bump openssl for CVE-2014-0160
34755 [Backport bug 32817 to 4.0.4.0] Add a xen-tools package