crobinso pushed to qemu (f21). "CVE-2015-5255: heap memory corruption in vnc_refresh_server_surface (bz #1255899)"