CVE-2015-0236: missing ACL check for the VIR_DOMAIN_XML_SECURE flag in save images and snapshots objects (bz #1185769) CVE-2014-8136: local denial of service in qemu/qemu_driver.c (bz #1176179)