I was surprised to see that Qihoo 360 was credited in most of the qemu CVEs from earlier this week:<p><a href="https:&#x2F;&#x2F;www.debian.org&#x2F;security&#x2F;2016&#x2F;dsa-3471" rel="nofollow">https:&#x2F;&#x2F;www.debian.org&#x2F;security&#x2F;2016&#x2F;dsa-3471</a>