XEN Security Update XSA-125, XSA-126

CentOS 5.x (CloudBoot HVs) with Xen 3.4.x is affected.

XSA-125Long latency MMIO mapping operations are not preemptible.
XSA-126Unmediated PCI command register access in qemu.

To eliminate the security issues for CloudBoot Hypervisors, you need to upgrade to OnApp 3.5.0-6 Storage Update.