1271530, 1271531, 1271532, 1271533, 1271534, 1271535, 1271536, 1271537, 1271538, 1271539, 1271947
  CVEs: CVE-2026-42493, CVE-2026-42494, CVE-2026-42495, CVE-2026-62423, CVE-2026-62424, CVE-2026-62425, CVE-2026-62426, CVE-2026-62427, CVE-2026-62428, CVE-2026-62429, CVE-2026-62430, CVE-2026-62431, CVE-2026-62432, CVE-2026-62433, CVE-2026-62434
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Micro 5.4 x86_64

• Packages
  xen
  Xen Virtualization: Hypervisor (aka VMM aka Microkernel)

  4.16.7_12-150400.4.89.3 lock src

  xen-libs
  Xen Virtualization: Libraries

  4.16.7_12-150400.4.89.3 lock rpm