Xen fixes another “virtual machine escape” bug

Last time it was the floppy disk drive that let crooks squeeze out of jail – this time, the virtual CD-ROM is their springboard…