SUSE-SU-2025:4419-1

This update for xen fixes the following issues:

Update to Xen 4.20.2 (jsc#PED-8907).

Security issues fixed:

CVE-2025-58149: incorrect removal of permissions on PCI device unplug allows PV guests to access memory of devices no longer assigned to it (XSA-476, bsc#1252692).

Other issues fixed:

xen

SUSE Linux Enterprise Module for Basesystem 15 SP7SUSE Linux Enterprise Module for Server Applications 15 SP7

Fixed in:

4.20.2_02-150700.3.19.1

xen-libs

SUSE Linux Enterprise Module for Basesystem 15 SP7

Fixed in:

4.20.2_02-150700.3.19.1

xen-tools-domU

SUSE Linux Enterprise Module for Basesystem 15 SP7

Fixed in:

4.20.2_02-150700.3.19.1

xen-devel

SUSE Linux Enterprise Module for Server Applications 15 SP7

Fixed in:

4.20.2_02-150700.3.19.1

xen-tools

SUSE Linux Enterprise Module for Server Applications 15 SP7

Fixed in:

4.20.2_02-150700.3.19.1

xen-tools-xendomains-wait-disk

SUSE Linux Enterprise Module for Server Applications 15 SP7

Fixed in:

4.20.2_02-150700.3.19.1