Xen has acknowledged an oversight where it failed to provide a pair of crucial security patches in its most recent update.