shield Security update for xen

SUSE-SLE-Module-Server-Applications-15-SP7-2025-4419

This update for xen fixes the following issues: Update to Xen 4.20.2 (jsc#PED-8907). Security issues fixed: - CVE-2025-58149: incorrect removal of permissions on PCI device unplug allows PV guests to access memory of devices no longer assigned to it (XSA-476, bsc#1252692). Other issues fixed: - Failure to restart xenstored (bsc#1254180).

• Release Date
  Dec 16 2025
• References
  Bugzilla: 1252692, 1254180
  CVEs: CVE-2025-58149
• Type
  security
• Severity
  moderate

cloud_download Downloads

Server Applications Module 15.7 x86_64

• Packages
  xen
  Xen Virtualization: Hypervisor (aka VMM aka Microkernel)

  4.20.2_02-150700.3.19.1 lock rpm lock src

  xen-devel
  Xen Virtualization: Headers and libraries for development

  4.20.2_02-150700.3.19.1 lock rpm

  xen-tools
  Xen Virtualization: Control tools for domain 0

  4.20.2_02-150700.3.19.1 lock rpm

  xen-tools-xendomains-wait-disk
  Adds a new xendomains-wait-disks.service

  4.20.2_02-150700.3.19.1 lock rpm