Comment # 2 on bug 1064061 from pgnd _

Great.  Just to understand the 'link' ...

For example, for one CVE @ SuSE

  https://www.suse.com/security/cve/CVE-2017-15594

it references the fix in

  openSUSE Leap 42.3 xen >= 4.9.0_14-10.1

That openSUSE fix *is* targeted at

  http://download.opensuse.org/repositories/Virtualization/openSUSE_Leap_42.3

? (which happens, atm, to have xen-4.10.0_01-537.1.x86_64.rpm)

Not some other openSUSE repo, correct?