In reply to comment #3:
* 3 of the packages built from the xen source package in Bionic are in main: libxen-4.9, libxen-dev and libxenstore3.0. According to the history of tools/libxl in upstream Git, the patches for CVE-2019-18424 and CVE-2020-0543 modified the source code for libxenlight, that is compiled into libxen-4.9.
* Why did the Ubuntu Security Team provide full updates for Xen in Ubuntu 14.04 and 16.04 until October 2017, and then stop providing them? For these releases, 5 and 3 binary packages built from this source package are in main, respectively.
In reply to comment #3:
* 3 of the packages built from the xen source package in Bionic are in main: libxen-4.9, libxen-dev and libxenstore3.0. According to the history of tools/libxl in upstream Git, the patches for CVE-2019-18424 and CVE-2020-0543 modified the source code for libxenlight, that is compiled into libxen-4.9.
* Why did the Ubuntu Security Team provide full updates for Xen in Ubuntu 14.04 and 16.04 until October 2017, and then stop providing them? For these releases, 5 and 3 binary packages built from this source package are in main, respectively.