- CVE-2014-8135: libvirt: local denial of service in storage driver
87b9437f-CVE-2014-8135.patch
bsc#910860
- CVE-2014-8136: libvirt: local denial of service in qemu driver
2bdcd29c-CVE-2014-8136.patch
bsc#910862

- CVE-2014-8131: Fix possible deadlock and segfault in
qemuConnectGetAllDomainStats()
57023c0a-CVE-2014-8131.patch, cb104ef7-CVE-2014-8131.patch
bsc#909274

- Get /proc/sys/net/ipv[46] read-write for wicked to work in
containers. bsc#904432. ba9b7252-sys-net-rw.patch

- Fix potential crasher in virt-aa-helper
2222123-virt-aa-helper-crash.patch
- ip link add now needs the 'name' parameter.
433b427-iplink-name.patch
- Fixes for virt-sandbox-service to work:
- Allow adding virt-sandbox service config to apparmor rules.
c264eea-virt-aa-helper-sandbox.patch
- fix symlink resolving for containers to start.
72fecf1-lxc-resolve-symlinks.patch
- fix unmounting file system if it contains the source to mount.
e50457d-lxc-unmount-check.patch

- Remove security_driver = "none" in qemu config. This completely
disabled all security drivers instead of probing them.
- Changed default value of QEMU's security_default_confined to 0 to
keep QEMU domains unconfined by default.