Draft: main/xen: add mitigations for XSA-426

Closed omni requested to merge omni/aports:secpatch-xen-3.17 into 3.17-stable

Merge request reports