diff --git a/pkgs/applications/virtualization/xen/4.17/default.nix b/pkgs/applications/virtualization/xen/4.17/default.nix
index 6887696fcfe94..2bf93a79be0db 100644
--- a/pkgs/applications/virtualization/xen/4.17/default.nix
+++ b/pkgs/applications/virtualization/xen/4.17/default.nix
@@ -16,9 +16,6 @@ let
     with upstreamPatches;
     [
       QUBES_REPRODUCIBLE_BUILDS
-      XSA_458
-      XSA_460
-      XSA_461
     ]
   );
 in
@@ -26,12 +23,12 @@ in
 callPackage (import ../generic/default.nix {
   pname = "xen";
   branch = "4.17";
-  version = "4.17.4";
+  version = "4.17.5";
   latest = false;
   pkg = {
     xen = {
-      rev = "d530627aaa9b6e03c7f911434bb342fca3d13300";
-      hash = "sha256-4ltQUzo4XPzGT/7fGt1hnNMqBQBVF7VP+WXD9ZaJcGo=";
+      rev = "430ce6cd936546ad883ecd1c85ddea32d790604b";
+      hash = "sha256-UoMdXRW0yWSaQPPV0rgoTZVO2ghdnqWruBHn7+ZjKzI=";
       patches = [ ] ++ upstreamPatchList;
     };
     qemu = {
diff --git a/pkgs/applications/virtualization/xen/4.18/default.nix b/pkgs/applications/virtualization/xen/4.18/default.nix
index ed2df662e26e6..2aa731b6f2448 100644
--- a/pkgs/applications/virtualization/xen/4.18/default.nix
+++ b/pkgs/applications/virtualization/xen/4.18/default.nix
@@ -16,9 +16,6 @@ let
     with upstreamPatches;
     [
       QUBES_REPRODUCIBLE_BUILDS
-      XSA_458
-      XSA_460
-      XSA_461
     ]
   );
 in
@@ -26,12 +23,12 @@ in
 callPackage (import ../generic/default.nix {
   pname = "xen";
   branch = "4.18";
-  version = "4.18.2";
+  version = "4.18.3";
   latest = false;
   pkg = {
     xen = {
-      rev = "d152a0424677d8b78e00ed1270a583c5dafff16f";
-      hash = "sha256-pHCjj+Bcy4xQfB9xHU9fccFwVdP2DXrUhdszwGvrdmY=";
+      rev = "bd51e573a730efc569646379cd59ccba967cde97";
+      hash = "sha256-OFiFdpPCXR+sWjzFHCORtY4DkWyggvxkcsGdgEyO1ts=";
       patches = [ ] ++ upstreamPatchList;
     };
     qemu = {