CVE-2011-1750 virtio-blk: heap buffer overflow (bz 698906, bz 698911)
CVE-2011-2527 set groups properly for -runas (bz 720773, bz 720784)
CVE-2012-0029 e1000 buffer overflow (bz 783984, bz 772075)
virtio-blk: refuse SG_IO requests with scsi=off (bz 770135)