mercurial http://chargen.matasano.com/chargen/2015/3/17/this-new-vulnerability-mercurial-command-injection-cve-2014-9462.html gcpio CVE-2014-9112 CVE-2015-1197 libvirt? - CVE-2014-8136 - Can't find any reference to the CVE in the release notes so It may not be an issue.
