main/xen: security fix for XSA-97 (CVE-2014-5146,CVE-2014-5149)

ref #3290