main/qemu: security fix for CVE-2014-5263

fixes #3324