[PATCH openEuler-1.0-LTS 00/14] fixes CVEs for xen