gpp_maybe Security update for xen

SUSE-SLE-Module-Server-Applications-15-SP7-2026-2364

This update for xen fixes the following issues: - CVE-2026-42487: x86 HVM I/O port list traversal (bsc#1266952). - CVE-2026-42488: x86: mismatched mapcache metadata (bsc#1266955). - CVE-2026-42489,CVE-2026-42490: domctl lock open to abuse (bsc#1266953).

• Release Date
  Jun 11 2026
• References
  Bugzilla: 1266952, 1266953, 1266955
  CVEs: CVE-2026-42487, CVE-2026-42488, CVE-2026-42489, CVE-2026-42490
• Type
  security
• Severity
  important

cloud_download Downloads

Server Applications Module 15.7 x86_64

• Packages
  xen
  Xen Virtualization: Hypervisor (aka VMM aka Microkernel)

  4.20.3_06-150700.3.41.1 lock rpm lock src

  xen-devel
  Xen Virtualization: Headers and libraries for development

  4.20.3_06-150700.3.41.1 lock rpm

  xen-tools
  Xen Virtualization: Control tools for domain 0

  4.20.3_06-150700.3.41.1 lock rpm

  xen-tools-xendomains-wait-disk
  Adds a new xendomains-wait-disks.service

  4.20.3_06-150700.3.41.1 lock rpm