Just a heads up, the changelog for the xen package says * Thu Oct 22 2015 George Dunlap <george.dunlap at citrix.com> - 4.4.3-2.el6.centos - Import XSAs 149-153 The source RPM also has the patch for XSA 148, as shown in the git log. Regards, Sarah